b4d51dbbda
Merge pull request #10607 from julek-wolfssl/evp-pkey-encoded-public-key
...
Add EVP_PKEY encoded public key get/set compatibility functions
2026-07-08 12:20:33 -07:00
16a2681ca4
Merge pull request #10604 from AlexLanzano/cryptocb-getdevice
...
Expose wc_CryptoCb_GetDevice and add CryptoCb API test coverage
2026-07-08 10:30:59 -07:00
7c085837ae
Merge pull request #10772 from dgarske/qat_review
...
Intel QuickAssist: multi-device utilization + software-fallback / Cavium fixes
2026-07-08 10:39:24 -06:00
59e942b07a
Merge pull request #10844 from SparkiDev/windows_arm64_1
...
ARM64 Windows: Add assembly
2026-07-08 09:28:41 -07:00
0d02f2fe2f
Merge pull request #10816 from kojiws/fix_mem_cast_on_mldsa
...
Fix unaligned memory access in ML-DSA
2026-07-08 09:28:28 -07:00
60085b0e48
Merge pull request #10837 from rlm2002/zd-NameConstraints
...
DNS name constraint fix
2026-07-08 09:21:52 -07:00
673d8d00bb
Merge pull request #10778 from SparkiDev/time_stamp_protocol
...
Time-Stamp Protocol (RFC 3161)
2026-07-08 17:43:38 +02:00
b19f00a736
Merge pull request #10807 from SparkiDev/aes_gcm_siv_asm
...
AES-GCM-SIV: Add implementation in C and assembly
2026-07-08 08:30:02 -07:00
7f441a687a
Merge pull request #10748 from night1rider/AES-Callbacks
...
AES callbacks for CFB and OFB
2026-07-08 08:25:23 -07:00
dcc2b23b1a
Merge pull request #10852 from stenslae/fix-mldsa-privkeydecode-no-asn1
...
Fix ML-DSA level auto-detection in WOLFSSL_MLDSA_NO_ASN1 builds
2026-07-08 10:03:34 +02:00
3b07f7df34
Merge pull request #10855 from philljj/misc_fixes
...
wolfcrypt: fix several redefinition of typedef errors.
2026-07-08 09:56:45 +02:00
e0a8f3f475
Merge pull request #10706 from JacobBarthelmeh/dev
...
defense in depth hardening for x509 extension create by OBJ and EVP decode update
2026-07-07 16:41:15 -07:00
ae023a5643
Time-Stamp Protocol (RFC 3161)
...
Implementation in wolfCrypt
OpenSSL compatibility layer in wolfSSL
Added tests, certificates, examples.
2026-07-08 09:33:47 +10:00
a296ac07fc
Merge pull request #10842 from miyazakh/f6162_tsiphash
...
[Renesas RX72N] RX72N TSIP fixes and command-line build/flash/UART tooling
2026-07-07 16:17:30 -07:00
2f2ffbac04
Merge pull request #10856 from douzzer/20260702-linuxkm-various
...
20260702-linuxkm-various
2026-07-07 17:44:50 -05:00
2bcb4efb5b
ARM64 Windows: Add assembly
...
Add assembly generated for Windows ARM64.
Add build option to project files.
Add CI loops.
2026-07-08 08:04:24 +10:00
d805c804b9
Merge pull request #10733 from mattia-moffa/20260617-max32666-sha-streaming-old
...
MAX32666 fixes for old SDK
2026-07-07 14:54:34 -07:00
af3befef80
ARM66 Windows: Add assembly
...
Add assembly generated for Windows ARM64.
Add build option to project files.
Add CI loops.
2026-07-08 07:53:53 +10:00
cf7319062b
Add Windows assembly files to the build
...
Windows ASM files generated along side the ATT assembly files.
Adding them to the build so they can be used.
2026-07-08 07:53:53 +10:00
bee18d122d
Merge pull request #10801 from SparkiDev/windows_asm_1
...
Add Windows assembly files to the build
2026-07-07 14:26:31 -07:00
2c0e235bd1
AES-GCM-SIV: Add implementation in C and assembly
...
