Daniel Pouzzner
bbbed009b2
tests/api/test_dtls.c: fix read of uninited data in test_dtls13_ack_order().
2025-04-19 01:57:51 -05:00
Daniel Pouzzner
9e5c064d5d
Merge pull request #8679 from kojiws/keep_header_on_pkcs12_parse
...
Add wc_PKCS12_parse_ex() to keep PKCS8 header
2025-04-19 01:57:21 -05:00
Daniel Pouzzner
543ba268a4
Merge pull request #8558 from julek-wolfssl/openssh-9.9-fix
...
wolfSSL_EVP_PKEY_cmp: only compare the public keys
2025-04-19 01:51:49 -05:00
philljj
3cdc521d33
Merge pull request #8696 from douzzer/20250418-linuxkm-lkcapi-cleanup
...
20250418-linuxkm-lkcapi-cleanup
2025-04-18 20:19:36 -05:00
Daniel Pouzzner
2e31cad4f6
wolfssl/internal.h: clean up WOLFSSL_TEST_VIS comments and an unneeded attr on GetOutputBuffer().
2025-04-18 18:27:07 -05:00
Daniel Pouzzner
fe244fb41b
linuxkm: clean up LKCAPI glue:
...
typography fixes;
static attr on const byte arrays;
refactor km_ecdsa_verify() to use a single heap allocation;
fix linuxkm_test_ecdsa_nist_driver() to copy sig and hash to a heap allocation before passing to sg_set_buf() (avoids unmapping of rodata);
in linuxkm_test_pkcs1_driver() move hash from stack to heap;
add LINUX_VERSION_CODE >= 5.4 assertion in linuxkm/lkcapi_glue.c;
streamline macro logic in linuxkm/lkcapi_sha_glue.c.
2025-04-18 18:21:57 -05:00
JacobBarthelmeh
a21542cdfc
Merge pull request #8689 from julek-wolfssl/gh/8666
...
dtls13: send acks with correct record number order
2025-04-18 15:50:56 -06:00
philljj
c41407111a
Merge pull request #8694 from douzzer/20250411-linuxkm-SHA
...
20250411-linuxkm-SHA
2025-04-18 16:45:55 -05:00
Juliusz Sosinowicz
43c564d48b
dtls13: send acks with correct record number order
2025-04-18 14:56:59 -05:00
Daniel Pouzzner
74232f5fe7
Merge pull request #8631 from julek-wolfssl/gh/8579-2
...
dtls13: additional epoch checks
2025-04-18 14:49:00 -05:00
Daniel Pouzzner
8c0b931459
Merge pull request #8652 from kareem-wolfssl/zd19563_2
...
Add some FPKI test OIDs which are currently being used in DoD JITC certificates.
2025-04-18 14:04:29 -05:00
Daniel Pouzzner
0430d25cfb
linuxkm shims for all SHA and SHA-HMAC flavors.
2025-04-18 11:57:29 -05:00
Daniel Pouzzner
f7407e4065
20250411-linuxkm-SHA checkpoint
2025-04-18 11:57:29 -05:00
Koji Takeda
2e02274be7
Add guard macro
2025-04-18 08:08:25 +09:00
David Garske
1b240e2cbc
Merge pull request #8693 from kareem-wolfssl/forum8313
...
Fix unused function warning for wc_AesDecrypt when building with STM32.
2025-04-17 15:39:32 -07:00
Koji Takeda
039ff1b460
Add wc_PKCS12_parse_ex()
2025-04-18 06:39:16 +09:00
Kareem
645da33176
Fix unused function warning for wc_AesDecrypt when building with STM32.
...
This function is not needed for AES-CCM, as the AES-CCM decrypt function only calls wc_AesEncrypt.
2025-04-17 14:33:44 -07:00
Daniel Pouzzner
5e1f713995
Merge pull request #8691 from lealem47/ecc521_minSz
...
Fix SetMinEccKey_Sz to allow for P-521 minimum
2025-04-17 14:31:56 -05:00
Kareem
038eab61d0
Add additional FPKI test OIDs.
2025-04-17 11:29:36 -07:00
Kareem
686ae22af2
Add additional FPKI test OIDs to FPKI test cert.
2025-04-17 11:14:40 -07:00
Kareem
00a6c3953c
Add some FPKI test OIDs which are currently being used in DoD JITC certificates.
2025-04-17 11:10:35 -07:00
Juliusz Sosinowicz
e709cb4cf2
_Dtls13HandshakeRecv: cast handshakeType
2025-04-17 19:21:59 +02:00
philljj
cb1a35ac7d
Merge pull request #8690 from douzzer/20250417-LINUXKM_DIRECT_RSA
...
20250417-LINUXKM_DIRECT_RSA
2025-04-17 11:26:09 -05:00
Juliusz Sosinowicz
f6f295e29f
fixup! dtls13: additional epoch checks
2025-04-17 18:18:44 +02:00
Daniel Pouzzner
775bbacce6
Merge pull request #8688 from miyazakh/client_pqc_option
...
