David Garske
|
c4ea64b7fc
|
Merge pull request #4140 from SparkiDev/set_sig_algs
|
2021-06-21 19:18:10 -07:00 |
|
David Garske
|
52582ede28
|
Merge pull request #4146 from SparkiDev/pkcs11_dec_final
PKCS #11: Use C_Decrypt instead of C_DecryptUpdate
|
2021-06-21 15:28:45 -07:00 |
|
Sean Parkinson
|
ab2c1e117e
|
Merge pull request #4149 from guidovranken/wc_ecc_verify_hash_ex-alloc-check
ECC: wc_ecc_verify_hash_ex, return if ALLOC_CURVE_SPECS() fails
|
2021-06-22 08:24:22 +10:00 |
|
David Garske
|
4942220718
|
Merge pull request #4150 from elms/fix/sniffer_no_dh
Fix build with `--enable-sniffer --disable-dh`
|
2021-06-21 12:47:58 -07:00 |
|
Elms
|
a409e7c9ce
|
Fix build with --enable-sniffer --disable-dh
|
2021-06-21 09:42:51 -07:00 |
|
David Garske
|
7491a44bb4
|
Fix for possible memory leak case on mp_init failure in wc_ecc_verify_hash_ex with WOLFSSL_SMALL_STACK.
|
2021-06-21 09:19:47 -07:00 |
|
Guido Vranken
|
7c600e3ebc
|
In wc_ecc_verify_hash_ex, return if ALLOC_CURVE_SPECS() fails
This prevents a NULL pointer dereference later in the function.
|
2021-06-20 22:29:20 +02:00 |
|
Kaleb Himes
|
149920fc14
|
Merge pull request #4110 from dgarske/config_examples
Additional user_settings.h examples
|
2021-06-18 12:00:29 -05:00 |
|
David Garske
|
5a685ca37e
|
Merge pull request #4139 from SparkiDev/etm_check_pad
TLS EtM: check all padding bytes are the same value
|
2021-06-18 08:14:46 -07:00 |
|
David Garske
|
15065175d8
|
Merge pull request #4145 from SparkiDev/sp_int_neg_mod
SP int negative: check size of a in mp_mod
|
2021-06-18 08:14:02 -07:00 |
|
Sean Parkinson
|
7224fcd9bc
|
TLS: add support for user setting signature algorithms
|
2021-06-18 16:19:01 +10:00 |
|
Sean Parkinson
|
699a75c211
|
PKCS #11: Use C_Decrypt instead of C_DecryptUpdate
Some PKCS #11 devices need final called (implicit in C_Decrypt).
|
2021-06-18 12:14:34 +10:00 |
|
David Garske
|
3d5c5b39ac
|
Merge pull request #4134 from embhorn/joi-cert
Update use of joi cert and add to renew script.
|
2021-06-17 18:28:12 -07:00 |
|
Sean Parkinson
|
2fb80ceb59
|
Merge pull request #4133 from dgarske/crypto_cb_25519
Adds crypto callback support for Ed/Curve25519 and SHA2-512/384
|
2021-06-18 09:47:30 +10:00 |
|
David Garske
|
18fc1b7e63
|
Merge pull request #4006 from elms/refactor_pointer_manipulation
|
2021-06-17 16:37:03 -07:00 |
|
Sean Parkinson
|
485cfd798b
|
SP int negative: check size of a in mp_mod
When using negative numbers, t is allocated to be one digit longer than
a->used. Fail when a->used is SP_DIGIT_MAX.
|
2021-06-18 09:28:51 +10:00 |
|
Sean Parkinson
|
98ce4e901a
|
TLS EtM: check all padding bytes are the same value
Must be constant time so as not to provide an oracle.
That is, don't leak length of data and padding.
|
2021-06-18 08:42:48 +10:00 |
|
David Garske
|
9181c949ae
|
Added static ciphers and sniffer. Fixed spelling.
|
2021-06-17 15:19:45 -07:00 |
|
David Garske
|
ffb9a8b440
|
Improve the user_settings_template to incude Windows. Added STM32 configuration example.
|
2021-06-17 15:19:45 -07:00 |
|
David Garske
|
8b14bf2951
|
Additional user_settings.h examples.
|
2021-06-17 15:19:45 -07:00 |
|
David Garske
|
258e0c10da
|
Merge pull request #4142 from elms/fix/memtest
test: Fix memtest callbacks
|
2021-06-17 14:01:21 -07:00 |
|
David Garske
|
5440b6c63c
|
Fix for intel asm SHA512 where HAVE_INTEL_AVX1 or HAVE_INTEL_AVX2 is defined, but USE_INTEL_SPEEDUP is not. Fix for scan-build error with test.c ret not used.