Added assembly for Intel x64, ARM64, ARM32, Thumb2.
2026-07-08 07:15:26 +10:00
5ebc44ee4e
Merge pull request #10848 from SparkiDev/wycheproof_fixes_5
...
Wycheproof: fixes for various platforms
2026-07-07 14:10:07 -07:00
2c6261d1a8
Add testing for cryptocb only for aes ofb and cfb
2026-07-07 14:20:29 -06:00
d09803154b
Adding callbacks for AES mode OFB and CFB, along with callback testing/coverage for the callback paths
2026-07-07 14:20:26 -06:00
e1ff608876
Intel QAT: add async hybrid PQC server key share regression test
2026-07-07 09:54:04 -07:00
d929c9b88a
Intel QAT: serialize build/check under --with-intelqa; update port README
2026-07-07 09:54:04 -07:00
673a6703b1
Intel QAT: interleave instances across devices for multi-device utilization
2026-07-07 09:54:04 -07:00
f7c5256d36
Intel QAT: fix heap argument in RSA public free
2026-07-07 09:54:04 -07:00
fa9dd0a671
Intel QAT: fall back to regular memory when crypto service not started
2026-07-07 09:54:04 -07:00
cf8048baab
Fix Cavium async event queue req_count buffer overflow
2026-07-07 09:54:03 -07:00
833e360ccd
fixes for issues identified by CI tests and AI review:
...
tests/api/api.h: always use FIPS 186-4 settings if defined(HAVE_SELFTEST).
wolfssl/wolfcrypt/settings.h: if defined(HAVE_SELFTEST), #define WC_FIPS_186_4.
2026-07-07 02:35:51 -05:00
5cee8bec39
wolfcrypt/src/rng_bank.c:
...
* refactor rng_bank.refcount management using wolfSSL_RefInc_IfAtLeast() and wolfSSL_RefDec_IfEquals(), to mitigate deallocation races.
* in wc_rng_bank_init(), fail fast for non-retryable errors.
* in wc_rng_bank_init(), wc_rng_bank_checkout(), and wc_rng_bank_inst_reinit(), consistently treat timeout_secs==0 as dont-wait, and timeout_secs<0 as wait-forever if wc_rng_bank_init() or flags & WC_RNG_BANK_FLAG_CAN_WAIT.
* in wc_rng_bank_checkout(), fix affinity dynamics to recompute after possible sleep, or drop affinity attempts entirely if using WC_RNG_BANK_FLAG_CAN_FAIL_OVER_INST strategy.
2026-07-07 00:19:48 -05:00
0fdceafe6b
wolfcrypt/src/wc_port.c, wolfssl/wolfcrypt/wc_port.h:
...
* implement wolfSSL_RefInc_IfAtLeast() and wolfSSL_RefDec_IfEquals().
* implement wolfSSL_RefWithMutexInc_IfAtLeast() and wolfSSL_RefWithMutexDec_IfEquals().
wolfssl/wolfcrypt/wc_port.h: for old FIPS when __GNUC__ or __clang__, always map __FUNCTION__ to __func__ for pedantic conformance.
2026-07-07 00:19:48 -05:00
09db3a6410
linuxkm/linuxkm_wc_port.h:
...
* set up WC_LINUXKM_HAVE_SELFTEST and WC_LINUXKM_HAVE_SELFTEST_FULL early.
* replace the forced-downgrade from FIPS 186-5 to 186-4 for SHA-1 support, with a #error if configuration is incompatible.
linuxkm/linuxkm_wc_port.h, linuxkm/lkcapi_glue.c, linuxkm/module_exports.c.template, linuxkm/module_hooks.c, wolfcrypt/src/random.c: consolidate into the warning-masked span of linuxkm_wc_port.h, the #includes for kernel headers linux/fips.h, linux/vmalloc.h, and linux/random.h.
2026-07-07 00:19:48 -05:00
12272e1c06
wolfssl/wolfcrypt/hash.h, src/internal.c, src/pk_ec.c, tests/api/api.h, wolfcrypt/src/dsa.c, wolfcrypt/src/ecc.c, wolfcrypt/src/pkcs7.c, wolfcrypt/test/test.c:
...
