Daniel Pouzzner
8665295573
Merge pull request #7198 from dgarske/tls12only
...
Template for TLS v1.2 only
2024-02-05 16:14:47 -05:00
Daniel Pouzzner
1356e079f1
Merge pull request #7207 from julek-wolfssl/update-actions
...
Update github actions
2024-02-05 16:11:39 -05:00
Daniel Pouzzner
2b33079d50
Merge pull request #7188 from innolectric/innolectric
...
Innolectric CMake changes
2024-02-05 16:08:58 -05:00
Sean Parkinson
9060da42a6
Merge pull request #7211 from douzzer/20240203-linuxkm-fixes
...
20240203-linuxkm-fixes
2024-02-06 07:08:40 +10:00
Daniel Pouzzner
5c421d0207
Merge pull request #7178 from anhu/OQS_MEM_LEAKS
...
Fixes that prevent memory leaks when using OQS.
2024-02-05 13:26:43 -05:00
Daniel Pouzzner
3a280e8295
linuxkm fixes:
...
linuxkm/linuxkm_wc_port.h: add fallback definition for static_assert() to support legacy kernels.
wolfcrypt/src/aes.c: fix AESNI runtime failure/fallback logic in wc_AesXtsSetKeyNoInit().
2024-02-03 13:46:45 -06:00
David Garske
ca726e97f8
Peer review fixes.
2024-02-03 10:43:46 -08:00
Daniel Pouzzner
851f059023
Merge pull request #7203 from julek-wolfssl/openssh-9.6
...
openssh 9.6p1 fixes
2024-02-02 19:51:55 -05:00
Daniel Pouzzner
4ed197d487
Merge pull request #7205 from julek-wolfssl/fix-test_wolfSSL_OPENSSL_hexstr2buf
...
test_wolfSSL_OPENSSL_hexstr2buf: test was always skipped
2024-02-02 18:45:31 -05:00
Daniel Pouzzner
866992151b
Merge pull request #7208 from philljj/fix_ext_xmss_sigsleft
...
Fix ext_xmss sigsleft null deref.
2024-02-02 18:28:20 -05:00
Daniel Pouzzner
7823acbbde
Merge pull request #7184 from JacobBarthelmeh/pkcs7-enc
...
PKCS7 streaming with encode/sign
2024-02-02 18:00:12 -05:00
jordan
13e427433c
Fix ext_xmss sigsleft null deref.
2024-02-02 16:04:23 -06:00
JacobBarthelmeh
7592559fd3
rename argument, fix warnings on casts
2024-02-02 14:50:50 -07:00
Daniel Pouzzner
d1e0b37467
Merge pull request #7202 from julek-wolfssl/bio-include-ssl
...
If bio.h is included first then it can't include options.h on its own
2024-02-02 16:00:47 -05:00
Daniel Pouzzner
6230c29194
Merge pull request #7190 from SparkiDev/tls13_hrrcookie_fix
...
TLS 1.3, HRR Cookie: send cookie back in new ClientHello
2024-02-02 15:05:00 -05:00
Juliusz Sosinowicz
31bfac43ea
Update github actions
...
Many of these updates should also speed up some steps
2024-02-02 20:14:28 +01:00
David Garske
32aecf4c35
Merge pull request #7180 from douzzer/20240126-LINUXKM_LKCAPI_REGISTER
...
20240126-LINUXKM_LKCAPI_REGISTER
2024-02-02 11:12:35 -08:00
Juliusz Sosinowicz
188a69e649
test_wolfSSL_OPENSSL_hexstr2buf: test was always skipped
2024-02-02 18:29:15 +01:00
Juliusz Sosinowicz
be90fe073e
tfm and integer: skip whitespace at end in radix read
2024-02-02 14:38:40 +01:00
Juliusz Sosinowicz
7ebb8cd007
Update radix tests
2024-02-02 12:09:50 +01:00
Juliusz Sosinowicz
d3b0a26b3b
If bio.h is included first then it can't include options.h on its own
...
When EXTERNAL_OPTS_OPENVPN is defined, we should be including options.h internally. When bio.h is included first, we don't include options.h and we don't pass the `#if defined(OPENSSL_EXTRA) || defined(OPENSSL_EXTRA_X509_SMALL)` guard.
2024-02-02 11:02:39 +01:00
Daniel Pouzzner
10645de648
linuxkm: various tweaks:
...
* configure.ac: in linuxkm-lkcapi-register section, force ENABLED_AESGCM_STREAM=yes if ENABLED_AESGCM is yes and there is asm or FIPS in the picture.
* linuxkm/module_hooks.c: in updateFipsHash(), if DEBUG_LINUXKM_PIE_SUPPORT || WOLFSSL_LINUXKM_VERBOSE_DEBUG, print the base16 hash to the kernel log.
* linuxkm/lkcapi_glue.c:
* implement KATs for AES-CBC, AES-CFB, and AES-GCM.
* clean out extraneous code and macro usage inherited from test/test.c.
* add post-registration crypto_tfm_alg_driver_name() tests for AES-CBC, AES-CFB, and AES-GCM.
