0d532cc3f2
Test DTLS replay protection
2025-08-07 19:52:05 +02:00
2dfc7eee89
wolfcrypt/src/sp_int.c: in _sp_exptmod_nct(), use 2 bit window if bits <= 21.
2025-08-07 10:26:34 -05:00
40506a6ddf
Revert "SP int: modular exponentiation constant time" (fixes regression in benchmark "RSA,2048,public").
...
This reverts commit 219509d7d9
2025-08-07 10:14:02 -05:00
5a8b86da5d
Merge pull request #9054 from gojimmypi/pr-please-use-debug-wolfssl
...
Please use DEBUG_WOLFSSL not WOLFSSL_DEBUG
2025-08-07 07:42:42 -07:00
782d0b9828
remove casts
2025-08-07 08:23:38 -06:00
b4d186004c
Merge pull request #9070 from miyazakh/cb_sha224
...
Support sha224 cryptocb
2025-08-07 07:07:05 -07:00
e6eac9b920
Fix inconsistent function prototype parameter names for wolfssl
2025-08-07 09:28:50 -04:00
61f1223f1d
Fix inconsistent function prototype parameter names for wolfcrypt
2025-08-07 08:02:56 -04:00
648a057147
ML-DSA/Dilithium: Intel x64 ASM
...
Optimize code knowing it is for Intel x64.
Change signing to calculate one polynomial at a time so that if it isn't
valid then we fail early.
Other minor improvements.
Move the SHA-3 4 blocks at a time assembly into SHA-3 asm file.
Make constants in assembly the same length (front pad with zeros).
2025-08-07 14:01:50 +10:00
07b3695b98
wc_Sha224Final also needs to call cb
2025-08-07 09:50:06 +09:00
d1bf35b209
add sha224_test() call to cryptocb test
2025-08-07 08:14:26 +09:00
ccdef57e8e
add sha224 cryptcb
2025-08-07 07:49:53 +09:00
d64ef34ef8
Introduce WOLFSSL_DEBUG_CERTS Certificate Debug Messages
2025-08-06 13:57:53 -07:00
33d0e1e51c
Fix MISRA rule 3.1 violations
2025-08-06 12:08:15 -04:00
339f7efbf4
Merge pull request #9066 from holtrop/fix-misra-8.2-violations
...
fe_operations.h: fix MISRA rule 8.2 violations by naming function prototype parameters
2025-08-06 11:04:44 -05:00
cc137e99fe
Merge pull request #8900 from SparkiDev/rsa_mod_exp_nct
...
SP int: modular exponentiation constant time
2025-08-06 11:04:28 -05:00
753a6b1083
Merge pull request #9063 from SparkiDev/sha3_xorbuf
...
SHA-3 C code: use xorbuf for little-endian builds
2025-08-06 11:04:10 -05:00
76c4ee9ff5
Merge pull request #9056 from SparkiDev/asn_orig_decrypt_content_fix
...
ASN.1 original: Fix DecryptContent to check sequence len
2025-08-06 11:03:49 -05:00
b8463dc5c1
Merge pull request #9062 from kareem-wolfssl/gh9059
...
Fix wolfSSL_i2d_PublicKey not returning SPKI format for ECC keys.
2025-08-06 11:03:28 -05:00
8e5e273aca
Merge pull request #9044 from JacobBarthelmeh/docs
...
add static memory doxygen comments for APIs
2025-08-06 11:02:57 -05:00
8e77ee5c2a
Merge pull request #9064 from SparkiDev/test_api_c_split_2
...
api.c: split out more tests into separate files
2025-08-06 10:51:25 -05:00
53eedd4b38
Merge pull request #9041 from julek-wolfssl/zero-sha->buffer
...
Zero sha->buffer
2025-08-06 10:50:53 -05:00
8ff0f455f8
Merge pull request #9067 from douzzer/20250805-clang-and-linuxkm-fixes
...
20250805-clang-and-linuxkm-fixes
2025-08-06 05:59:49 -07:00
53ae865184
Addressed code review
2025-08-06 19:13:20 +09:00
e9292e301f
add _new/_delete API for ML-KEM/ML-DSA
2025-08-06 16:52:15 +09:00
36e0e3aa53
Fix wolfSSL_i2d_PublicKey not returning SPKI format for ECC keys.
2025-08-05 17:20:47 -07:00
034cbb9b97
tests/api.c: fix -Wuninitialized-const-pointer in test_wolfSSL_CertManagerAPI();
...
wolfcrypt/benchmark/benchmark.c:
* use WC_RELAX_LONG_LOOP() as default definition of TEST_SLEEP(), and remove WC_RELAX_LONG_LOOP() from bench_stats_sym_finish()/bench_stats_asym_finish_ex();
* when WOLFSSL_LINUXKM but !WOLFSSL_LINUXKM_USE_SAVE_VECTOR_REGISTERS., properly wrap kernel_fpu_begin...end around floating point ops.
2025-08-05 17:05:36 -05:00
dbb75c46c9
ASN.1 original: Fix DecryptContent to check sequence len
...
Original ASN.1 code wasn't checking that data in a sequence didn't
exceed the length of the sequence.
In particular, the contents of the parameters and the PKCS#5 parameters.
