David Garske
11ddec3f69
Merge pull request #9681 from tmael/wfb1_
...
Fix cert SW issues in Aes and rng
2026-01-21 13:41:01 -08:00
David Garske
758d74f51f
Merge pull request #9687 from holtrop-wolfssl/rust-hmac-blake2
...
Rust wrapper: add HMAC-BLAKE2[bs] wrappers
2026-01-21 12:55:48 -08:00
Tesfa Mael
1c3816d7d8
Use seedSz < SEED_BLOCK_SZ
2026-01-21 12:09:53 -08:00
Tesfa Mael
d3d2105035
Fix cert SW issues
2026-01-21 12:09:53 -08:00
David Garske
f52930b844
More fixes for NO RNG and NO check key (broken in #9606 and #9576 )
2026-01-21 10:31:57 -08:00
Daniel Pouzzner
cc7897be0d
Merge pull request #9689 from dgarske/rsa_no_rng
...
Fixes for RSA with no RNG
2026-01-21 11:13:03 -06:00
David Garske
98dbc56daa
Merge pull request #9691 from douzzer/20260120-linuxkm-RHEL9v6-and-RDSEED-sanity-check
...
20260120-linuxkm-RHEL9v6-and-RDSEED-sanity-check
2026-01-21 09:03:32 -08:00
David Garske
38b0fe19a1
Improvements to code for ECDHE and peer review fixes.
2026-01-21 00:03:26 +00:00
David Garske
16fb84d0d1
Peer review fixes. Tested with brainpool.
2026-01-21 00:03:26 +00:00
David Garske
54f0ecb536
Fix for ephemeral key usage limit.
2026-01-21 00:03:26 +00:00
David Garske
384eaa48b3
Peer review fixes (thank you copilot)
2026-01-21 00:03:26 +00:00
David Garske
654901782c
Peer review cleanups. ECDHE improvements.
2026-01-21 00:03:26 +00:00
David Garske
02c3086e00
Added ECDHE support
2026-01-21 00:03:26 +00:00
David Garske
09c75f25de
Fixes for peer review.
2026-01-21 00:03:26 +00:00
David Garske
c7ca035baf
Cleanup WOLFSL_STSAFE and fix issue with multi-test macros
2026-01-21 00:03:26 +00:00
David Garske
a4c2398265
Add STSAFE-A120 Support
2026-01-21 00:03:26 +00:00
Daniel Pouzzner
7048fa80d4
wolfcrypt/src/random.c and wolfssl/wolfcrypt/settings.h: fixes from CI and peer review:
...
* in wc_GenerateSeed_IntelRD(), use stack/register allocation for sanity_word{1,2}, and
* don't set WC_VERBOSE_RNG if WOLFSSL_DEBUG_PRINTF is missing.
2026-01-20 16:48:21 -06:00
Daniel Pouzzner
b91272c9a5
wolfcrypt/src/random.c: add sanity check in wc_GenerateSeed_IntelRD() to work around buggy RDSEED by disabling it if it generates three identical 64 bit words consecutively;
...
wolfssl/wolfcrypt/settings.h: if DEBUG_WOLFSSL && !WC_NO_VERBOSE_RNG, set WC_VERBOSE_RNG, and add WOLFSSL_NO_DEBUG_CERTS to allow inhibition of WOLFSSL_DEBUG_CERTS.
2026-01-20 15:24:43 -06:00
David Garske
91d9389b9f
Fixes for RSA with no RNG
2026-01-20 11:05:10 -08:00
David Garske
6bdc6a7550
Merge pull request #9618 from SparkiDev/volatile_multi_statement
...
Multiple volatile variables in a C statement undefined
2026-01-20 10:42:49 -08:00
Josh Holtrop
af0fd013a1
HMAC-BLAKE2b: avoid coverity complaints about accessing x_key out of range
2026-01-20 08:14:02 -05:00
Daniel Pouzzner
e465f92905
Merge pull request #9642 from holtrop-wolfssl/hmac-blake2
...
Add HMAC-BLAKE2b and HMAC-BLAKE2s API functions
2026-01-19 16:49:08 -06:00
Daniel Pouzzner
bfc4f6bb01
Merge pull request #9677 from dgarske/riscv_sha512
...
Fix for building RISC-V 64-bit without SHA512
2026-01-19 12:57:59 -06:00
Josh Holtrop
e90429dbb8
HMAC-BLAKE2: avoid clang-analyzer warnings about x_key being uninitialized
2026-01-18 22:20:14 -05:00
Josh Holtrop
90c8b5c80d
HMAC-BLAKE2: Use uppercase U for unsigned integer constants
2026-01-17 09:15:47 -05:00
Daniel Pouzzner
5c7f986925
Merge pull request #9670 from miyazakh/fix_selftest
...