2024-02-01 19:04:02 -06:00
JacobBarthelmeh
ed4b87eb37
fix for clang-tidy null dereference error
2024-02-01 14:26:13 -07:00
JacobBarthelmeh
5fbadbb215
fix warning with test case
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
8d0dc7a568
fix asn original build, vs warning, and add test cases
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
bf23357c8c
refactor streaming and additional comments
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
c843064681
update macro guard
2024-02-01 11:50:51 -07:00
JacobBarthelmeh
75762d44b6
PKCS7 streaming with encode/sign
2024-02-01 11:50:51 -07:00
Juliusz Sosinowicz
335c51987e
openssh 9.6p1 fixes
...
- wolfSSL_DSA_set0_key: allow setting just the public key
- radix16: allow skipping the end of line whitespace
- Add openssh action
2024-02-01 11:39:56 +01:00
Daniel Pouzzner
f9bf96d9ba
Merge pull request #7187 from SparkiDev/sha256_intel_instrs
...
SHA-256: Implementation using Intel instructions
2024-01-31 19:15:43 -05:00
Daniel Pouzzner
1fda249468
Merge pull request #7189 from philljj/fix_static_nomalloc_build
...
Fix WOLFSSL_NO_MALLOC build.
2024-01-31 18:46:48 -05:00
Sean Parkinson
f48eb638da
TLS 1.3, HRR Cookie: send cookie back in new ClientHello
...
Make it mandatory that the cookie is sent back in new ClientHello when
seen in a HelloRetryRequest.
2024-02-01 07:49:37 +10:00
Daniel Pouzzner
3064d725b9
Merge pull request #7193 from bandi13/fixOpenWRTTests
...
Snapshots disappear after a while. Versioned releases stay.
2024-01-31 16:38:55 -05:00
Andras Fekete
65902308e8
Snapshots disappear after a while. Versioned releases stay.
2024-01-31 16:02:41 -05:00
Daniel Pouzzner
75bd1af110
Merge pull request #7179 from philljj/fix_ext_xmss_sigsleft
...
Fix ext_xmss SigsLeft.
2024-01-31 14:33:18 -05:00
David Garske
9e47703402
Template for TLS v1.2 only.
2024-01-31 10:13:31 -08:00
Daniel Pouzzner
e1ee5e4421
linuxkm: spruce up arch-dependent CFLAGS setup in linuxkm/Kbuild; add "failed:" to error messages in km_AesGcmEncrypt() and km_AesGcmDecrypt().
2024-01-31 11:49:46 -06:00
Daniel Pouzzner
f228a85cee
AES-XTS: fix FIPS gating to use defined(HAVE_FIPS), not defined(HAVE_FIPS_VERSION).
2024-01-30 17:16:37 -06:00
jordan
7ddf20851d
Fix WOLFSSL_NO_MALLOC build.
2024-01-30 09:00:02 -06:00
Juliusz Sosinowicz
48b99b0f10
Merge pull request #7185 from JacobBarthelmeh/zephyr
...
only download parts of zephyr sdk needed for test
2024-01-30 14:46:57 +01:00
Sean Parkinson
492490f7e6
SHA-256: Implementation using Intel instructions
...
Detects Intel SHA-256 instructions available for CPU.
Preferences implementation using Intel instructions.
2024-01-30 23:17:05 +10:00
Sean Parkinson
f7507f14cb
Merge pull request #7186 from douzzer/20240129-fix-wc_RsaFunction_ex
...
20240129-fix-wc_RsaFunction_ex
2024-01-30 23:14:52 +10:00
Daniel Pouzzner
3d3c07944e
wolfcrypt/src/ecc.c: fix logic around WOLF_CRYPTO_CB_ONLY_ECC in wc_ecc_shared_secret(), _ecc_make_key_ex(), wc_ecc_sign_hash(), and wc_ecc_verify_hash() (defects reported by -Wreturn-type, -Wmaybe-uninitialized around err, and a failure of ecc_onlycb_test()).
2024-01-29 22:30:33 -06:00
Daniel Pouzzner
67bbe1e1bb
wolfcrypt/src/rsa.c: in wc_RsaFunction_ex(), if defined(WOLF_CRYPTO_CB_ONLY_RSA), add clause to return NO_VALID_DEVID if key->devId == INVALID_DEVID. fixes "control reaches end of non-void function" in PRB-single-flag.txt.
2024-01-29 22:00:20 -06:00
Daniel Pouzzner
11e8a89f67
wolfcrypt/src/aes.c: coddle XCode (clang) to clear frivolous -Wparentheses-equality.
2024-01-29 17:58:13 -06:00
Daniel Pouzzner
6261108d49
linuxkm: fix line lengths throughout; in linuxkm/lkcapi_glue.c: fix/harmonize error catching, reporting, and error codes; further address peer review feedback.
2024-01-29 17:48:31 -06:00
David Garske
de91add3d9
Merge pull request #7182 from SparkiDev/armv8_32_align_chacha20_asm
...
ARMv8 32 bit ChaCha20 ASM: loading from in/out
2024-01-29 14:59:56 -08:00
JacobBarthelmeh
920abd8b46
only download parts of zephyr sdk needed for test
2024-01-29 15:02:58 -07:00
David Garske
de4a6f9e00
Merge pull request #7167 from SparkiDev/rsa_dec_check_d
...
RSA Decryption: check private value after decryption
2024-01-29 14:01:27 -08:00
David Garske
a6326bd80a
Merge pull request #7183 from SparkiDev/regression_fixes_9
...
Regression testing fixes
2024-01-29 07:42:34 -08:00