e835517633
SRTCP 32-bit indices default plus errata 48-bit indices
2024-04-19 12:31:08 -06:00
69be7a7c54
Merge pull request #7431 from lealem47/aes_cfb
...
Fix for AES-CFB1 encrypt/decrypt on size (8*x-1) bits
2024-04-19 10:55:27 -06:00
0264a518e1
wolfcrypt/src/ed25519.c: in ed25519_pairwise_consistency_test(), add casts to mollify -Wconversion.
2024-04-19 01:41:35 -05:00
85f3fb9d07
Merge pull request #7409 from SparkiDev/asm_x64_rip_fix
...
SHA-256 x64 ASM - fix use of %rip
2024-04-19 02:33:47 -04:00
d2b9a365f2
ChaCha20 and Poly1305 x64 ASM - fixu use of %rip
...
Get the address of the constants into a register at start instead of
calculating the address relative to the instruction pointer each time.
2024-04-19 09:59:54 +10:00
ef153101b7
Merge pull request #7433 from SparkiDev/eddsa_fips_checks
...
EdDSA FIPS checks on public key
2024-04-18 14:34:31 -06:00
295033441c
Fix for AES-CFB1 encrypt/decrypt on size (8*x-1) bits
2024-04-18 11:31:28 -06:00
0bd5967093
Adjust FIPS version and default configuration
2024-04-18 08:41:05 -06:00
436efb0078
wolfcrypt/test/test.c: in aes_xts_128_test(), change DEBUG_VECTOR_REGISTER_ACCESS gates to DEBUG_VECTOR_REGISTER_ACCESS_AESXTS (currently unused), after refactor of AES-XTS C fallback in 9f55dba2f2. (per-call fallback is no longer supported for AES-XTS.)
2024-04-18 00:59:03 -05:00
c590fe514f
EdDSA FIPS checks on public key
...
Check that the Ed25519 and Ed448 public key is valid even without
private key.
Perform pairwise consistency test, only in FIPS, when making a key i
Ed25519 and Ed448.
2024-04-17 17:50:33 +10:00
855175da47
wolfcrypt/src/fe_448.c: fix several out-of-order declarations in fe448_mul_8().
2024-04-17 00:43:41 -05:00
9f55dba2f2
wolfcrypt/src/aes.c: in AES-XTS AESNI, use cautious strategy as in AESGCM_STREAM for SAVE_VECTOR_REGISTERS, due to random failures seen with DEBUG_VECTOR_REGISTER_ACCESS_FUZZING using the old per-call fallback strategy.
2024-04-17 00:43:41 -05:00
b2f594e84b
fixes for --enable-32bit CFLAGS=-m32 --enable-fips=v6 (fixes "#error ED448 requires SHAKE256").
2024-04-17 00:43:41 -05:00
8e9810e87e
ssl.c: Move functions out to separate files
...
Moved E[CD][25519||448] APIs to pk.c
Move public key PEM APIs to pk.c.
Move wolfSSL loading and using of private keys and certificates to
ssl_load.c
Move PKCS#7 and PKCS#12 APIs to ssl_p7p12.c.
Move session and session cache APIs to ssl_sess.c.
Other minor fixes.
2024-04-16 10:30:59 +10:00
281c2a431e
wolfcrypt/test/test.c: fix return code in pbkdf2_test(), add DEBUG_WOLFSSL gates on keysize report in ecc_test_curve(), and add missing PRIVATE_KEY_UNLOCK()s in cryptocb_test() for fips-dev coverage.
2024-04-15 14:11:21 -05:00
6e0a90190f
fixes for v5 and v6+ FIPS builds, including linuxkm v6+ builds.
2024-04-15 14:11:21 -05:00
3742c4dd57
Merge pull request #7413 from gojimmypi/PR-PlatformIO-FreeRTOS
...
Modify PlatformIO FreeRTOS include path, settings.h
2024-04-12 14:32:55 -06:00
8b656d5a5f
Merge pull request #7295 from kaleb-himes/SRTP-KDF-FS
...
SRTP-KDF FS Preview
2024-04-11 13:41:05 -06:00
b1261f5471
Modify PlatformIO FreeRTOS include path, settings.h
2024-04-11 07:46:35 -07:00
ff09f418c0
Merge pull request #7408 from SparkiDev/asn_templ_rid
...
