wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-08 23:30:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
28,107 Commits 13 Branches 184 Tags
f1508c910aceafb2d097737deb642f54b5fa6c80
Commit Graph

28107 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Pouzzner f1508c910a Merge pull request #9930 from julek-wolfssl/fenrir/260903 
Fenrir fixes
 2026-03-10 19:32:56 -05:00
Daniel Pouzzner 7af6decbf3 Merge pull request #9856 from anhu/rsa_guard 
Macro guard parameter null check.
 2026-03-10 19:32:19 -05:00
Daniel Pouzzner f18d5ba359 Merge pull request #9928 from philljj/fix_f_451 
ascon: don't skip wc_AsconAEAD128_Clear on auth error.
 2026-03-10 19:31:20 -05:00
Daniel Pouzzner e3e5179cf8 Merge pull request #9869 from JacobBarthelmeh/f356 
fix for sanity checks on serial input
 2026-03-10 19:30:46 -05:00
Daniel Pouzzner df504300db Merge pull request #9863 from JacobBarthelmeh/f361 
Fix for setting curve using all caps with wolfSSL_set1_curves_list
 2026-03-10 19:29:46 -05:00
Daniel Pouzzner 65092ab5eb Merge pull request #9838 from SparkiDev/slhdsa_1 
FIPS 205, SLH-DSA: implementation
 2026-03-10 19:28:59 -05:00
Daniel Pouzzner 2ad5afaf4d wolfcrypt/src/wc_slhdsa.c: fixes for uninited data reads in slhdsakey_wots_sign_chain_x4_*() and slhdsakey_wots_pk_from_sig_x4; 
CMakeLists.txt, cmake/functions.cmake, cmake/options.h.in: fixes for -DWOLFSSL_SLHDSA.
 2026-03-10 17:51:18 -05:00
JacobBarthelmeh cbf5264d1c replace comment character with allowed character 2026-03-10 10:23:10 -06:00
Juliusz Sosinowicz afed9d4b79 fixup! ProcessServerHello: verify extension lengths 2026-03-10 09:52:06 +01:00
Juliusz Sosinowicz ae3fcb5601 Update setup-msbuild action 
F-534
 2026-03-10 09:52:06 +01:00
Juliusz Sosinowicz 62fca11726 Dockerfile: use https instead of http 
F-532
 2026-03-10 09:52:06 +01:00
Juliusz Sosinowicz 3a8e4a34ce ProcessSessionTicket: verify nonce length 2026-03-10 09:52:06 +01:00
Juliusz Sosinowicz 2febc1c7f2 ProcessServerHello: verify extension lengths 
F-428
 2026-03-10 09:52:06 +01:00
Juliusz Sosinowicz 186aaadf87 Pin actions/checkout version 
F-529
 2026-03-10 09:52:06 +01:00
Juliusz Sosinowicz 9c4e77d47d DoTls13ClientHello: session length is a sender side requirement 
F-433
 2026-03-10 09:52:06 +01:00
Juliusz Sosinowicz 8a57ca84c3 CheckCertCRL_ex: check cbRet after callback 
F-432
 2026-03-10 09:52:05 +01:00
Juliusz Sosinowicz 8696d0d2d8 QuicTransportParam_new: update len check 
F-431
 2026-03-10 09:52:05 +01:00
Juliusz Sosinowicz 15dbd61dbe Remove dead code 
`ticket->lifetime` is never set to 0xfffffff anywhere

F-430
 2026-03-10 09:52:05 +01:00
Juliusz Sosinowicz 7a264162b8 wc_ChaCha20Poly1305_Decrypt: clear unauthed plaintext 
F-452
 2026-03-10 09:52:05 +01:00
Juliusz Sosinowicz 0b03d56127 wc_GetKeyOID: Clean up logging in mldsa case 
F-449
 2026-03-10 09:52:05 +01:00
Daniel Pouzzner b02ddde4f2 Merge pull request #9886 from philljj/fix_f_193 
wc_encrypt: add missing ForceZero for Des, Arc4, Rc2.
 2026-03-09 23:43:26 -05:00
Daniel Pouzzner 18d1190e82 Merge pull request #9924 from Frauschi/f-426 
Fix potential underflow in sniffer
 2026-03-09 23:42:32 -05:00
Daniel Pouzzner f5902bd29a Merge pull request #9862 from embhorn/zd21243 
Fix DeriveTls13Keys with no_key
 2026-03-09 23:41:52 -05:00
Daniel Pouzzner 2cb1781b9a Merge pull request #9922 from Frauschi/f-450 
Fix memory leak in error case within RsaMGF1
 2026-03-09 23:39:30 -05:00
Daniel Pouzzner cd2386c87e Merge pull request #9894 from philljj/fix_f_280 
hpke: add missing ForceZero for eae_prk, key_schedule_context, secret.
 2026-03-09 23:38:37 -05:00
Daniel Pouzzner 3386e40453 Merge pull request #9890 from philljj/fix_f_hmac 
hmac: add missing ForceZero for tmp, prk.
 2026-03-09 23:38:04 -05:00
Daniel Pouzzner 3736352b24 Merge pull request #9888 from philljj/fix_f_383 
pwdbased: add missing ForceZero for blocks, v, y.
 2026-03-09 23:37:24 -05:00
Daniel Pouzzner 8f485a5b7d Merge pull request #9929 from douzzer/20260309-nullPointerOutOfMemory 
20260309-nullPointerOutOfMemory
(reviewed+approved by @philljj)
 2026-03-09 23:36:44 -05:00
Daniel Pouzzner 23f62bceb5 linuxkm/module_exports.c.template: add wolfssl/wolfcrypt/wc_slhdsa.h. 
wolfcrypt/src/wc_slhdsa.c:

  * refactor SAVE_VECTOR_REGISTERS2() in slhdsakey_fors_sign() as
    CAN_SAVE_VECTOR_REGISTERS(), with local save-restore wrappers around the
    rest of the vector calls deeper in the call stack, to avoid failing
    GFP_ATOMIC allocations and long spans with interrupts disabled.

