26178 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
David Garske	6ae0ecc5f3	Merge pull request #9133 from AlexLanzano/log-fix ... Fix value comparison typo in if statement	2025-08-25 14:09:20 -07:00
David Garske	cfee026f98	Merge pull request #9131 from embhorn/zd20429 ... Fix markdown in docs	2025-08-25 14:08:30 -07:00
JacobBarthelmeh	e0913c47ef	Merge pull request #9039 from tamasan238/for-pr-1 ... Add _new/_delete API for ML-KEM/ML-DSA	2025-08-25 14:47:07 -06:00
Alex Lanzano	8207053636	Fix value comparison typo in if statement	2025-08-25 13:56:35 -04:00
Eric Blankenhorn	6ab6634efc	Fix markdown in docs	2025-08-25 09:28:08 -05:00
Sean Parkinson	ffbcd4f86c	Merge pull request #9125 from douzzer/20250819-linuxkm-fips-v5-wc_GenerateSeed_IntelRD ... 20250819-linuxkm-fips-v5-wc_GenerateSeed_IntelRD	2025-08-25 21:37:35 +10:00
Daniel Pouzzner	d9467db007	wolfssl/wolfcrypt/types.h: fix bugprone-macro-parentheses in definition of DISABLE_VECTOR_REGISTERS.	2025-08-22 23:43:36 -05:00
Daniel Pouzzner	e0383b496a	linuxkm/module_hooks.c: implement wc_linuxkm_GenerateSeed_IntelRD, gated on WC_LINUXKM_RDSEED_IN_GLUE_LAYER; ... add WC_GENERATE_SEED_DEFAULT, which defaults to wc_GenerateSeed if not overridden, and replace wc_GenerateSeed with WC_GENERATE_SEED_DEFAULT in various calls to wc_SetSeed_Cb(); linuxkm/linuxkm_wc_port.h: if FIPS <v6 and RDSEED, define WC_LINUXKM_RDSEED_IN_GLUE_LAYER and define WC_GENERATE_SEED_DEFAULT wc_linuxkm_GenerateSeed_IntelRD; wolfcrypt/test/test.c: update rng_seed_test() with gating and vectors for FIPS v5 with HAVE_AMD_RDSEED or HAVE_INTEL_RDSEED; wolfssl/wolfcrypt/types.h: add WC_HAVE_VECTOR_SPEEDUPS helper macro, and enlarge fallthrough definition coverage for DISABLE_VECTOR_REGISTERS.	2025-08-22 21:58:00 -05:00
JacobBarthelmeh	6f567bbca2	Merge pull request #9122 from julek-wolfssl/hostap-fix-cert-update ... Fix hostap cert update	2025-08-22 15:28:19 -06:00
JacobBarthelmeh	9575c69d3b	Merge pull request #9121 from douzzer/20250819-linuxkm-pie-normalize_relocs ... 20250819-linuxkm-pie-normalize_relocs	2025-08-22 15:11:48 -06:00
JacobBarthelmeh	bc5b297d33	Merge pull request #9046 from kareem-wolfssl/zd20038 ... Allow setting the CA type when loading into cert manager and unloading specific CA types from the cert manager.	2025-08-22 14:43:46 -06:00
David Garske	1f579afc66	Merge pull request #9117 from SparkiDev/tls13_ks_fix ... TLS 1.3 KeyShare: error on duplicate group	2025-08-22 12:54:54 -07:00
David Garske	0d1e9c3264	Fix whitespace issue and known macros list	2025-08-22 12:48:55 -07:00
Juliusz Sosinowicz	4043dc2dd0	Fix hostap cert update ... Update the `rsa3072-*` certs to get `suite_b_192_*` tests passing	2025-08-22 17:24:49 +02:00
Daniel Pouzzner	af4e2d127f	linuxkm/: implement wc_linuxkm_pie_reloc_tab and wc_linuxkm_normalize_relocations(), and integrate with updateFipsHash().	2025-08-22 00:38:06 -05:00
David Garske	7ab4c6fa14	Merge pull request #9087 from JacobBarthelmeh/dhuk ... initial SAES and DHUK support	2025-08-21 14:32:20 -07:00
David Garske	da8ffd5762	Merge pull request #8463 from JacobBarthelmeh/sgx ... updating the build with SGX	2025-08-21 11:06:35 -07:00
JacobBarthelmeh	42c5324962	SAES does not have GCM support, added IV option for CBC wrapping of key	2025-08-21 09:26:40 -06:00
Sean Parkinson	d66c69eaec	Merge pull request #9079 from holtrop/error-getshortint-on-negative-values ... Error from GetShortInt with negative INTEGER values	2025-08-21 08:35:17 +10:00
Sean Parkinson	b3366acdaf	Merge pull request #9103 from rlm2002/zd20314-reduce-binary-footprint ... Exclude assembly files when WOLFSSL_ARMASM_INLINE is defined	2025-08-21 08:33:39 +10:00
Sean Parkinson	b1cdf0b214	TLS 1.3 KeyShare: error on duplicate group ... Don't allow a KeyShare extension from the client to have more than one entry for any group.	2025-08-21 08:23:31 +10:00
JacobBarthelmeh	658c3d69fb	use memset, fix unlock, adjust return value checks	2025-08-20 13:53:27 -06:00
JacobBarthelmeh	993099e47e	Merge pull request #9114 from douzzer/20250819-debug-trace-errcodes-dist-artifacts ... 20250819-debug-trace-errcodes-dist-artifacts	2025-08-20 10:48:38 -06:00
David Garske	79fe6e467b	Merge pull request #9112 from SparkiDev/tls13_onlyDhePskKe_fix ... TLS 1.3: Fix for onlyDhePskKe	2025-08-20 06:44:08 -07:00