Make client pqc option consistency with server
2025-04-17 11:18:41 -05:00
Juliusz Sosinowicz
3cba5c6dc1
fixup! dtls13: additional epoch checks
2025-04-17 18:18:01 +02:00
Juliusz Sosinowicz
3f560036d6
dtls13: additional epoch checks
2025-04-17 18:18:01 +02:00
Daniel Pouzzner
b533d082b0
Merge pull request #8678 from embhorn/zd19742
...
Fix types.h for MSVC6.0
2025-04-17 11:12:09 -05:00
Lealem Amedie
1b80c03fe9
Change to short type
2025-04-17 10:05:40 -06:00
Daniel Pouzzner
44adc4a71d
linuxkm/lkcapi_rsa_glue.c: gate LINUXKM_DIRECT_RSA directly on WC_RSA_NO_PADDING;
...
configure.ac: always pass -DWC_RSA_NO_PADDING for --enable-linuxkm-lkcapi-register=rsa or =all.
2025-04-17 10:38:45 -05:00
JacobBarthelmeh
ce67d8cd07
Merge pull request #8687 from douzzer/20250417-fix-test_mldsa_pkcs8
...
20250417-fix-test_mldsa_pkcs8
2025-04-17 08:56:57 -06:00
Daniel Pouzzner
28091e8842
Merge pull request #8685 from philljj/linuxkm_ecdh_forcezero
...
linuxkm ecdh: force zero shared secret buffer, and clear old key.
2025-04-17 09:35:35 -05:00
Lealem Amedie
429f435593
Fix SetMinEccKey_Sz to allow P-521 minimum
2025-04-17 08:22:20 -06:00
Hideki Miyazaki
da2c48fef5
make client pqc option consistency with server
2025-04-17 15:40:27 +09:00
Daniel Pouzzner
5b3e19c1b6
Merge pull request #8686 from miyazakh/oid_collision
...
fix OID collision
2025-04-17 00:54:04 -05:00
Daniel Pouzzner
90f30fd15e
Merge pull request #8623 from SparkiDev/lms_kid_from_privraw
...
LMS: add API to get Key ID from raw private key
2025-04-17 00:49:08 -05:00
Daniel Pouzzner
3fcd3cdb99
tests/api/test_mldsa.c: fix clang-analyzer-core.NullDereference in test_mldsa_pkcs8().
2025-04-17 00:42:11 -05:00
philljj
4906974fad
Merge pull request #8683 from douzzer/20250416-linuxkm-FIPS-wrappers
...
20250416-linuxkm-FIPS-wrappers
2025-04-16 23:18:04 -05:00
David Garske
404fafd598
Merge pull request #8677 from SparkiDev/regression_fixes_17
...
Regression test fixes
2025-04-16 20:20:28 -07:00
David Garske
a66fb123b4
Merge pull request #8684 from SparkiDev/lms_max_levels_1
...
LMS: fix for when WOLFSSL_LMS_MAX_LEVELS is 1
2025-04-16 20:19:40 -07:00
David Garske
a9e2146f06
Merge pull request #8675 from SparkiDev/entropy_memuse_fix
...
Entropy MemUse: fix for when block size less than update bits
2025-04-16 20:18:22 -07:00
David Garske
2ce415c464
Merge pull request #8682 from SparkiDev/sp_ecc_non_block_aligned
...
ECC non-blocking: make sp_ecc_ctx data aligned
2025-04-16 20:17:33 -07:00
Hideki Miyazaki
62f7ff9ec2
fix OID collision
...
fix qt jenkins failure
2025-04-17 11:55:03 +09:00
jordan
57ccabb25c
linuxkm ecdh: force zero shared secret buffer, and clear old key.
2025-04-16 21:15:32 -05:00
Sean Parkinson
62f28759d8
LMS: fix for when WOLFSSL_LMS_MAX_LEVELS is 1
2025-04-17 11:19:41 +10:00
Sean Parkinson
4f3ce188b6
Memory Zero checks: add check call
...
Must check memory is zeroed after Tls13DeriveKey() call.
2025-04-17 10:53:49 +10:00
Sean Parkinson
4c7fb1f428
ECC non-blocking: make sp_ecc_ctx data aligned
...
Align data on 4 byte boundary for ARM chips.
2025-04-17 10:07:58 +10:00
Sean Parkinson
a34284e0a2
Entropy MemUse: support for custom hi res time
...
Call the custom high resolution time function when
CUSTOM_ENTROPY_TIMEHIRES is defined with the function name.
2025-04-17 09:30:29 +10:00
Daniel Pouzzner
78a9cd7c58
linuxkm/module_hooks.c: don't define FIPS_NO_WRAPPERS;
...
linuxkm/lkcapi_ecdh_glue.c: in km_ecdh_compute_shared_secret(), wrap wc_ecc_shared_secret() in PRIVATE_KEY_UNLOCK...PRIVATE_KEY_LOCK.
2025-04-16 18:29:43 -05:00
Daniel Pouzzner
bfab68f40c
Merge pull request #8646 from philljj/register_rsa
...
linuxkm: register rsa
2025-04-16 17:51:20 -05:00