2025-08-06 07:42:09 +10:00
d0f8493c6a
SHA-3 C code: use xorbuf for little-endian builds
...
Instead of loading 64-bits with alignment protection, use xorbuf which
has built in protection.
Only XOR in as much data as cached and XOR padding and rate bit directly
rather than XORing maximum amount after clearing out rest of array and
adding in padding and rate bit.
2025-08-06 07:39:53 +10:00
219509d7d9
SP int: modular exponentiation constant time
...
Using a 1-bit window size for small exponentsisn't useful.
2025-08-06 07:38:37 +10:00
7c9327a36b
Please use DEBUG_WOLFSSL not WOLFSSL_DEBUG
2025-08-05 12:19:30 -07:00
90d4efa1e6
fe_operations.h: fix MISRA rule 8.2 violations by naming function prototype parameters
2025-08-05 13:09:42 -04:00
1693f72af7
Fixes for issues copilot found.
2025-08-05 07:22:04 -07:00
649b6ede69
Merge pull request #9058 from kojiws/fix_cid_535964
...
Fix CID 535964
2025-08-05 07:08:59 -07:00
b40e3d479f
api.c: split out more tests into separate files
...
wolfCrypt PKCS7
wolfCrypt PKCS12
OpenSSL compat ASN.1
OpenSSL compat BN
OpenSSL comppat BIO
OpenSSL comppat Digest
OpenSSL comppat MAC
OpenSSL comppat Cipher
OpenSSL comppat RSA
OpenSSL comppat DH
OpenSSL comppat EC
OpenSSL comppat ECX
OpenSSL comppat DSA
2025-08-05 19:32:56 +10:00
bfb2a817e3
Fix CID 535964
2025-08-05 13:25:42 +09:00
8e52978153
Merge pull request #9061 from gojimmypi/pr-fix-haproxy-workflow
...
Update HAProxy build-vtest: fix v3.1.0 and add v3.2.0
2025-08-04 19:57:15 -07:00
6e795f149c
Update HAProxy build-vtest: fix v3.1.0 and add v3.2,0
2025-08-04 12:38:27 -07:00
c22c37df09
Merge pull request #9055 from rlm2002/zd20212
...
Coverity changes
2025-08-04 10:34:29 -06:00
598a3e6232
check return value of wc_DhGetNamedKeyParamSize
2025-08-01 14:56:35 -06:00
040e2102a8
Merge pull request #9049 from kojiws/import_mldsa_seed_pkcs8_reapply
...
Reapply - Import ML-DSA's seed from PKCS8 file
2025-08-01 14:34:09 -06:00
367e3e4246
fix for wolfSSL_StaticBufferSz_ex function signature
2025-08-01 10:32:41 -06:00
0392ee009f
Merge pull request #9033 from anhu/mlkem-hybrid-draft-names-wolfssl
...
Rename ML-KEM hybrids to match IETF Draft.
2025-08-01 10:21:54 -06:00
8e6b13822b
fix trailing whitespace, adding files to am and know macro
2025-08-01 17:36:23 +09:00
a63bb12f6b
Move devId from internal to public
...
- addressed code review by devin
2025-08-01 16:58:16 +09:00
65e7f2c40f
Merge pull request #9051 from lealem47/zd20288
...
Sniffer: Fix infinite recursion caused by an OOO appData packet
2025-07-31 14:50:36 -06:00
86adcd6c8e
Merge pull request #9048 from douzzer/20250730-linuxkm-tweaks
...
20250730-linuxkm-tweaks
2025-07-31 14:36:56 -06:00
1152d612a6
wolfcrypt/benchmark/benchmark.c: smallstack refactors for bench_mlkem() and bench_dilithiumKeySign(), and globally replace stray uses of fprintf(stderr, ...) with printf(...) for portability.
2025-07-31 11:30:42 -05:00
bbd606538a
linuxkm/linuxkm_wc_port.h, linuxkm/x86_vector_register_glue.c, linuxkm/Kbuild:
...
* rename can_save_vector_registers_x86(), save_vector_registers_x86(), and restore_vector_registers_x86(), with wc_ prefix, and properly export them;
* move setup for WOLFSSL_LINUXKM_USE_SAVE_VECTOR_REGISTERS outside BUILDING_WOLFSSL gate;
* fix !BUILDING_WOLFSSL bindings for DISABLE_VECTOR_REGISTERS() to properly fall through to no-ops in !WOLFSSL_LINUXKM_USE_SAVE_VECTOR_REGISTERS configs, and properly #error if WOLFSSL_LINUXKM_USE_SAVE_VECTOR_REGISTERS but !CONFIG_X86;
.github/workflows/linuxkm.yml: --enable-linuxkm-benchmarks for additional coverage.
2025-07-31 10:37:39 -05:00
0e8aab241d
Sniffer: Fix infinte recursion caused by an OOO appData packet
2025-07-31 09:31:59 -06:00
Juliusz Sosinowicz
Daniel Pouzzner
David Garske
Ruby Martin
Josh Holtrop
Sean Parkinson
Hideki Miyazaki
gojimmypi
Masaki Iwai
Kareem
Koji Takeda
JacobBarthelmeh
Lealem Amedie