  * fix numerous bugprone-macro-parentheses and bugprone-signed-char-misuses.

  * use readUnalignedWord64() in SHAKE256_SET_SEED_HA_X4_*() and
    slhdsakey_shake256_set_seed_ha_x4() to avoid benign unaligned access warnings
    from sanitizers.

wolfcrypt/test/test.c:

  * in TestDumpData(), use WOLFSSL_DEBUG_PRINTF(), not fprintf(stderr, ...), for
    portability.

  * in slhdsa_test_param() and slhdsa_test(), use WC_DECLARE_VAR() and friends
    for SlhDsaKey allocations, and use ERROR_OUT() and single-return-point
    refactors to fix error path memory leaks.
 2026-03-09 23:08:42 -05:00
JacobBarthelmeh 6e56635a09 Fix for setting curve using all caps with wolfSSL_set1_curves_list 2026-03-09 10:41:01 -06:00
Daniel Pouzzner 5bb8b3f803 src/pk_ec.c: in wolfSSL_ECDSA_SIG_new(), mitigate false-positive nullPointerOutOfMemory by returning immediately if initial XMALLOC() fails. 2026-03-09 10:59:50 -05:00
Daniel Pouzzner aa4b84f9a2 wolfcrypt/src/evp_pk.c: fix benign nullPointer in d2i_make_pkey() reported by cppcheck-2.20.0. 2026-03-09 10:58:36 -05:00
Eric Blankenhorn 84650b576c Add WOLFSSL_API_PREFIX_MAP 2026-03-09 09:49:39 -06:00
Eric Blankenhorn 9f1296062b Update comment 2026-03-09 09:49:39 -06:00
Eric Blankenhorn 4b09fb36d9 Add test test_tls13_derive_keys_no_key 2026-03-09 09:49:37 -06:00
Eric Blankenhorn d57474a3b7 Fix DeriveTls13Keys with no_key 2026-03-09 09:46:17 -06:00
jordan f7127ca729 ascon: don't skip wc_AsconAEAD128_Clear on auth error. 2026-03-09 09:33:34 -05:00
Tobias Frauenschläger 7ed66dd1c3 Fix potential underflow in sniffer 2026-03-09 13:37:02 +01:00
Tobias Frauenschläger 9c2bb3d10d Fix memory leak in error case within RsaMGF1 2026-03-09 11:17:31 +01:00
Sean Parkinson 39b34333d6 FIPS 205, SLH-DSA: implementation 
Adding implementation of SLH-DSA.
Included optimizations for Intel x64.
Some tests added.
 2026-03-09 19:06:34 +10:00
Daniel Pouzzner b3f08f33b8 Merge pull request #9873 from miyazakh/fix_larger_crlnum 
fix lareger(>57 octets) CRL number
 2026-03-06 22:49:03 -06:00
Daniel Pouzzner 04e2adc799 Merge pull request #9916 from julek-wolfssl/fenrir/286 
ecc.c: clear priv key with forcezero
 2026-03-06 22:38:27 -06:00
Daniel Pouzzner 031c87407d Merge pull request #9892 from embhorn/f380-381-382 
Hardening in wc_MakeDsaKey and wc_FreeDsaKey
 2026-03-06 22:37:44 -06:00
Daniel Pouzzner 396b5ec1da Merge pull request #9896 from embhorn/f278-281-282 
Fixes issues in SRP component:
 2026-03-06 22:36:59 -06:00
Daniel Pouzzner f02f6d1d67 Merge pull request #9895 from embhorn/f283-287 
Hardening in GeneratePrivateDh186 and wc_DhImportKeyPair
 2026-03-06 22:36:14 -06:00
Daniel Pouzzner d4ac953ca5 Merge pull request #9893 from embhorn/f284-285 
Hardening in wc_FreeRsaKey and wc_RsaPrivateKeyDecodeRaw
 2026-03-06 22:35:39 -06:00
Daniel Pouzzner 2635315822 Merge pull request #9891 from embhorn/f194 
Harden wc_ecc_shared_secret_gen_sync
 2026-03-06 22:34:58 -06:00
Daniel Pouzzner 73b5306721 Merge pull request #9850 from kaleb-himes/p-collide-nth-solve 
Nth attempt to resolve port collisions once-and-for-all
 2026-03-06 22:34:16 -06:00
Daniel Pouzzner e74d52a32e Merge pull request #9915 from julek-wolfssl/fenrir/378 
wc_PKCS7_PwriKek_KeyUnWrap: use a ct cmp
 2026-03-06 22:32:18 -06:00
Daniel Pouzzner f0ba67ee21 Merge pull request #9906 from julek-wolfssl/fenrir/25 
wolfSSL_ASN1_item_i2d: simplify buf cleanup
 2026-03-06 22:31:27 -06:00