46a5465c3f
Remove redundant macro
2023-11-08 10:45:51 -07:00
16ecc9b5f8
Address feedback and don't print avg ms if mean is displayed
2023-11-08 10:45:51 -07:00
86a2b050fe
Gate on NO_FILESYSTEM
2023-11-08 10:45:50 -07:00
a40de50be2
Add ADVANCED_STATS in benchmark.c
2023-11-08 10:45:50 -07:00
9006dd5edd
Document new macro
2023-11-08 10:45:50 -07:00
2ea0c2cae8
Run benchmarks at microsecond level
2023-11-08 10:45:50 -07:00
a137847894
removed isCaSet from decoded cert
2023-11-08 12:24:29 +01:00
1562106899
micro fix
2023-11-08 11:18:58 +01:00
76d89a0c15
unused variable
2023-11-08 11:09:05 +01:00
f518a8f7d5
new build flag WOLFSSL_ALLOW_ENCODING_CA_FALSE
2023-11-08 10:51:25 +01:00
54f2d56300
ssl.c: Move out crypto compat APIs
...
ssl_crypto.c contains OpenSSL compatibility APIS for:
- MD4, MD5, SHA/SHA-1, SHA2, SHA3
- HMAC, CMAC
- DES, DES3, AES, RC4
API implementations reworked.
Tests added for coverage.
TODOs for future enhancements.
2023-11-08 19:43:18 +10:00
8bc79a0b43
Add dtls 1.3 PQC suites tests
2023-11-08 10:29:35 +01:00
4bbb0e3876
drafted ca false
2023-11-08 10:23:46 +01:00
944c7e175b
cmake: add WOLFSSL_X86_64_BUILD_ASM option
2023-11-08 09:18:07 +01:00
fca2f14f48
cmake: guard installation with WOLFSSL_INSTALL option
2023-11-08 09:18:07 +01:00
7adddc5fb8
cmake/functions: do not try to build x86_64 assembler on non-AMD64 platforms
2023-11-08 09:18:07 +01:00
703cfded28
cmake: introduce WOLFSSL_X86_64_BUILD variable
2023-11-08 09:18:06 +01:00
716cb450aa
SRTP KDF: Don't use i outside loop
...
When shifting index down, first XOR outside loop isn't meant to use i.
2023-11-08 15:04:46 +10:00
1a3f3aa5f0
Merge pull request #6951 from douzzer/20231107-unit-test-regenerate-ocsp-reply
...
20231107-unit-test-regenerate-ocsp-reply
2023-11-07 20:09:32 -07:00
9cb6243357
wolfcrypt/test/test.c: add all initializers in wolfcrypt_test_main() for args for C++ legality (C-style initializer added in e58fafcf3d).
2023-11-07 19:33:18 -06:00
ca694938fd
tests/api.c: update response vector in test_wolfSSL_CertManagerCheckOCSPResponse(), reflecting regenerated keys in certs/ocsp/.
2023-11-07 19:25:52 -06:00
0fa47e9e28
Merge pull request #6943 from SparkiDev/iar_inline_asm_no_register
...
Thumb2 inline ASM: IAR doesn't do register variables
2023-11-07 14:23:44 -08:00
b6e5b36f35
Merge pull request #6946 from dgarske/nooldtls_v1.1
...
Turn off old TLS v1.1 by default
2023-11-07 13:30:03 -07:00
ba37dc9933
Fixes bug where example server with WOLFSSL_CALLBACKS hangs when used with
...
-6 option (simulated WANT_WRITE errors) or with DTLS, causing make check
to fail
2023-11-07 11:44:20 -07:00
a46b6221b4
Turn off old TLS v1.1 by default (unless SSL v3.0 or TLS v1.0 enabled).
2023-11-07 09:23:59 -08:00
d751029c07
Merge pull request #6945 from gojimmypi/PR-goto-alternate
...
introduce WARNING_OUT, when goto is not a hard error during tests
2023-11-07 10:17:53 -07:00
8921a720a1
Merge pull request #6888 from SparkiDev/srtp_kdf
...
SRTP/SRTCP KDF: add implementation
2023-11-07 10:11:43 -07:00
a6de9cd06f
Merge pull request #6942 from SparkiDev/sp_int_sqr_volatile
...
SP int: ARM64 optimization issue
2023-11-07 10:09:25 -07:00
e58fafcf3d
introduce WARNING_OUT, optional WOLFSSL_ESPIDF_ERROR_PAUSE
2023-11-07 08:52:34 +01:00
cefe108cab
Thumb2 inline ASM: IAR doesn't do register variables
...
IAR doesn't parse register variable declarations with specified
registers. IAR doesn't even honor the register keyword.
Can use small negative but IAR doesn't like it.
Specify the positive value instead.
