 David Garske
|
6b1ff8e9d7
|
Only try and return serial number or check padding if the serial number size is greater than 1.
|
2016-08-05 12:53:26 -07:00 |
|
|
David Garske
|
a17bc2a42e
|
Fix build issue with ASN enabled and no HMAC (missing MAX_DIGEST_SIZE). Switch to using WC_MAX_DIGEST_SIZE from hash.h, which is always available. Added small stack option for digest in MakeSignature. Fixed build error with unused "testVerifyCount" if "NO_ECC_SIGN" or "NO_ECC_VERIFY".
|
2016-08-05 12:19:30 -07:00 |
|
|
David Garske
|
96da2df7ec
|
Additional max index and serial number size checks in "GetSerialNumber".
|
2016-08-03 17:04:44 -07:00 |
|
|
David Garske
|
2c1309ffc7
|
Fixes for warnings when cross-compiling with GCC ARM.
|
2016-08-03 16:53:53 -07:00 |
|
 Takashi Kojo
|
ed4cd2438f
|
CRL_Type to wc_DerToPem
|
2016-08-03 10:53:54 +09:00 |
|
|
David Garske
|
9ddfe93c43
|
Fixed issue with CRL check and zero pad (the GetRevoked function was not trimming pad). Added new ASN "GetSerialNumber" function and implemented it in three places in asn.c.
|
2016-08-02 16:47:21 -07:00 |
|
 JacobBarthelmeh
|
dcc0f87ce6
|
Merge pull request #506 from toddouska/del_point
fix remaining non fpecc ecc_del_point w/o heap
|
2016-07-27 18:54:46 -06:00 |
|
|
dgarske
|
303561c1a1
|
Merge pull request #505 from toddouska/timing
fix scan-build warning on ecc memory alloc failure
|
2016-07-27 15:52:01 -07:00 |
|
 toddouska
|
a94f34c8e2
|
fix remaining non fpecc ecc_del_point w/o heap
|
2016-07-27 14:24:34 -07:00 |
|
|
toddouska
|
7cf0b8fe85
|
fix scan-build warning on ecc memory alloc failure
|
2016-07-27 11:20:08 -07:00 |
|
|
David Garske
|
b0e72dd692
|
Fix for "OID Check Failed". This restores behavior to what it was prior to commit "7a1acc7". If an OID is not known internally skip the verify and return success and the OID sum.
|
2016-07-27 10:39:42 -07:00 |
|
 John Safranek
|
993838153e
|
Merge pull request #487 from moisesguimaraes/fix-ocspstapling-getca
fixes ocsp signer lookup in the cert manager.
|
2016-07-26 12:42:47 -07:00 |
|
|
David Garske
|
c80f1805f0
|
Fix for failing OID check with "ocspstapling2" enabled. Found OID type in "ToTraditional" that should be keyType, not sigType. Added optional OID decode function and optional OID info dump in "GetObjectId" (both off by default).
|
2016-07-26 10:35:40 -07:00 |
|
|
toddouska
|
a274386693
|
fix user rsa no error codes?
|
2016-07-25 19:19:46 -07:00 |
|
|
toddouska
|
cd5486a4e6
|
fix user_rsa with blinding API addition
|
2016-07-25 15:33:28 -07:00 |
|
|
Jacob Barthelmeh
|
e8f7d78fc4
|
add helper functions for choosing static buffer size
|
2016-07-21 12:11:15 -06:00 |
|
|
toddouska
|
1b980867d6
|
fix rsablind other builds
|
2016-07-20 11:35:57 -07:00 |
|
|
David Garske
|
e0f2bbd1b4
|
Added comment about why 0's test is disabled. ECC without Shamir fails with fast or normal math.
|
2016-07-19 19:12:45 -07:00 |
|
|
David Garske
|
5e2502fa95
|
ECC without Shamir has issues testing all zero's digest, so disable this test if not using Shamir method. Fixed comment about "NO_ECC_SECP".
