Koji Takeda
bfb2a817e3
Fix CID 535964
2025-08-05 13:25:42 +09:00
JacobBarthelmeh
040e2102a8
Merge pull request #9049 from kojiws/import_mldsa_seed_pkcs8_reapply
...
Reapply - Import ML-DSA's seed from PKCS8 file
2025-08-01 14:34:09 -06:00
Daniel Pouzzner
1152d612a6
wolfcrypt/benchmark/benchmark.c: smallstack refactors for bench_mlkem() and bench_dilithiumKeySign(), and globally replace stray uses of fprintf(stderr, ...) with printf(...) for portability.
2025-07-31 11:30:42 -05:00
Koji Takeda
09deacbe8f
Revert "Merge pull request #9045 from douzzer/20250730-revert-PR9000"
...
This reverts commit 70af2be5ab , reversing
changes made to 46347173b2 .
2025-07-31 14:14:51 +09:00
Daniel Pouzzner
c353052e54
linuxkm/linuxkm_wc_port.h:
...
* move enum wc_svr_flags out of BUILDING_WOLFSSL guard;
* add DISABLE_VECTOR_REGISTERS() and REENABLE_VECTOR_REGISTERS() definitions for !BUILDING_WOLFSSL;
* add #include <linux/spinlock.h> to !WOLFSSL_LINUXKM_USE_MUTEXES implementation to fix compilation (and add usability) to caller code;
linuxkm/lkcapi_sha_glue.c: in wc_linuxkm_drbg_ctx_clear(), fix error-path deallocation of locked object;
wolfcrypt/benchmark/benchmark.c:
* in FIPS v6+ builds, and FIPS linuxkm v5+, check retval from wc_AesEncryptDirect() and wc_AesDecryptDirect();
* add WC_RELAX_LONG_LOOP() in bench_stats_sym_finish() and bench_stats_asym_finish_ex();
wolfcrypt/test/test.c: fix rng_seed_test() with correct test vectors for the relevant combinations of features, and gate the test out if there are user override defines for ENTROPY_SCALE_FACTOR or SEED_BLOCK_SZ.
2025-07-30 22:15:05 -05:00
Daniel Pouzzner
26806cda7b
Revert "Support importing seed of ML-DSA key"
...
This reverts commit a82d1a6b12 .
2025-07-30 15:39:57 -05:00
Daniel Pouzzner
d0bf9c4b3c
Revert "Disable exporting dilithium DER tests without WOLFSSL_ASN_TEMPLATE"
...
This reverts commit bbcdfe92e0 .
2025-07-30 15:39:53 -05:00
Daniel Pouzzner
40646964b4
Revert "Follow copilot review"
...
This reverts commit 189ba201f3 .
2025-07-30 15:39:47 -05:00
JacobBarthelmeh
46347173b2
Merge pull request #9034 from holtrop/allow-pkcs7-without-x963-kdf
...
Allow building with HAVE_PKCS7 set and HAVE_X963_KDF unset
2025-07-30 10:05:09 -06:00
Josh Holtrop
ccb463dd1d
Fix unit test coverity defect in test_wc_PKCS7_SetAESKeyWrapUnwrapCb()
2025-07-30 10:37:28 -04:00
JacobBarthelmeh
36912c3af8
Merge pull request #9000 from kojiws/import_mldsa_seed_pkcs8
...
Import ML-DSA's seed from PKCS8 file
2025-07-29 16:02:36 -06:00
Josh Holtrop
df7e105fb7
Allow building with HAVE_PKCS7 set and HAVE_X963_KDF unset
2025-07-29 11:46:44 -04:00
Koji Takeda
189ba201f3
Follow copilot review
2025-07-29 07:15:32 +09:00
Josh Holtrop
26a4ea93eb
Allow building with HAVE_PKCS7 set and HAVE_AES_KEYWRAP unset
2025-07-28 12:40:35 -04:00
Koji Takeda
bbcdfe92e0
Disable exporting dilithium DER tests without WOLFSSL_ASN_TEMPLATE
2025-07-28 21:46:28 +09:00
Koji Takeda
a82d1a6b12
Support importing seed of ML-DSA key
2025-07-28 21:46:28 +09:00
Daniel Pouzzner
77dccc0c32
linuxkm:
...
* add wc_linuxkm_check_for_intr_signals(), wc_linuxkm_relax_long_loop(),
WC_CHECK_FOR_INTR_SIGNALS(), WC_RELAX_LONG_LOOP(), SAVE_NO_VECTOR_REGISTERS(),
RESTORE_NO_VECTOR_REGISTERS(), and new error code INTERRUPTED_E ("Process
interrupted");
* update the no-asm remaps in the PK implementations to use
SAVE_NO_VECTOR_REGISTERS() and RESTORE_NO_VECTOR_REGISTERS(), so that inner
loops in them are always covered by the new logic.
2025-07-25 15:56:48 -05:00
David Garske
c347f75b3c
Merge pull request #9029 from holtrop/extract-kari-rid
...
Add wc_PKCS7_GetEnvelopedDataKariRid()
2025-07-25 09:04:11 -07:00
David Garske
a06268f705
Merge pull request #9010 from miyazakh/sce_tlsproperties_uc
...
Make properties related to Renesas FSP Security Module TLS hidden for FSP SM context
2025-07-24 12:35:56 -07:00
David Garske
2db1669713
Merge pull request #8988 from JacobBarthelmeh/visibility
...
remove WOLFSSL_API in source code when already used in header file
2025-07-24 11:00:55 -07:00
Josh Holtrop
cf843c8b82
Add wc_PKCS7_GetEnvelopedDataKariRid()
...