|
2021-06-17 13:50:09 -07:00 |
|
Chris Conlon
|
bd6a353921
|
Merge pull request #4083 from dgarske/stm32_aes_gcm
Fix for STM32 AES GCM for HAL's that support byte sized headers
|
2021-06-17 13:08:15 -06:00 |
|
Elms
|
91f002235e
|
make: --enable-memtest track and --enable-memtest=fail to force failure
|
2021-06-17 10:45:39 -07:00 |
|
Elms
|
ad59b8af45
|
test: Fix memtest callbacks
|
2021-06-17 10:15:11 -07:00 |
|
David Garske
|
c802ea7ebd
|
Fix for unaligned authentication tag sizes when the STM32 Cube HAL supports it with CRYP_HEADERWIDTHUNIT_BYTE.
|
2021-06-17 08:15:44 -07:00 |
|
David Garske
|
b6ec698a83
|
Fix for FIPS case with hkdf_test.
|
2021-06-17 08:15:44 -07:00 |
|
David Garske
|
14b845a9a5
|
Fixes for wolfCrypt HMAC test without SHA1/SHA2. Added NO RNG option to cube pack configuration template.
|
2021-06-17 08:15:44 -07:00 |
|
David Garske
|
e8c4f857e1
|
Fix to use accelerated AES GCM when auth is not 4-byte aligned on platforms supporting byte header size.
|
2021-06-17 08:15:44 -07:00 |
|
David Garske
|
a1517dbfe4
|
Merge pull request #4138 from SparkiDev/ssl_reorg_2
Reorg of ssl.c: X509_STORE_CTX and X509_STORE APIs isolated
|
2021-06-17 07:38:25 -07:00 |
|
David Garske
|
eb7896919b
|
Merge pull request #4137 from SparkiDev/tls13_hrr_ch_ems
TLS EMS ext: TLS13 - send in second CH if in first
|
2021-06-17 07:29:19 -07:00 |
|
David Garske
|
5751e20bcc
|
Merge pull request #4136 from SparkiDev/tfm_size_checks
tfm: fix length check in add and mul_d
|
2021-06-17 07:28:40 -07:00 |
|
Sean Parkinson
|
ad4baec0f5
|
Merge pull request #4090 from JacobBarthelmeh/CAAM
CAAM: add dynamic setup of entropy delay on init
|
2021-06-17 17:06:01 +10:00 |
|
Jacob Barthelmeh
|
d09b7153f2
|
address review items
|
2021-06-17 09:43:06 +07:00 |
|
Sean Parkinson
|
4bba282a70
|
TLS EMS ext: TLS13 - send in second CH if in first
|
2021-06-17 11:40:48 +10:00 |
|
Sean Parkinson
|
effa7e079d
|
Reorg of ssl.c: X509_STORE_CTX and X509_STORE APIs isolated
|
2021-06-17 11:38:26 +10:00 |
|
David Garske
|
98147de422
|
Fix for wolfCrypt test not calling init for ed25519 tests.
|
2021-06-16 16:44:28 -07:00 |
|
David Garske
|
54cef64250
|
Merge pull request #4128 from SparkiDev/ssl_reorg_1
Reorg of ssl.c: PKCS7, PKCS12, crypto-only APIs isolated
|
2021-06-16 16:12:03 -07:00 |
|
Sean Parkinson
|
9023c4d65a
|
tfm: fix length check in add and mul_d
Check that the overflow digit is going to fit rather than whether we are
at limit after adding digit.
|
2021-06-17 09:11:01 +10:00 |
|
Kaleb Himes
|
93ae372c55
|
Merge pull request #4132 from dgarske/exebits
Remove execute bit on update pem/der files
|
2021-06-16 17:20:53 -05:00 |
|
David Garske
|
0fc9c33f84
|
Wire up Ed25519 SHA512 to use devId.
|
2021-06-16 13:15:06 -07:00 |
|
David Garske
|
54f69079a8
|
Merge pull request #4131 from elms/fix/g++_enum_logical_op
fixes build with g++ automatically converting enum to int
|
2021-06-16 13:09:06 -07:00 |
|
Eric Blankenhorn
|
1307972344
|
Update use of joi cert and add to renew script.
|
2021-06-16 13:55:36 -05:00 |
|
David Garske
|
15d761a0c2
|
Added ED25519 and Curve25519 crypto callback support.
|
2021-06-16 11:49:24 -07:00 |
|
David Garske
|
9c24731e3c
|
Added SHA2-384/512 crypto callback support.
|
2021-06-16 11:49:24 -07:00 |
|
David Garske
|
27218e1d40
|
Merge pull request #4129 from JacobBarthelmeh/Testing
add cert generation to renewcerts script
|
2021-06-16 10:21:59 -07:00 |
|
David Garske
|
90d894b9fd
|
Remove execute bit on update pem/der files.
|
2021-06-16 10:17:20 -07:00 |
|
David Garske
|
852892c85b
|
Merge pull request #4130 from embhorn/zd12463
Fix BIO_free_all return type
|
2021-06-16 10:06:49 -07:00 |
|
David Garske
|
e39fc4b6ec
|
Merge pull request #4099 from embhorn/zd12274
Fix nonblocking ret value from crlIOCb
|
2021-06-16 10:05:04 -07:00 |
|
Elms
|
75445f7810
|
fixes build with g++ automatically converting enum to int
|
2021-06-16 09:40:20 -07:00 |
|