Fix compilation, crypt test and unit test failures when selftest is enabled
2026-01-16 23:57:27 -06:00
David Garske
214b3c2dd7
Fix for building RISC-V 64-bit without SHA512
2026-01-16 13:07:08 -08:00
Josh Holtrop
b1086a1dbc
HMAC-BLAKE2[bs] - remove some spaces per review feedback
2026-01-16 10:38:49 -05:00
Zackery Backman
7a894515cb
initialize i_shaCopy to prevent undefined behavior
2026-01-15 18:00:27 -07:00
David Garske
f58787259c
Merge pull request #9674 from douzzer/20260115-PQC-WOLFSSL_NO_MALLOC
...
20260115-PQC-WOLFSSL_NO_MALLOC
2026-01-15 16:18:34 -08:00
Hideki Miyazaki
8ad73d8ac1
Fix compile and crypt test failures when selftest is enabled
2026-01-16 08:55:06 +09:00
Sean Parkinson
fabe0c090a
Merge pull request #9646 from rlm2002/coverity
...
20260112 Coverity: update macros and add length checks
2026-01-16 09:20:01 +10:00
Daniel Pouzzner
eb65361281
wolfcrypt/test/test.c:
...
* tweaks to xmss_test() for compatibility with WOLFSSL_NO_MALLOC && NO_WOLFSSL_MEMORY;
* fixes for return codes in dilithium_test().
wolfssl/wolfcrypt/dilithium.h: add !WC_NO_CONSTRUCTORS gate around wc_dilithium_new() and wc_dilithium_delete() prototypes, to match gating in implementation.
2026-01-15 16:04:36 -06:00
Ruby Martin
b4344c17cc
add cleanup logic to sakke_kat_derive_test()
2026-01-15 10:58:26 -07:00
Daniel Pouzzner
f738e44e39
wolfcrypt/test/test.c: in random_bank_test(), fix position of a misplaced WC_DRBG_BANKREF gate.
2026-01-14 18:03:32 -06:00
Sean Parkinson
9b5cbbc3fb
Merge pull request #9663 from embhorn/zd21045
...
Resolve unused var warning in oss-fuzz
2026-01-15 08:36:17 +10:00
Josh Holtrop
b432ee93a5
Add incremental API for HMAC-BLAKE2[bs] computation
2026-01-14 16:12:42 -05:00
Josh Holtrop
2b3c02531c
Use ForceZero to clean up HMAC-BLAKE2[bs]
2026-01-14 15:37:29 -05:00
Josh Holtrop
92b57d7e34
Add HMAC-BLAKE2b and HMAC-BLAKE2s API functions
2026-01-14 15:37:28 -05:00
Ruby Martin
e32ac6ffb7
XMEMSET with WC_CALLOC_VAR_EX
...
switch WC_ALLOC_VAR_EX with XMEMSET to WC_CALLOC_VAR_EX
fix XMEMSET call for WC_CALLOC_VAR_EX
2026-01-14 11:27:21 -07:00
Eric Blankenhorn
625a3cd250
Resolve unused var warning in oss-fuzz
2026-01-14 11:23:19 -06:00
David Garske
2a5256ba18
Merge pull request #9654 from embhorn/zd21038
...
Fix DecodeAuthKeyInternal not clearing cert->extAuthKeyIdSet
2026-01-14 09:19:24 -08:00
Daniel Pouzzner
f878c43814
wolfcrypt/src/wc_port.c: in wolfCrypt_Cleanup(), return error if called with initRefCount <= 0.
2026-01-13 14:42:27 -06:00
Daniel Pouzzner
f6fbd2a3b7
wolfcrypt/test/test.c: in random_bank_test(), add a missing WC_DRBG_BANKREF gate, and fix wc_rng_bank_init(bank, ...) to pass _FLAG_NO_VECTOR_OPS to set up .sha_method test.
2026-01-13 11:21:40 -06:00
Daniel Pouzzner
b195628204
wolfcrypt/src/sha512.c: fix underinitialization and config-dependent leak paths in InitSha512_Family().
2026-01-13 11:21:40 -06:00
Daniel Pouzzner
fc68137b47
wolfcrypt/src/wc_port.c:
...
* fixes for readability-implicit-bool-conversion in wolfSSL_Atomic_Ptr_CompareExchange().
* refactor initRefCount as a wolfSSL_Atomic_Int, unless !WOLFSSL_ATOMIC_OPS, for thread safety.
2026-01-13 11:21:39 -06:00
Daniel Pouzzner
e0db99218f
wolfcrypt/src/asn.c: fix -Wstringop-truncation from gcc-16.0.0_p20260104 in KeyPemToDerPassCb().
2026-01-13 11:21:39 -06:00
Daniel Pouzzner
6f48e0613e
Merge pull request #9647 from SparkiDev/sp_volatile_op_fix
...
SP volatile op fix
2026-01-13 11:20:13 -06:00
Sean Parkinson
37b20fabdc
SP volatile op fix
...
Performing a non-atomic operation on a volatile.
Deprecated in C++20 and checked by new versions of compilers.
2026-01-14 02:17:20 +10:00
Eric Blankenhorn
4e419938a7
Fix DecodeAuthKeyInternal not clearing cert->extAuthKeyIdSet
2026-01-13 08:09:10 -06:00