|
2016-07-19 14:34:32 -07:00 |
|
|
toddouska
|
7a419ba6d8
|
Merge pull request #472 from dgarske/ecc_brainpool_koblitz
ECC and TLS support for all SECP, Koblitz and Brainpool curves
|
2016-07-19 11:44:53 -07:00 |
|
|
toddouska
|
f88f501923
|
add unique RNG missing error
|
2016-07-18 18:10:38 -07:00 |
|
 Moisés Guimarães
|
e866b55bb7
|
removes fallback.
|
2016-07-18 22:02:41 -03:00 |
|
|
toddouska
|
1c71fb4ad1
|
scope tmpa/b with blinding, document RSA options
|
2016-07-18 17:37:03 -07:00 |
|
|
toddouska
|
c2b55f69fa
|
fix 32bit mp_add_d need
|
2016-07-18 12:49:31 -07:00 |
|
|
toddouska
|
d235a5f0cc
|
add WC_RSA_BLINDING, wc_RsaSetRNG() for RSA Private Decrypt which doesn't have an RNG
|
2016-07-18 11:57:47 -07:00 |
|
|
Moisés Guimarães
|
dd329ac97b
|
fixes ocsp signer lookup in the cert manager.
|
2016-07-15 17:12:04 -03:00 |
|
|
dgarske
|
c20551cc56
|
Merge pull request #478 from toddouska/flatten-fix
fix rsa flatten eSz check
|
2016-07-13 08:50:39 -07:00 |
|
|
toddouska
|
7a906e47ed
|
fix rsa flatten eSz check
|
2016-07-12 16:28:59 -06:00 |
|
|
Jacob Barthelmeh
|
92341292c7
|
remove hard tabs and replace with spaces
|
2016-07-12 14:12:44 -06:00 |
|
|
David Garske
|
acc5389f9a
|
Fixed possible issue with OID pointer returned from "wc_ecc_get_oid" if "HAVE_OID_ENCODING" enabled. Was previously returning static pointer, which was shared for all OID's. Now uses cache for each OID, which also improves performance on subsequent calls to the same OID.
|
2016-07-08 14:22:21 -07:00 |
|
|
David Garske
|
19db78fc76
|
Moved the ECC OID's into separate static const array to reduce ecc_sets size. Added "ecc_oid_t" typedef to determine "oid" size based on HAVE_OID_ENCODING option. Reduced the encoded variable size to word16.
|
2016-07-08 14:15:54 -07:00 |
|
|
toddouska
|
8da8c87fa4
|
don't include comba includes if FP_SIZE is too small for index
|
2016-07-08 12:29:38 -07:00 |
|
|
toddouska
|
c7318c8576
|
fix fpecc thread local storage size with clang
|
2016-07-08 12:01:52 -07:00 |
|
|
toddouska
|
68d66d12d6
|
fix ecc timming missing variable
|
2016-07-08 11:57:24 -07:00 |
|
|
David Garske
|
7a1acc7e56
|
Added TLS support for all SECP and Brainpool curves. Added ECC curve specs for all Brainpool, Koblitz and R2/R3. Adds new "HAVE_ECC_BRAINPOOL", "HAVE_ECC_KOBLITZ", "HAVE_ECC_SECPR2" and "HAVE_ECC_SECPR3" options. ECC refactor to use curve_id in _ex functions. NID and ECC Id's match now. Added ability to encode OID (HAVE_OID_ENCODING), but leave off by default and will use pre-encoded value for best performance.
|
2016-07-07 10:59:45 -07:00 |
|
|
David Garske
|
dcdc28e014
|
Remove double call to "wolfCrypt_Init()" in test.c. Appears to have been added in static memory merge on 6/10.
|
2016-06-30 16:51:13 -07:00 |
|
|
David Garske
|
5b3a72d482
|
Cleanup of stdlib function calls in the wolfSSL library to use our cross-platform "X*" style macros in types.h.
