ab7713676e
linuxkm/lkcapi_glue.c: for AES-{CBC,CFB,GCM}, treat ctx->aes_{encrypt,decrypt}
...
as readonly in the encrypt/decrypt handlers -- clone them before setting the IV
-- for thread safety. also, remove the "experimental" designation of
--enable-linuxkm-lkcapi-register=all.
2025-03-18 22:39:17 -05:00
db3ab5a4c7
Merge pull request #8566 from kareem-wolfssl/zd19572
...
Only perform ARM assembly CPUID checks if support was enabled at build time.
2025-03-18 09:03:36 +10:00
ac89fbc9e6
linuxkm: fix AES-GCM shim implementation and self-test.
2025-03-17 17:25:53 -05:00
6c472496b4
Only perform ARM assembly CPUID checks if support was enabled at build time.
2025-03-17 14:25:08 -07:00
cf813c81b8
Revert "Enable WOLFSSL_OPENSSLEXTRA and OPENSSL_EXTRA for WOLFSSL_CLU option"
...
This reverts commit 16eb8d9ec9
2025-03-17 20:30:26 +00:00
16eb8d9ec9
Enable WOLFSSL_OPENSSLEXTRA and OPENSSL_EXTRA for WOLFSSL_CLU option
...
Co-Authored-By: eric@wolfssl.com <eric@wolfssl.com >
2025-03-17 20:25:15 +00:00
098358c217
Add WOLFSSL_AESCTR to WOLFSSL_CLU cmake option
2025-03-17 13:34:15 -05:00
c7db28ef5a
merge --no-default-devid configure option into --enable-cryuptocb=no-default-devid
2025-03-17 12:15:32 -06:00
c697f87bda
random: correct debug messages
2025-03-17 21:12:51 +08:00
4e60e9fbed
Merge pull request #8559 from anhu/ifndef_shake
...
Check if WOLFSSL_SHAKExxx is not defined
2025-03-17 09:54:36 +10:00
663ca29a5d
Split out tests: random, wolfmath, public key
...
Improved testing of random APIs.
wolfmath tests moved out.
Public key algorithm testing moved out: RSA, DSA, DH, ECC, SM2,
Curve25519, Ed25519, Curve448, Ed448, ML-DSA.
Signature API tests moved out.
Fix for OCSP testing to ensure RSA is available.
Added group names to API test cases.
Can select groups to run with --group <name>. --groups lists all known
group names.
Added option to stop API testing on first failure: --stopOnFail.
2025-03-17 09:32:00 +10:00
e44ccda931
Fix ED25519 definition when WOLFSSL_CLU is enabled
2025-03-14 16:40:31 -05:00
e9fadcc86e
Fix NO_DES3 definition when WOLFSSL_CLU is enabled
...
Co-Authored-By: eric@wolfssl.com <eric@wolfssl.com >
2025-03-14 21:12:09 +00:00
bc7fbee539
Merge pull request #8528 from SparkiDev/digest_test_rework_2
...
Digest tests: add more tests
2025-03-14 16:11:42 -05:00
dbc2017cc7
Fix OPENSSL_ALL definition for WOLFSSL_CLU option
...
Co-Authored-By: eric@wolfssl.com <eric@wolfssl.com >
2025-03-14 20:03:00 +00:00
7a53301265
XTS fixups in optesting
2025-03-14 13:11:00 -06:00
9253d37dc9
Fix after upstream merge changed NO_MAIN_DRIVER requirements for harness
2025-03-14 13:08:57 -06:00
d274ed291f
Restore default start setup
2025-03-14 13:08:57 -06:00
14bef2f6c8
Checkin XCODE settings for v6.0.0 module
2025-03-14 13:08:57 -06:00
6188c9c342
Merge pull request #8563 from douzzer/20250313-various-fixes
...
20250313-various-fixes
2025-03-14 10:47:19 -06:00
b9111aae99
wolfssl/wolfcrypt/types.h: refactor assert.h gate as WOLFSSL_HAVE_ASSERT_H && !WOLFSSL_NO_ASSERT_H.
...
wolfssl/wolfcrypt/settings.h: #ifdef WOLFSSL_LINUXKM, #undef WOLFSSL_HAVE_ASSERT_H and #define WOLFSSL_NO_ASSERT_H.
2025-03-14 02:11:58 -05:00
87c0ac90b8
configure.ac:
...
* sense assert.h and define WOLFSSL_HAVE_ASSERT_H accordingly.
* force off enable_aesgcm_stream if 32 bit armasm or riscv-asm (not yet implemented or buildable).
* add AM_CONDITIONAL([BUILD_CHACHA_NOASM, ...]) when --enable-chacha=noasm.
src/include.am: gate armasm/riscv_asm chacha files on !BUILD_CHACHA_NOASM.
tests/api.c: add missing HAVE_CHACHA&&HAVE_POLY1305 gate around test_TLSX_CA_NAMES_bad_extension().
wolfcrypt/src/chacha.c: tweak WOLFSSL_ARMASM and WOLFSSL_RISCV_ASM codepaths to also depend on !NO_CHACHA_ASM.
wolfssl/wolfcrypt/types.h: in setup for wc_static_assert(), #include <assert.h> if WOLFSSL_HAVE_ASSERT_H, >=C11, or >=C++11.
2025-03-13 23:17:57 -05:00
37909e9707
Merge pull request #8561 from SparkiDev/poly1305-arm32-asm-fix
...