Allow access to recipient ID before attempting to decrypt content.
2025-07-24 11:15:30 -04:00
Daniele Lacamera
09de113145
Fix warning with WOLFSSL_RSA_VERIFY_ONLY
...
PR #8830 introduces a warning when WOLFSSL_NO_CT_OPS is selected.
However, in WOLFSSL_RSA_VERIFY_ONLY mode this is enforced in
wolfssl/wolfcrypt/settings.h:4035, forcing this warning to appear when
this configuration is used.
This PR takes into account the special case, allowing WOLFSSL_NO_CT_OPS
when WOLFSSL_RSA_VERIFY_ONLY, and removing the warning.
2025-07-24 16:13:00 +02:00
David Garske
6aabc73845
Merge pull request #9018 from holtrop/decode-skp
...
Add API to decode SymmetricKeyPackage and OneSymmetricKey CMS objects
2025-07-23 16:01:58 -07:00
David Garske
44eba446ec
Merge pull request #9002 from holtrop/aes-key-wrap-callbacks
...
Add callback functions for custom AES key wrap/unwrap operations
2025-07-23 16:01:49 -07:00
David Garske
e1b3c43a2b
Merge pull request #8987 from gojimmypi/pr-espressif-allocators
...
Add wolfSSL_GetAllocators PSRAM support for Espressif ESP32
2025-07-23 15:33:53 -07:00
David Garske
c261bf4452
Merge pull request #9006 from rlm2002/zd20212
...
Coverity fixes for Zendesk issue
2025-07-23 15:29:20 -07:00
Josh Holtrop
2f2f999657
Rework to remove early function returns
2025-07-22 20:35:28 -04:00
Josh Holtrop
0d48911ae4
Update style per code review comments
2025-07-22 20:30:44 -04:00
philljj
65126352a0
Merge pull request #9025 from douzzer/20250721-wolfssl_linuxkm_pie_redirect_table-direct
...
20250721-wolfssl_linuxkm_pie_redirect_table-direct
2025-07-22 18:08:11 -05:00
Hideki Miyazaki
5e77253577
Addressed code review comments
2025-07-23 07:44:30 +09:00
Josh Holtrop
13fb6b83cd
Update style per code review comments
2025-07-22 16:38:13 -04:00
Josh Holtrop
27f0ef8789
Combine AES key wrap/unwrap callbacks
2025-07-22 16:34:37 -04:00
Josh Holtrop
7bcb346dd7
Remove early function returns per code review comments
2025-07-22 14:58:26 -04:00
Josh Holtrop
15c8730ef7
Use wc_ prefix for IndexSequenceOf()
2025-07-22 14:50:42 -04:00
Josh Holtrop
77bace5010
Update style per code review comments
2025-07-22 14:47:22 -04:00
gojimmypi
97c2e9f973
Add wolfSSL_GetAllocators PSRAM support for Espressif ESP32
2025-07-22 11:34:47 -07:00
Ruby Martin
29288640ab
add additional check so dead code can be reached
2025-07-22 10:48:06 -06:00
Ruby Martin
dc345553df
wrap res assignment in else statement
2025-07-22 08:49:26 -06:00
Josh Holtrop
aa986a2b24
Update doxygen comment style per code review comments
2025-07-22 08:27:00 -04:00
Josh Holtrop
525f1cc39e
Update style per code review comments
2025-07-22 08:19:01 -04:00
Sean Parkinson
8f00fc2594
Merge pull request #8890 from kareem-wolfssl/zd20022
...
Allow larger pathLen values in Basic Constraints.
2025-07-22 17:16:27 +10:00
Sean Parkinson
1f72866489
Merge pull request #8993 from miyazakh/tsip_tlsproperties_uc
...
Make properties related to TLS handshake hidden for TSIP TLS user-context structure
2025-07-22 17:05:44 +10:00
Sean Parkinson
6c847b1870
Merge pull request #9013 from ColtonWilley/fix_cryptocb_rsa_pad_inline
...
Set out ptr properly for RSA pad crypto cb inline
2025-07-22 16:47:06 +10:00
Sean Parkinson
7417958649
Merge pull request #9015 from philljj/fix_dual_alg_build
...
dual alg certs: fix dual alg certs build, and asn cleanup.
2025-07-22 16:26:41 +10:00
Sean Parkinson
95768038b9
Merge pull request #9019 from ribes96/word64_literal
...
wolfcrypt test: Fix build on 32 bit machines
2025-07-22 16:23:02 +10:00
Daniel Pouzzner
0495f2cc20
linuxkm/linuxkm_wc_port.h: add WC_LKM_INDIRECT_SYM() macro; on x86, use wolfssl_linuxkm_pie_redirect_table directly for indirect calls from PIE container, otherwise use wolfssl_linuxkm_get_pie_redirect_table() to avoid e.g. R_AARCH64_LD64_GOT_LO12_NC relocations;
...
linuxkm/Kbuild: remove -fno-stack-protector from default PIE_FLAGS.
2025-07-21 19:34:00 -05:00
Lealem Amedie
8df20d6966
Check that u value isn't zero in RsaFunctionPrivate
2025-07-21 10:45:43 -06:00
Albert Ribes
2e25c65129
wolfcrypt test: Fix build on 32 bit machines
...
Declare a 64 bit variable using W64LIT to avoid warnings on 32 bit
machines
2025-07-21 10:34:19 +02:00
Josh Holtrop
06d86af67c
Add API to decode SymmetricKeyPackage and OneSymmetricKey CMS objects
2025-07-19 18:28:06 -04:00
Hideki Miyazaki
7a03b9fea6
fix trailing whitespaces
2025-07-18 07:54:45 +09:00