|
2016-06-29 11:11:25 -07:00 |
|
|
Jacob Barthelmeh
|
f18ff8bfa4
|
update mysql patch
|
2016-06-27 15:44:52 -06:00 |
|
|
John Safranek
|
ffb537c33f
|
removed dependency on AES-NI for the AES-direct test
|
2016-06-23 15:34:09 -06:00 |
|
|
John Safranek
|
0d031fcbd7
|
added parameter checking to Generate and Verify
|
2016-06-23 15:34:09 -06:00 |
|
|
David Garske
|
47c1f4e68f
|
Fix possible use of ForceZero with NULL pointer. Improve init of "kb" when small stack disabled, so memset isn't performed twice.
|
2016-06-22 07:22:30 -07:00 |
|
|
David Garske
|
69db94d668
|
Fix build error for un-initialized "kb" variable when built with fixed point cache and small stack enabled.
|
2016-06-22 07:06:07 -07:00 |
|
|
David Garske
|
d294dc363e
|
Fix scan-build warning with "redundant redeclaration of 'fp_isprime'". Changed "fp_isprime" and "fp_isprime_ex" to local static only. Also made "fp_gcd", "fp_lcm", and "fp_randprime" static functions.
|
2016-06-21 19:35:25 -07:00 |
|
|
David Garske
|
1db880b6bf
|
Fixed issue with compressed keys and custom curves. The inLen adjustment for compressed curves was only be done for built-in curves.
|
2016-06-21 15:55:17 -07:00 |
|
|
David Garske
|
dd52af0872
|
ECC cleanup / fixes. Improvements to ECC with fast math enabled to avoid mp_clear on stack variables. Refactor of ECC failure cleanup (fixes possible mem leaks with small stack enabled). Refactor of "fp_is*" response checks to use FP_YES or FP_NO. Pulled libtom enhancement/cleanup of fp_isprime. Fix for compressed keys import with custom curves (still having some issues though).
|
2016-06-21 15:27:51 -07:00 |
|
|
David Garske
|
aa1a405dd1
|
Fixes for compressed keys. Fix to fast math "mp_cnt_lsb" to return proper value, which fixes "mp_jacobi", which fixes "mp_sqrtmod_prime", which fixes compressed keys for 224-bit key. Removed workarounds for compressed keys. Added new configure option "--enable-compkey". Fixed issue with normal math and custom curves where "t2" could be free'd and used. Fixed issue with mp_dump in integer.c, with not allocating correctly sized buffer for toradix.
|
2016-06-21 14:06:02 -07:00 |
|
|
toddouska
|
de4448c59b
|
Merge pull request #452 from dgarske/fixeccscanbuildwarning
Fixes scan-build warning in ecc.c line 2208
|
2016-06-20 09:09:21 -07:00 |
|
|
David Garske
|
3789d9913c
|
Fixes scan-build warning "wolfcrypt/src/ecc.c:2208:6: warning: Use of memory after it is freed". This is due to a rebase issue with static memory changes after the new ECC custom curves changes. The precomp[] is init to NULL at top so cleanup can always be done at end (shouldn't be done in middle).
|
2016-06-18 22:35:52 -07:00 |
|
|
David Garske
|
eb1d8d5df6
|
Fix for NID names on NIST prime 192 and 256 curves. Cleanup of the memcpy/memset in .i files to use portable names.
|
2016-06-17 15:59:25 -07:00 |
|
|
David Garske
|
6da166d83b
|
Enhancement / cleanup of the "wc_ecc_make_key_ex" API so it can be used with "keysize" or "dp" and allows compatibility with existing "wc_ecc_make_key". Note: "wc_ecc_make_key_ex" was not previously public, so changing it at this point is okay.
|
2016-06-16 10:38:15 -07:00 |
|