X.509 RID ASN template behaviour
2024-04-10 11:42:07 -06:00
264dcd4e15
Fix a file mode and more overlong lines
2024-04-10 10:18:49 -06:00
8b3fbe47e6
SHA-256 x64 ASM - fix use of %rip
...
Get the address of table K instead of using it directly each time a
value is required.
2024-04-10 15:02:19 +10:00
b48b5c47f4
X.509 RID ASN template behaviour
...
Don't set the DNS entry for RID unless OPENSSL_ALL is defined to match
the behaviour of original ASN code.
2024-04-10 10:39:45 +10:00
b8d31b042f
Windows support
2024-04-09 13:55:05 -06:00
71e83cdd19
Resolve armasm fips wrappers and sanity
2024-04-09 11:41:41 -06:00
e45867bbc3
WIN fips section refactor / wolfEntropy API syntax adjustment
2024-04-09 09:48:33 -06:00
a3413ad009
Address Jenkins caught item
2024-04-09 09:48:33 -06:00
ef2a636610
Expose additional features of opensslall in a compliant way
2024-04-09 09:48:33 -06:00
2e63ae750d
Comments for SP800-38E TODO, wolfEntropy optional setup and remove forced errors api.c
2024-04-09 09:48:33 -06:00
8092104396
Address a flush-left in test.c and gt 80 column limit in settings.h
2024-04-09 09:48:33 -06:00
84f5b4e5bf
Touchup a few more edge cases caught by Jenkins
2024-04-09 09:48:33 -06:00
829d028d98
Add configure for wolfEngine with new module
2024-04-09 09:48:33 -06:00
4df091ae2a
Restore debug messages that were cluttering up logs
2024-04-09 09:48:33 -06:00
81f5ac7f6c
SRTP-KDF FS Preview
2024-04-09 09:48:33 -06:00
144ffdc713
Merge pull request #7400 from philljj/test_xmss_pubraw
...
Add wc_XmssKey_ExportPubRaw to wolfcrypt test.
2024-04-09 09:14:23 -06:00
4a069ee5c1
Small cleanup for review.
2024-04-08 21:41:33 -05:00
a518f493b5
Merge pull request #7388 from JacobBarthelmeh/x509_cases
...
check for critical policy extension when not supported
2024-04-05 15:59:03 -04:00
d0802335a8
Add wc_XmssKey_ExportPubRaw to wolfcrypt test.
2024-04-05 12:09:04 -05:00
5cab707d8e
Update Espressif Examples and Libraries
2024-04-04 20:40:52 -07:00
8b587b563c
Merge pull request #7286 from Frauschi/hybrid_signatures
...
Improvements to dual algorithm certificates
2024-04-03 13:37:16 -06:00
57603823e3
Merge pull request #7387 from JacobBarthelmeh/sm2
...
fix for oss-fuzz sm2 test build
2024-04-03 10:08:46 -07:00
f6a24efe23
Merge pull request #7389 from dgarske/nxp_mmcau_sha256
...
Fix the NXP MMCAU HW acceleration for SHA2-256
2024-04-03 10:39:04 -06:00
d7c6d7af44
Fix the NXP MMCAU HW acceleration for SHA2-256. Broken with LMS SHA2 refactor.
2024-04-02 19:32:41 -07:00
75da69911c
Merge pull request #7369 from dgarske/infineon_modustoolbox
...
Support for Infineon Modus Toolbox with wolfSSL
2024-04-02 17:34:07 -06:00
983616afa0
check for critical policy extension when not supported
2024-04-02 16:46:47 -06:00
d4f5825fd2
fix for sp build with ecc_map_ex
2024-04-02 11:40:53 -06:00
b65e42bf4d
Used codespell and fixed obvious typos.
2024-04-02 10:19:39 -05:00
092dba4593
wolfcrypt/src/asn.c: fix for benign identicalInnerCondition in ParseCertRelative().
2024-04-01 23:50:05 -05:00
10d210ce26
Parenthesis
2024-04-01 19:05:59 -04:00
2d532dd6b8
Clean up after another round of analyzer execution.
2024-04-01 18:56:44 -04:00
kaleb-himes
JacobBarthelmeh
Daniel Pouzzner
Sean Parkinson
Lealem Amedie
gojimmypi
kaleb_himes
jordan
David Garske
Anthony Hu