* remove FIPS 186-5 sign-mode restrictions from WC_HASH_CUSTOM_MIN_DIGEST_SIZE.
* set up WC_MIN_DIGEST_SIZE_FOR_SIGN and WC_MIN_DIGEST_SIZE_FOR_VERIFY, derived from WC_HASH_CUSTOM_MIN_DIGEST_SIZE, but enforcing FIPS 186-5 sign-mode restrictions only for WC_MIN_DIGEST_SIZE_FOR_SIGN.
* replace all uses of WC_MIN_DIGEST_SIZE with WC_MIN_DIGEST_SIZE_FOR_SIGN or WC_MIN_DIGEST_SIZE_FOR_VERIFY as appropriate.
wolfcrypt/test/test.c: in cryptocb_test(), don't expect callback execution in FIPS builds.
wolfssl/wolfcrypt/settings.h: in WOLFSSL_LINUXKM section, if defined(NO_SHA) while registering ECDSA handlers, force WC_MIN_DIGEST_SIZE_FOR_VERIFY to 20 for SHA-1 verify support.
2026-07-07 00:19:48 -05:00
d7a29f58b4
wolfcrypt/src/aes.c: activate USE_INTEL_SPEEDUP when defined(USE_INTEL_SPEEDUP_FOR_AES) in the WOLFSSL_X86_64_BUILD build path too.
...
linuxkm/lkcapi_aes_glue.c: tweak WOLFKM_AES_DRIVER_ISA_EXT to reflect AVX512 and VAES capabilities.
2026-07-07 00:19:48 -05:00
e6e8d9c7e2
wolfcrypt: fix several redefinition of typedef errors.
2026-07-06 23:49:14 -05:00
675d5df2cd
Merge pull request #10833 from kareem-wolfssl/zd22079
...
Add some missing PKCS7 length checks and bound DTLS 1.3 ACK list.
2026-07-06 17:28:22 -07:00
649054f7b8
Wycheproof: fixes for various platforms
...
Fixes for C, Intel x64, Aarch64, ARM32, Thumb2, Thumb.
2026-07-07 09:06:00 +10:00
8407359792
fix ml-dsa level auto detection in no asn1 builds
2026-07-06 16:08:58 -06:00
bcef8f4f6d
Add Windows assembly files to the build
...
Windows ASM files generated along side the ATT assembly files.
Adding them to the build so they can be used.
2026-07-07 08:02:20 +10:00
b560973780
Merge pull request #10825 from SparkiDev/aes_x64_perf_1
...
AES Intel x64: improve performance
2026-07-06 08:04:19 -07:00
0910472a34
addressed review comments
2026-07-03 18:41:59 +09:00
d40aeeabc0
Fix ret check in test.c
2026-07-03 09:15:26 +02:00
8847cf2aa4
Merge pull request #10768 from Frauschi/altNames_API
...
Add public alt-name list APIs
2026-07-03 01:14:57 -05:00
f22ec4ccae
Merge pull request #10804 from Frauschi/pkcs7_no_eContent
...
PKCS#7: support SignedData with absent eContent
2026-07-03 01:14:05 -05:00
cce3f2571e
Merge pull request #10803 from Frauschi/fenrir
...
Fenrir fixes
2026-07-03 01:11:03 -05:00
d638d2afd7
Merge pull request #10209 from ColtonWilley/harden-chain-depth-and-parser-bounds
...
Harden chain depth bounds and parser input validation
2026-07-03 01:03:36 -05:00
ec37935a1f
Merge pull request #10697 from Frauschi/zd21977
...
Even more missing ForceZero in ML-KEM / ML-DSA
2026-07-03 00:47:57 -05:00
460b7ad041
Merge pull request #10742 from tjko/rpi_compile
...
Fix compiler error when WOLFSSL_RPIPICO is used.
2026-07-03 00:45:19 -05:00
David Garske
JacobBarthelmeh
Tobias Frauenschläger
Sean Parkinson
philljj
night1rider
Daniel Pouzzner
Emma Stensland
Hideki Miyazaki