Sean Parkinson
f36f86ee98
LMS SHA-256_192: fix parameters
...
Winternitz bits needs to be one larger when only 192 bit hash.
2025-06-23 08:16:05 +10:00
David Garske
1be303866e
Merge pull request #8908 from douzzer/20250620-clang-tidy-and-cppcheck-fixes-and-workarounds
...
20250620-clang-tidy-and-cppcheck-fixes-and-workarounds
2025-06-20 15:07:09 -07:00
David Garske
f30c54abdd
Merge pull request #8894 from SparkiDev/ppc32_sha256_asm
...
PPC 32 ASM: SHA-256
2025-06-20 14:29:47 -07:00
Daniel Pouzzner
af78ed8b6f
wolfcrypt/src/wc_xmss_impl.c: in wc_xmss_bds_state_treehash_complete(), add suppression for false positive clang-analyzer-core.NullDereference from LLVM-21 pre20250523+.
2025-06-20 15:31:31 -05:00
Daniel Pouzzner
7977a605c5
src/internal.c: in FreeSskeArgs(), move nullness check on args to the start, and make it unconditional, to resolve nullPointerRedundantChecks.
2025-06-20 15:04:07 -05:00
Daniel Pouzzner
e1fe186753
wolfcrypt/src/sp_int.c: in _sp_prime_trials(), use DECL_SP_INT() not DECL_SP_INT_ARRAY() for n1 and r, to mollify a very confused clang-tidy (fixes false positive clang-analyzer-core.UndefinedBinaryOperatorResult and clang-analyzer-core.CallAndMessage).
2025-06-20 14:52:42 -05:00
David Garske
0f119ab8e2
Merge pull request #8906 from julek-wolfssl/libspdm-3.7.0
...
libspdm 3.3.0 -> 3.7.0
2025-06-20 11:44:53 -07:00
Juliusz Sosinowicz
9f900d4b8a
libspdm 3.3.0 -> 3.7.0
...
3.3.0 pulls cmocka from https://git.cryptomilk.org/projects/cmocka.git . Update to 3.7.0 to pull from https://gitlab.com/cmocka/cmocka.git .
2025-06-20 19:55:16 +02:00
Kaleb Himes
17f3da11d2
Merge pull request #8899 from SparkiDev/entropy_cont_tests_fix_2
...
Entropy: fix proportion health test
2025-06-20 09:10:41 -06:00
David Garske
7610b4e2f5
Merge pull request #8893 from SparkiDev/asm_omit_frame_pointer
...
ARM32/Thumb2/RISC-V 64 ASM: omit frame pointer
2025-06-19 10:48:23 -07:00
David Garske
96a3591f98
Merge pull request #8896 from holtrop/fix-asn-memory-leak
...
Fix memory leak in ParseCRL_Extensions
2025-06-19 06:18:41 -07:00
David Garske
8f0106a7fe
Merge pull request #8888 from julek-wolfssl/bind-v9.18.33
...
Add bind v9.18.33 testing
2025-06-19 06:08:13 -07:00
David Garske
64bc41a3c3
Merge pull request #8901 from SparkiDev/ecc_config_fixex_1
...
ECC configuration fixes
2025-06-19 06:02:33 -07:00
Sean Parkinson
f7fb68dedc
Merge pull request #8884 from dgarske/enablecerts
...
Fix to make sure ASN.1 is enabled if just building PQ algorithms
2025-06-19 15:50:59 +10:00
Sean Parkinson
7289687b44
ECC configuration fixes
...
When ECC verify only and with no RNG.
2025-06-19 13:37:43 +10:00
Sean Parkinson
62721f4d51
PPC32 SHA-256 ASM: small code implementation
...
Slower but smaller SHA-256 assembly code implementation enabled with:
WOLFSSL_PPC32_ASM_SMALL. (--enable-ppc32=small or
--enable-ppc32=inline,small)
2025-06-19 10:51:12 +10:00
Sean Parkinson
16aab18ae9
Entropy: fix proportion health test
...
Update the count of entries.
2025-06-19 10:34:03 +10:00
Josh Holtrop
7dfb782c9e
Fix memory leak in ParseCRL_Extensions
2025-06-18 16:47:15 -04:00
David Garske
74de689941
Merge pull request #8875 from kareem-wolfssl/zd20035
...
Fix SRP wolfCrypt test on lower FP_MAX/SP_INT_BITS configs
2025-06-18 08:59:09 -07:00
David Garske
27176a5eeb
Merge pull request #8870 from kareem-wolfssl/zd20030
...
Various minor fixes.
2025-06-18 08:55:07 -07:00
David Garske
e5a9c7039c
Merge pull request #8889 from holtrop/remove-dtls-from-echo-examples
...
Remove DTLS from echo examples
2025-06-18 08:52:47 -07:00
David Garske
9528aaf238
Support WOLFSSL_TRACK_MEMORY with SINGLE_THREADED.
2025-06-18 08:37:27 -07:00
David Garske
cdbc4cb3b3
Fix to make sure certs/asn are enabled for PQ algorithms
2025-06-18 08:32:49 -07:00
Sean Parkinson
c39f1fe721
PPC 32 ASM: SHA-256
...
Pure and inline ASM for the PowerPC 32-bit.
2025-06-18 21:23:15 +10:00
Sean Parkinson
dc70cfa3b3
ARM32/Thumb2/RISC-V 64 ASM: omit frame pointer
...
