8569e76a87
Merge pull request #6915 from bigbrett/typo-fix-DecodeBasicCAConstraint
...
fix typo in WOLFSSL_ENTER function name
2023-11-03 13:53:23 -06:00
5b863dcb12
AES bitsliced implementation added
...
AES bitsliced implementation that is cache attack safe.
Configure with:
--enable-aes-bitslice
or define:
WC_AES_BITSLICE
HAVE_AES_ECB
HAVE_AES_DIRECT
Very slow for CBC, CFB, OFB and any mode that uses a previous encrypt
block to calculate current.
CTR, GCM, XTS can parallelize the data and be much faster.
Added AES-ECB test to test.c.
2023-11-03 14:19:58 +10:00
cfb6560468
SP int: ARM64 optimization issue
...
Make variables volatile to avoid compiler optimization issues.
2023-11-03 08:08:29 +10:00
c8af4edd74
Merge pull request #6940 from bandi13/takeInConstParameters
...
Can guarantee not to modify arguments of `mp_isodd` and `mp_iszero`
2023-11-02 15:45:51 -06:00
49b9764c52
Can guarantee not to modify arguments of mp_isodd and mp_iszero
2023-11-02 16:00:57 -04:00
96977d1480
Merge pull request #6900 from julek-wolfssl/zd/16868
...
EVP_EncodeBlock should not append a newline
2023-11-02 09:20:39 -06:00
2ee94023f9
Merge pull request #6937 from dgarske/stm32wl
...
Support for the STM32WL55 and PKA improvements for ECC parameters
2023-11-01 17:44:22 -06:00
33e12e3537
Support for the STM32WL55 and PKA improvements for ECC parameters. Fixes #6386 and Fixes #6396 .
2023-11-01 13:55:31 -07:00
9e34ed937e
Merge pull request #6927 from dgarske/crl_no_date
...
Add build option for disabling CRL date check
2023-11-01 14:48:28 -06:00
21f34ef028
Merge pull request #6905 from bandi13/moreCodeSonarFixes
...
Don't nag about leaked resources
2023-11-01 14:46:02 -06:00
026c4bcbc7
Merge pull request #6902 from dgarske/various_20231020
...
Fixes for PKCS w/out RSA and Cert/CSR signing with unknown OID
2023-11-01 10:58:10 -06:00
a3ea84d8e8
Merge pull request #6917 from SparkiDev/sp_int_no_sp_digit
...
SP int: don't use sp_digit as the type is sp_int_digit
2023-11-01 10:57:07 -06:00
34f349e510
Used codespell and fixed obvious typos.
2023-11-01 10:35:12 -05:00
2e37ff4e45
SP int: don't use sp_digit as the type is sp_int_digit
...
Stop casting to the wrong type. SP int code use sp_int_digit and
sp_digit can be a different signedness.
2023-11-01 13:38:23 +10:00
cdef51f537
Add build option for disabling CRL date check (WOLFSSL_NO_CRL_DATE_CHECK). ZD 16675
2023-10-30 15:45:33 -07:00
33c4054cbb
Fix for CID 299748 memory leak in error case
2023-10-27 14:36:51 -06:00
7b20a5597c
Fix for CID 330399 memory leak on error case
2023-10-27 14:11:21 -06:00
42c241dbbf
Avoid use of uninitialized array
2023-10-27 15:38:46 -04:00
21d465cf9a
Fix possible double free
2023-10-27 15:31:28 -04:00
16b842992d
fix for CID 330416 memory leak
2023-10-27 13:27:30 -06:00
449fb9c581
Fix for report CID 330424 wrong sizeof argument
2023-10-27 13:20:50 -06:00
5277065c3c
fix typo in WOLFSSL_ENTER function name
2023-10-26 13:01:05 -06:00
7821c48e65
wolfcrypt/src/sp_int.c: add cast in sp_to_unsigned_bin_len_ct() to mollify -Wconversion.
2023-10-25 23:40:21 -05:00
6d8136c63e
Merge pull request #6896 from SparkiDev/rsa_to_bin_len_ct
...
RSA: convert to bin with length in constant time
2023-10-25 08:34:37 -06:00
cf1dcdf402
Fix for adding signature where OID is not found. Currently our AddSignature function will add without OID, which is invalid. For example RSA is disabled and CSR tries to use CTC_SHA256wRSA. The wc_SignCert_ex will succeed and report success, but the CSR/Cert will be invalid (missing sigType OID).
2023-10-20 16:29:59 -07:00
8cd6cd175d
EVP_EncodeBlock should not append a newline
2023-10-20 13:20:11 +02:00
fcf1406675
RSA: convert to bin with length in constant time
...