Poly1305 ARM32 assembly code: loading with ldm
2025-03-13 22:10:41 -05:00
97a646661f
Poly1305 ARM32 assembly code: loading with ldm
...
Loading message with ldm, that requires aligned pointers, when 64n +
16*[1-3] bytes are to be processed.
2025-03-14 11:05:48 +10:00
b7764e9308
add support for WC_NO_DEFAULT_DEVID to configure
2025-03-13 14:51:05 -06:00
85e9f73868
Check if WOLFSSL_SHAKExxx is not defined
2025-03-13 13:22:20 -04:00
2125cbd98e
Merge pull request #8552 from douzzer/20250312-linuxkm-lkcapi-aes-cfb-fixes
...
20250312-linuxkm-lkcapi-aes-cfb-fixes
2025-03-12 21:06:27 -06:00
a18ac7c3ec
fix PRB test failure
2025-03-13 11:12:26 +09:00
9188e0a801
fix PR test failures
2025-03-13 09:48:34 +09:00
b39c2206d7
modified client chain at server side
...
added unit test
2025-03-13 09:39:13 +09:00
d6c0184fda
fix qt jenkins failure
2025-03-13 09:39:13 +09:00
74454715ec
ECH: generate multiple configs and rotate echConfigs
...
Change wolfSSL_CTX_GenerateEchConfig to generate multiple configs, add
functions to rotate the server's echConfigs.
2025-03-13 10:24:53 +10:00
93acd466a7
Merge pull request #6805 from jpbland1/ech-hello-retry
...
Ech hello retry request
2025-03-13 09:17:58 +10:00
8e3e60e4e2
adds WC_NO_DEFAULT_DEVID to disallow automatic use of "default" devId
2025-03-12 16:53:25 -06:00
c80a050c29
linuxkm/lkcapi_glue.c: fix aes-cfb wrappers, and add
...
WOLFSSL_DEBUG_TRACE_ERROR_CODES support for EINVAL/ENOMEM/EBADMSG;
configure.ac: remove ENABLED_EXPERIMENTAL requirement for
--enable-linuxkm-lkcapi-register=cfb(aes);
linuxkm/module_hooks.c: omit "skipping full wolfcrypt_test" message if
wc_RunAllCast_fips() was run.
2025-03-12 17:08:04 -05:00
88fdfdd52d
Change #pragma GCC macros in sp_int.c to PRAGMA_GCC macros to avoid calling them on unsupported toolchains.
2025-03-12 12:12:24 -07:00
950be33c57
Insert STM32WBA52xx in the right order
2025-03-12 11:58:18 -06:00
e13bf4bd7c
Add STM32WBA52xx to known macros
2025-03-12 11:08:26 -06:00
517f4bd561
Merge pull request #8549 from douzzer/20250311-aesxts-stream-armasm-and-unit-test-wolfcrypt-test
...
20250311-aesxts-stream-armasm-and-unit-test-wolfcrypt-test
2025-03-12 10:18:39 -06:00
d2fc77ae93
wolfcrypt/test/test.c: add missing PRIVATE_KEY_UNLOCK()s around pkcs7enveloped_test() and pkcs7authenveloped_test() exposed by "--enable-fips=ready --enable-pkcs7 --disable-harden".
2025-03-11 17:10:54 -05:00
96b8d72c4f
Add support for STM32WBA
2025-03-11 15:16:26 -06:00
9a84dfc86a
add wolfcrypt_test() to unit_test(); remove call to HashTest() and delete
...
tests/hash.c (entire file duplicates code in wolfcrypt/test/test.c, originally
ctaocrypt/test/test.c).
2025-03-11 14:59:07 -05:00
2de3d46971
wolfcrypt/test/test.c: in cryptocb_test(), fix error code from
...
wc_CryptoCb_RegisterDevice(), and call wc_CryptoCb_UnRegisterDevice() at
cleanup.
2025-03-11 14:51:25 -05:00
2a4dbbf545
configure.ac: remove mutual exclusion of armasm and WOLFSSL_AESXTS_STREAM --
...
this now works, and uses armasm-accelerated _AesEcb{En,De}crypt() via
_AesXtsHelper(). also, add -DNO_CRYPT_TEST to CFLAGS in builds with
$ENABLED_CRYPT_TESTS = no.
2025-03-11 14:47:32 -05:00
7c84200dda
Add WOLFSSL_CLU option to cmake.yml workflow
...
Co-Authored-By: eric@wolfssl.com <eric@wolfssl.com >
2025-03-11 17:05:26 +00:00
60dc30326c
Add WOLFSSL_CLU option to CMakeLists.txt
...
Co-Authored-By: eric@wolfssl.com <eric@wolfssl.com >
2025-03-11 15:50:31 +00:00
fb23b487eb
Merge pull request #8546 from kaleb-himes/WCv6.0.0-RC5-UPDT
...
Update fips-check.sh to pickup XTS streaming support on aarch64
2025-03-10 18:09:25 -05:00
b608946549
Guard fix.
2025-03-10 17:32:58 -04:00
e7b3fec1fb
Update fips-check.sh to pickup XTS streaming support on aarch64
2025-03-10 13:37:42 -06:00
c48b4f2d86
add missing echX NULL check
2025-03-10 11:11:27 -04:00
Daniel Pouzzner
Sean Parkinson
Kareem
Devin AI
Eric Blankenhorn
Brett Nicholas
res0nance
kaleb-himes
Anthony Hu
JacobBarthelmeh
Hideki Miyazaki
Lealem Amedie
John Bland