ARM32/Thumb2: Generated code now omits the frame pointer attribute on
each function. Remove global use in configure.ac.
RISC-V 64: Omit the frame pointer on the one function that uses the
register 's0'.
2025-06-18 10:20:55 +10:00
Kaleb Himes
6f78c26bff
Merge pull request #8820 from SparkiDev/entropy_cont_tests_fix
...
Entropy - fix off by ones in continuous testing
2025-06-17 17:56:00 -06:00
Sean Parkinson
c724c6560d
Entropy - fix off by ones in continuous testing
...
rep_cnt is count of contiguous bytes with same value.
First ever sample must set count to 1.
Wasn't filling the cache up completely.
Off by one in check for initial fill.
2025-06-18 08:10:55 +10:00
Josh Holtrop
feaae9fc58
Fix configure help to use --enable-debug instead of --enable-verbose
2025-06-17 14:38:01 -04:00
Josh Holtrop
0b6c53c8b0
Remove DTLS from echoserver/echoclient examples
...
This fixes some intermittent CI testsuite failures.
2025-06-17 14:38:01 -04:00
David Garske
7d77446964
Merge pull request #8882 from rizlik/dtls13_always_transmit_explicit_ack
...
dtls13: always send ACKs on detected retransmission
2025-06-17 11:35:07 -07:00
Daniel Pouzzner
d39295166f
Merge pull request #8885 from embhorn/zd20088
...
Check for STDC_NO_ATOMICS
2025-06-17 13:33:39 -05:00
David Garske
6b68797b4f
Merge pull request #8883 from JacobBarthelmeh/rng
...
account for Intel RDRAND build without HAVE_HASHDRBG
2025-06-17 11:33:16 -07:00
David Garske
7e864c177d
Merge pull request #8886 from douzzer/20250617-prime_test-uninited-wc_FreeRng
...
20250617-prime_test-uninited-wc_FreeRng
2025-06-17 11:31:53 -07:00
Kareem
fe5ae0cbdf
Restore 128-byte SRP test using safe prime N for the case where 192 bytes is too large for the fast/SP math config.
2025-06-17 11:30:11 -07:00
Kareem
a035b045a4
Only run SRP tests with at least 3072 bits.
...
The SRP buffers are 192 bytes, so they need a minimum of 3072 bits.
If the bit size is too low, wc_SrpGetVerifier will return MP_VAL as the buffers won't fit.
2025-06-17 11:30:11 -07:00
Kareem
7e4ec84124
Add macros for legacy get_digit functions for FIPS/selftest.
2025-06-17 10:12:06 -07:00
Kareem
9c9465aa23
Also account for selftest for mp_get_digit refactor.
2025-06-17 10:12:06 -07:00
Kareem
05aa4f5f08
Make mp_get_digit refactor FIPS friendly.
2025-06-17 10:12:06 -07:00
Kareem
2366718d5a
Add args->input free in FreeSskeArgs.
...
This free is redundant in most cases but it covers the specific
case of using async, exiting SendServerKeyExchange early due to
WANT_WRITE or WC_PENDING_E, then later freeing the async context
without calling SendServerKeyExchange again.
2025-06-17 10:12:06 -07:00
Kareem
304019d28d
Fix inclusion guard around wc_RsaSSL_Verify.
...
The current condition of !WOLFSSL_RSA_VERIFY_ONLY doesn't make sense,
as the verify only case will want this function.
Based on the original change and the context, it looks like this was a
typo meant to be !WOLFSSL_RSA_VERIFY_INLINE.
2025-06-17 10:12:06 -07:00
Kareem
e8c110d2ac
Rename get_digit* to mp_get_digit* to avoid conflicts with other functions named get_digit.
2025-06-17 10:12:06 -07:00
Kareem
6633b52e28
Don't try to build wc_RsaSSL_Sign in asn.c MakeSignature if RSA public or verify only is enabled.
2025-06-17 10:12:06 -07:00
David Garske
83954100d6
Merge pull request #8812 from kosmax871/tropic01-dev
...
Added crypto callback functions for TROPIC01 secure element
2025-06-17 10:03:18 -07:00
Eric Blankenhorn
9defad0b24
Check for STDC_NO_ATOMICS
2025-06-17 11:40:07 -05:00
Juliusz Sosinowicz
9c54032159
Add bind v9.18.33 testing
2025-06-17 18:38:38 +02:00
David Garske
5e6c1ba05f
Merge pull request #8879 from julek-wolfssl/openssh-10.0p2
...
Updates for OpenSSH 10.0p2
2025-06-17 09:36:45 -07:00
Daniel Pouzzner
d28045daa8
wolfcrypt/test/test.c: fix prime_test() uninitialized data access by wc_FreeRng().
2025-06-17 09:31:19 -05:00
Daniel Pouzzner
3e5e470005
Merge pull request #8876 from philljj/small_drbg_cleanup
...
linuxkm drbg: refactor drbg_ctx clear.
2025-06-16 16:33:57 -05:00
Maxim Kostin
037ccbaa05
Update TROPIC01 integration guide and header file for key slot definitions and datasheet link
2025-06-16 21:12:19 +02:00
David Garske
842e2366e3
Merge pull request #8881 from douzzer/20250615-heapmath-FREE_MP_INT_SIZE
...
20250615-heapmath-FREE_MP_INT_SIZE
2025-06-16 11:46:12 -07:00