Add mp_to_unsigned_bin_len_ct() which puts a number into a buffer with
padding in constant time.
Call mp_to_unsigned_bin_len_ct() in RSA when encoding result of
exponentiation.
2023-10-20 14:04:36 +10:00
4ac795961b
ARMv7a SHA256: explicit size on vmov
...
For SHA256 using NEON on ARM32, change vmov instruction that is moving
from scalar to general-purpose register to have explicit size (32 bits).
May be needed by some compilers.
2023-10-20 10:21:57 +10:00
1abaa94120
Merge pull request #6889 from SparkiDev/sm2_priv_import_range
...
ECC SM2 import private key: check less than order-1
2023-10-19 17:12:07 -06:00
abd7bb3ac3
ECC SM2 import private key: check less than order-1
...
SM2 curves must have private key less than order-1 instead of order.
2023-10-19 17:29:25 +10:00
d805e06469
add AesEax struct to header for public use
2023-10-18 09:23:39 -06:00
bc0643803d
Merge pull request #6873 from JacobBarthelmeh/coverity
...
Coverity scan touch up
2023-10-17 14:44:33 -07:00
4f1b3fff73
Merge pull request #6879 from jpbland1/cmac-invalid-devId
...
correctly set invalid devId for when cryptoCb is on
2023-10-17 13:23:17 -06:00
76b770d4ee
update comment based on PR advise
2023-10-17 13:01:00 -04:00
92382602dd
fix bad placement
2023-10-17 01:39:34 -04:00
53d80c0b7f
correctly set invalid devId for when cryptoCb is on
...
but the user has opted to use software, or cmac is not available on for their
device. currently a devId of 0 is set which causes CRYPTOCB_UNAVAILABLE
2023-10-17 01:33:06 -04:00
f1725b4962
fix to 3e9f8bc649: (void)h was a typo for correct (void)n.
2023-10-16 18:23:45 -05:00
3c23f39437
fix for out of bounds edge case CID 327299
2023-10-16 13:34:05 -06:00
3e9f8bc649
tests/api.c: gate test_wc_AesEaxVectors(), test_wc_AesEaxEncryptAuth(), and test_wc_AesEaxDecryptAuth(), on !FIPS || FIPS>=5.3.
...
wolfcrypt/src/eccsi.c: remove incorrect `(void)h` from eccsi_mulmod_base_add() in newly exposed WOLFSSL_SP_MATH code path.
2023-10-16 13:30:16 -05:00
d35112064b
Merge pull request #6840 from philljj/xmss_hooks_support
...
Add XMSS/XMSSMT wolfCrypt hooks.
2023-10-16 10:58:12 -06:00
46b1a030a7
XMSS/XMSSMT hooks support: fix g++ warnings, and small cleanup for review.
2023-10-13 18:01:07 -05:00
79a6e1eb04
Merge pull request #6808 from SparkiDev/sp_sm2
...
SP updates for SM2
2023-10-13 10:17:17 -06:00
4001734421
Merge pull request #6863 from lealem47/xcode_cyassl
...
Remove cyaSSL from XCODE proj and small fix in chacha.c
2023-10-13 08:54:11 -06:00
0cc21a42f3
SP updates for SM2
...
Allow wolfSSL to build with SP implementations of SM2.
Updates to SP implementation of other code.
2023-10-13 08:14:15 +10:00
38df4e2bd5
Merge pull request #6857 from kareem-wolfssl/zd16815
...
Update documentation for wc_Shake256_Final to match function signature.
2023-10-12 15:08:58 -06:00
20cab7afe3
Remove cyaSSL from XCODE proj and small fix in chacha.c
2023-10-12 13:58:43 -06:00
3a195563f7
wolfcrypt/src/aes.c: fix zerodivcond and -Wconversion in wc_AesXtsEncryptConsecutiveSectors() and wc_AesXtsDecryptConsecutiveSectors().
...
wolfcrypt/test/test.c: add missing FIPS gating around AES-XTS testing.
2023-10-12 12:08:16 -05:00
60fea5ee5c
XMSS/XMSSMT hooks support: small update for requested changes.
2023-10-11 21:29:45 -05:00
66f4101569
Update documentation for wc_Shake256_Final to match function signature.
2023-10-11 16:12:34 -07:00
0e35e9cbbe
Merge pull request #6806 from lealem47/XTS
...
Add XTS API's required for VeraCrypt
2023-10-11 13:35:45 -06:00
JacobBarthelmeh
Sean Parkinson
Andras Fekete
lealem47
David Garske
jordan
Brett Nicholas
Daniel Pouzzner
Juliusz Sosinowicz
John Bland
Lealem Amedie
Kareem