David Garske	596e211a97	Merge pull request #9113 from SparkiDev/tls13_certvfy_sigalg_check ... TLS 1.3: CertificateVerify - check sig alg was sent	2025-08-20 06:44:03 -07:00
Josh Holtrop	d2f139c9b0	Error from GetShortInt with negative INTEGER values - Add WORD8 case	2025-08-20 09:34:19 -04:00
Ruby Martin	0e6e040039	formatting remove whitespace ... format whitespace so tabs are 4 spaces format character count to be 80 characters or less per line remove bracket	2025-08-19 17:08:53 -06:00
Daniel Pouzzner	5f7e2389d9	wolfssl/include.am: include wolfssl/debug-trace-error-codes.h and wolfssl/debug-untrace-error-codes.h in dist archives.	2025-08-19 17:09:58 -05:00
JacobBarthelmeh	8119034555	work around for shellcheck warning	2025-08-19 14:32:34 -06:00
JacobBarthelmeh	23498c293e	cpuid dummy call with sgx and fix assembly SP + SGX build	2025-08-19 14:32:33 -06:00
JacobBarthelmeh	44784729c0	touch up clean script and comment out sp-asm for now	2025-08-19 14:32:33 -06:00
JacobBarthelmeh	59ac260ae8	add option for building sgx with assembly optimizations	2025-08-19 14:32:33 -06:00
JacobBarthelmeh	9cdbc03a23	Merge pull request #9111 from douzzer/20250818-configure-linuxkm-fips-v5 ... 20250818-configure-linuxkm-fips-v5	2025-08-19 14:31:08 -06:00
Josh Holtrop	98b6b92a76	Error from GetShortInt with negative INTEGER values	2025-08-19 12:40:48 -04:00
Sean Parkinson	2810656242	TLS 1.3: CertificateVerify - check sig alg was sent ... Check that the signature algorithm used in the CertificateVerify message was one that was sent in the SignatureAlgorithm extension.	2025-08-19 16:27:19 +10:00
Sean Parkinson	cd55fe6135	TLS 1.3: Fix for onlyDhePskKe ... Make client enforce onlyDhPskKe flag.	2025-08-19 14:29:30 +10:00
Daniel Pouzzner	b9cc060340	configure.ac: tweaks for ENABLED_LINUXKM_DEFAULTS and FIPS v5.	2025-08-18 18:21:57 -05:00
JacobBarthelmeh	c089abe92f	add macro to list	2025-08-18 16:47:30 -06:00
Ruby Martin	27d03fce7a	additional check for ARM ASM Inline option ... append thumb2 files, append inline c files with BUILD_ARMASM_INLINE add all asm files. move curve25519 files under BUILD_CURVE25519 include remaining files	2025-08-18 15:41:43 -06:00
David Garske	f114f2cde2	Merge pull request #9093 from kareem-wolfssl/zd20372 ... Multiple fixes to wolfSSL_CIPHER_description to match documentation.	2025-08-18 13:43:53 -07:00
JacobBarthelmeh	fb6375551b	updating unwrap/wrap with use of DHUK	2025-08-18 13:38:26 -06:00
Sean Parkinson	43f94a5d7d	Merge pull request #9107 from douzzer/20250816-cpuid_get_flags_ex-optimize ... 20250816-cpuid_get_flags_ex-optimize	2025-08-18 22:13:44 +10:00
Sean Parkinson	0ba16a9c5b	Merge pull request #9104 from kojiws/export_long_key_orig_asn ... Improve original implementation on SetAsymKeyDer() and the test	2025-08-18 22:11:25 +10:00
Daniel Pouzzner	39c6c5af6f	wolfcrypt/src/cpuid.c, wolfssl/wolfcrypt/cpuid.h: change cpuid_flags_t to a ... regular word32, and use non-atomics for general flag checking, with a new implementation of cpuid_get_flags_ex() that is threadsafe by idempotency; rename strictly-threadsafe cpuid_get_flags_ex() as cpuid_get_flags_atomic() (strictly accurate return value), and add cpuid_flags_atomic_t and WC_CPUID_ATOMIC_INITIALIZER, used only for internal manipulation of flags in cpuid.c where atomicity matters.	2025-08-16 13:04:28 -05:00
lealem47	b096d9b250	Merge pull request #9106 from dgarske/zd20399 ... Fix sniffer issue handling TLS records with multiple handshake messages to be skipped	2025-08-15 15:57:00 -06:00
David Garske	32b0bd963b	Fix issue introduced in PR #9051 causing TLS records with multiple handshake messages to be skipped (ZD 20399)	2025-08-15 10:08:28 -07:00
David Garske	a98006eca9	Merge pull request #9105 from douzzer/20250815-dilithium-dilithium_expand_s-UndefinedBinaryOperatorResult ... 20250815-dilithium-dilithium_expand_s-UndefinedBinaryOperatorResult	2025-08-15 09:07:38 -07:00
Daniel Pouzzner	10a05ad839	wolfcrypt/src/dilithium.c: fix dilithium_expand_s() to fall through to dilithium_expand_s_c() for s1Len not implemented for USE_INTEL_SPEEDUP.	2025-08-15 09:48:55 -05:00
Juliusz Sosinowicz	ffe3d80f8d	Merge pull request #9097 from douzzer/20250812-atomic-cmpxchg ... 20250812-atomic-cmpxchg	2025-08-15 01:14:45 +02:00
Sean Parkinson	5b1302e4df	Merge pull request #9094 from dgarske/zd20369 ... Fix to better detect sniffer invalid spurious re-transmissions	2025-08-15 09:01:02 +10:00