wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-08-22 09:03:24 +02:00
Code Issues Packages Projects Releases Wiki Activity
31,654 Commits 13 Branches 184 Tags
b065653b96ab87ffbd7736565aec00eaabe7f744
Commit Graph
31654 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
JacobBarthelmeh b065653b96 Merge pull request #10736 from philljj/bsdkm_rdseed 
bsdkm: fix bsdkm build with rdseed.
 2026-08-11 09:03:18 -06:00
JacobBarthelmeh 66d182b362 Merge pull request #11123 from dgarske/toradex_nxp_imx95 
arm64: runtime-dispatch ML-KEM SHA-3 crypto extension to fix SIGILL
 2026-08-11 08:54:59 -06:00
Daniel Pouzzner 067c10d71e Merge pull request #10819 from lealem47/input_validation 
Crypto layer: Add missing input validation
 2026-08-10 18:29:11 -05:00
David Garske a8cb129088 arm64: runtime-dispatch ML-KEM SHA-3 crypto extension to fix SIGILL 2026-08-10 16:11:22 -07:00
David Garske 1e0fa211d0 Merge pull request #10886 from night1rider/cryptocb-hooks-rsapss-ed448-cmac 
Cryptocb hooks rsapss ed448 cmac
 2026-08-10 15:49:05 -07:00
jordan 263cc7d6c8 bsdkm: fix rdseed build. 2026-08-10 15:45:34 -05:00
night1rider 73298a7f63 Share one helper between the RSA-PSS verify crypto callback paths 2026-08-10 14:02:21 -06:00
Lealem Amedie d9a78aa680 Address Skoll Review comments 2026-08-10 13:41:23 -06:00
Lealem Amedie ad8a879ef2 Limit WC_CMAC_TAG_MIN_SZ bump to FIPS builds 2026-08-10 13:35:01 -06:00
Lealem Amedie ca06c85ec0 Testing touch-ups to account for error code fix and MIN_AUTH_TAG_SZ update 2026-08-10 13:35:01 -06:00
Lealem Amedie 18ce83cf9b Fix spacing nit 2026-08-10 13:35:01 -06:00
Lealem Amedie 0e9ee6ffb0 Remove MIN_AUTH_TAG_SZ logic from kernel section to synchronize with user-space build 2026-08-10 13:34:58 -06:00
JacobBarthelmeh 0ee11c71ac Merge pull request #10994 from night1rider/Xilinx-ASU-Ciphers-CMAC-GMAC 
Xilinx Versal Gen2 ASU port: AES ciphers, CMAC, GMAC offload
 2026-08-10 13:32:55 -06:00
Lealem Amedie d011a614e7 Increase WC_CMAC_TAG_MIN_SZ to SP800-38b recommendation 2026-08-10 13:25:40 -06:00
Lealem Amedie 9c113d34f1 Crypto layer: Add missing input validation 2026-08-10 13:25:40 -06:00
night1rider a39e0bdba0 Document the WC_PK_TYPE_RSA_PSS_VERIFY handler return contract in cryptocb.h 2026-08-10 12:59:05 -06:00
JacobBarthelmeh 77da93945b Merge pull request #11117 from night1rider/fix/san-othername-null-memcpy 
asn.c: guard empty otherName copy to avoid NULL memcpy (UBSan)
 2026-08-10 10:25:23 -06:00
David Garske 14a72c96e4 wolfCrypt SRAM PUF: configurable error correction and footprint 2026-08-09 09:04:51 +02:00
night1rider 866e9e15ea asn.c: guard empty otherName copy to avoid NULL memcpy (UBSan) 
When a subjectAltName otherName has an empty value, SetDNSEntry() called
XMEMCPY(dst, NULL, 0). Passing NULL to memcpy is undefined behavior and
aborts under UBSan. Skip the copy unless there is real data to copy.
 2026-08-08 17:13:02 -06:00
night1rider 375febc944 Extend the RSA-PSS verify callback and harden the Ed448/CMAC hooks 
The PSS hook can hand back the recovered block through out/outSz/outLen.
A device that reports only a verdict leaves outLen at 0; wolfSSL then
zeroes the buffer and returns saltLen + hLen, and rejects a buffer
smaller than that with RSA_BUFFER_E. A reported length is clamped to the
buffer size, and any positive handler return maps to SIG_VERIFY_E.

Move the Ed448 sign WOLFSSL_CHECK_MEM_ZERO registration below the crypto
callback hook so the device path no longer returns past it, and guard the
RSA-PSS test callback against WOLF_CRYPTO_CB_ONLY_RSA.

Adds tests for the recovered-data, over-claimed-length and undersized
buffer paths, and an os-check config that builds the hooks under
WOLFSSL_CHECK_MEM_ZERO.
 2026-08-08 15:14:28 -06:00
night1rider 33e03a5ce4 Release Ed448 sign MemZero registrations on the crypto callback exit 2026-08-08 15:14:27 -06:00
night1rider 4d19228ca0 Cast type to CmacType so cmac.c builds as C++ 2026-08-08 15:14:27 -06:00
night1rider 3ade5f62b9 Clear *res before invoking the Ed448 verify crypto callback 2026-08-08 15:14:27 -06:00
night1rider 7952b070e6 Validate Ed448ph prehash length before the sign crypto callback 2026-08-08 15:14:27 -06:00
night1rider b35f60eef3 Set cmac->type before cryptocb init so wc_CmacFree can clean up 2026-08-08 15:14:27 -06:00
night1rider 772a62628e Add crypto callback hooks for Ed448, CMAC free, and RSA-PSS verify 
Add WOLF_CRYPTO_CB dispatch hooks so a device can service:
* Ed448 sign and verify, mirroring the existing Ed25519 hooks.
* CMAC context free on wc_CmacFree (WOLF_CRYPTO_CB_FREE), letting a device
  release offload state.
* RSA-PSS verify with the digest (WOLF_CRYPTO_CB_RSA_PAD) so the device does
  the full signature and padding check. On that path *out is set to NULL with a
  positive return, documented in rsa.h.