Add a small code size version of mont_reduce_full using umlal and umaal.
Make 'asm' usage in variables use keyword '__asm__'.
Explicitly don't inline some functions when compiling with IAR.
2023-11-07 16:12:07 +10:00
01c3345c7a
SP ARM64 asm: fix Montgomery reduction by 4
...
Handle add overflow properly in generic Montgomery reduction for 4
words. Used when reducing back to order of P-256 curve.
2023-11-07 11:39:03 +10:00
8c3e1dbf48
SRTP/SRTCP KDF: add implementation
...
Add implementation of SRTP KDF and SRTCP KDF.
One shot APIs compatible with SP 800-135 and ACVP testing.
Tests added to test.c.
Benchmarking added.
Doxygen added.
2023-11-07 10:33:14 +10:00
c852347dfb
Merge pull request #6877 from gojimmypi/Espressif-cmake-update
...
Espressif Update wolfSSL component CMakeLists.txt
2023-11-06 13:43:07 -07:00
c5e2f414ea
Merge pull request #6929 from julek-wolfssl/dtls13-early-data-server-side
...
dtls 1.3: allow to skip cookie exchange on resumption
2023-11-06 13:30:21 -07:00
8ac291bbe1
Merge pull request #6944 from miyazakh/fix_qt_jenkins_failure
...
skip DATE check if flags is set when calling AddTrustedPeer
2023-11-06 11:35:22 -07:00
c92d25816a
Merge pull request #6887 from julek-wolfssl/zd/16849
...
Implement untrusted certs in wolfSSL_X509_STORE_CTX_init
2023-11-06 10:13:43 -07:00
8569e76a87
Merge pull request #6915 from bigbrett/typo-fix-DecodeBasicCAConstraint
...
fix typo in WOLFSSL_ENTER function name
2023-11-03 13:53:23 -06:00
190b51ae6f
Merge pull request #6810 from bandi13/codeSonar_fixes
...
Fix 'negative character value'
2023-11-03 13:52:06 -06:00
8c87920903
Address code review
2023-11-03 11:02:41 +01:00
5b863dcb12
AES bitsliced implementation added
...
AES bitsliced implementation that is cache attack safe.
Configure with:
--enable-aes-bitslice
or define:
WC_AES_BITSLICE
HAVE_AES_ECB
HAVE_AES_DIRECT
Very slow for CBC, CFB, OFB and any mode that uses a previous encrypt
block to calculate current.
CTR, GCM, XTS can parallelize the data and be much faster.
Added AES-ECB test to test.c.
2023-11-03 14:19:58 +10:00
49121b5c47
move declaration to the top of func
2023-11-03 11:45:33 +09:00
8d9dc3d79f
skip DATE if flags is set when calling AddTrustedPeer
2023-11-03 09:38:23 +09:00
b8ea978066
Merge pull request #6941 from douzzer/20231102-examples-asn1-double-fclose
...
20231102-examples-asn1-double-fclose
2023-11-03 08:50:13 +10:00
cfb6560468
SP int: ARM64 optimization issue
...
Make variables volatile to avoid compiler optimization issues.
2023-11-03 08:08:29 +10:00
c8af4edd74
Merge pull request #6940 from bandi13/takeInConstParameters
...
Can guarantee not to modify arguments of `mp_isodd` and `mp_iszero`
2023-11-02 15:45:51 -06:00
d6f37d48d6
examples/asn1/asn1.c: remove now-redundant fclose(fp) in asn1App_ReadFile() (which also was incorrectly closing stdin). see #6905 .
2023-11-02 16:14:40 -05:00
49b9764c52
Can guarantee not to modify arguments of mp_isodd and mp_iszero
2023-11-02 16:00:57 -04:00
8fc754515a
Merge pull request #6938 from SparkiDev/rsa_pss_salt_len_openssl_compat_fix
...
RSA PSS OpenSSL compatibility verification: support AUTO
2023-11-02 09:07:40 -07:00
96977d1480
Merge pull request #6900 from julek-wolfssl/zd/16868
...
EVP_EncodeBlock should not append a newline
2023-11-02 09:20:39 -06:00
4870435604
RSA PSS OpenSSL compatibility verification: support AUTO
...
When wolfSSL_RSA_verify_PKCS1_PSS() called with RSA_PSS_SALTLEN_AUTO
(RSA_PSS_SALTLEN_MAX_SIGN) it wasn't using RSA_PSS_SALT_LEN_DISCOVER
when available.
2023-11-02 11:24:18 +10:00
Lealem Amedie
Stanislav Klima
Sean Parkinson
Juliusz Sosinowicz
Mikhail Paulyshka
lealem47
Daniel Pouzzner
David Garske
JacobBarthelmeh
Brett Nicholas
gojimmypi
Hideki Miyazaki
Andras Fekete