Includes testwolfcrypt and API unit test coverage for each hook.
 2026-08-08 15:14:27 -06:00
night1rider a08952b557 Xilinx Versal Gen2 ASU port: decline unsupported AES-GCM IV lengths to software 2026-08-08 14:35:12 -06:00
night1rider 52d569855a Xilinx Versal Gen2 ASU port: fold the one-shot CMAC input into the buffer at final 2026-08-08 14:35:12 -06:00
night1rider 0066461776 Xilinx Versal Gen2 ASU port: split AES-CTR at the 32-bit counter wrap and carry in software to keep it on hardware 2026-08-08 14:35:12 -06:00
night1rider 8f5137c08a Xilinx Versal Gen2 ASU port: AES ciphers, CMAC, GMAC offload 2026-08-08 14:35:11 -06:00
philljj e71b086fc8 Merge pull request #10724 from dgarske/ti_c25 
wolfCrypt on TI C2000 C28x (LAUNCHXL-F28P55X)
 2026-08-08 14:26:28 -05:00
David Garske 968e03e18f Merge pull request #10813 from kojo1/odbc 
OpenSSL compatibility for libodbc
 2026-08-08 10:57:18 -07:00
Takashi Kojo ca56d1178a Translate VERSION_ERROR to SSL_R_WRONG_VERSION_NUMBER in ERR_GET_REASON 2026-08-08 19:32:23 +09:00
Takashi Kojo e137c9f073 Move ERR_R_BUF_LIB alias to openssl/err.h 2026-08-08 18:13:23 +09:00
Takashi Kojo 1fb0f656b5 Use explicit NULL comparison in BIO_meth_get_* getters 2026-08-08 18:11:33 +09:00
Takashi Kojo c841626bfa Move WOLFSSL_-prefixed BIO type and TLS state constants out of coexist guards 2026-08-08 18:10:00 +09:00
Takashi Kojo 39aad36963 Use a parse-in-progress sentinel for hmac.h's evp.h include 2026-08-08 18:04:20 +09:00
Takashi Kojo 82f9241b49 Drop BIO_{get,set}_app_data fallback aliasing BIO_{get,set}_data 2026-08-08 17:42:25 +09:00
Takashi Kojo 0babeebd55 Store callback_ctrl in BIO_meth_set_callback_ctrl like OpenSSL 2026-08-08 17:37:27 +09:00
Takashi Kojo f73e8013c8 Make BIO_get_new_index thread-safe with atomics, add threaded test 2026-08-08 17:33:35 +09:00
David Garske af9f62b690 Merge pull request #11092 from sameehj/fix/mem-fail-null-checks 
Fix mem-fail nightly crashes (jenkins-supervisor #501)
 2026-08-07 14:52:36 -07:00
David Garske 1bd2ee0dd4 Merge pull request #11041 from kareem-wolfssl/zd22232_42_63 
Fully clear ECC k when calling wc_ecc_sign_hash_ex with SP math.  Avoid aliasing the ticket in wolfSSL_GetSessionAtIndex.  Fix IAR warnings.
 2026-08-07 13:47:07 -07:00
David Garske 91df42ec02 Merge pull request #11064 from holtrop-wolfssl/wolfssl-wolfcrypt-2.2.0 
Rust wrapper: bump wolfssl-wolfcrypt crate to v2.2.0
 2026-08-07 12:33:26 -07:00
David Garske 9ea943e34f Merge pull request #11016 from rizlik/dtls_epochs 
dtls13: epoch mangament improvement and bug fixes
 2026-08-07 12:30:09 -07:00
David Garske ea57a537c7 Merge pull request #11107 from Frauschi/gate_fix 
Fix link failure with NO_SESSION_CACHE and session tickets
 2026-08-07 12:16:29 -07:00
David Garske 8abc253c16 ci: name and document the three CHAR_BIT != 8 guards in ti-c2000-compile.yml 2026-08-07 12:07:42 -07:00
David Garske e2ddff61b7 Merge pull request #11105 from Frauschi/psk_fix 
Send decrypt_error alert for TLS 1.3 PSK binder failures
 2026-08-07 11:31:32 -07:00
David Garske 08a7c29537 Merge pull request #11039 from danielinux/mcdc-test-coverage 
Mcdc test coverage: part 5
 2026-08-07 10:11:57 -07:00
David Garske 586f1ed490 Merge pull request #11096 from Frauschi/pqc_only 
Support post-quantum-only (ML-KEM + ML-DSA/SLH-DSA) TLS 1.3 builds
 2026-08-07 10:08:34 -07:00
David Garske 032c78726f Merge pull request #10999 from embhorn/zd22154 
Parse x500UniqueIdentifier (OID 2.5.4.45) in certificate DN
 2026-08-07 10:01:55 -07:00