wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-10 17:50:52 +02:00
Code Issues Packages Projects Releases Wiki Activity
30,658 Commits 13 Branches 184 Tags
fdfba83c3832ae4dcb6604ef98bfac6da1f623eb
Commit Graph

423 Commits

Author SHA1 Message Date
David Garske fdfba83c38 Merge pull request #10788 from aidangarske/fenrir-tls-batch-2026-06 
Various hardening fixes across sniffer, QUIC, PKCS#11, TLS and tooling
 2026-07-08 13:58:14 -07:00
David Garske 76491e6b60 Merge pull request #10661 from yosuke-wolfssl/fix/f_5808 
Enable SCSV check unconditionally
 2026-07-08 10:52:59 -07:00
Tobias Frauenschläger 673d8d00bb Merge pull request #10778 from SparkiDev/time_stamp_protocol 
Time-Stamp Protocol (RFC 3161)
 2026-07-08 17:43:38 +02:00
Sean Parkinson ae023a5643 Time-Stamp Protocol (RFC 3161) 
Implementation in wolfCrypt
OpenSSL compatibility layer in wolfSSL
Added tests, certificates, examples.
 2026-07-08 09:33:47 +10:00
David Garske bee18d122d Merge pull request #10801 from SparkiDev/windows_asm_1 
Add Windows assembly files to the build
 2026-07-07 14:26:31 -07:00
Sean Parkinson bcef8f4f6d Add Windows assembly files to the build 
Windows ASM files generated along side the ATT assembly files.
Adding them to the build so they can be used.
 2026-07-07 08:02:20 +10:00
Josh Holtrop a29a882a3a Rust wrapper: wolfssl-wolfcrypt v2.1.0 2026-07-06 12:07:39 -04:00
Josh Holtrop 19f6f01c61 Rust wrapper: update CHANGELOG for v2.1.0 2026-07-06 12:05:45 -04:00
Josh Holtrop 0a85d07ab3 Rust wrapper: update crate dependencies 2026-07-06 12:03:14 -04:00
Daniel Pouzzner 64a0f384a4 Merge pull request #10780 from holtrop-wolfssl/rust-rename-dilithium-mldsa 
Rust wrapper: rename dilithium to mldsa
 2026-07-01 16:30:28 -05:00
Daniel Pouzzner 36437417b6 Merge pull request #10703 from holtrop-wolfssl/rust-validate-prefix-env-var 
Rust wrapper: validate WOLFSSL_PREFIX in build.rs
 2026-07-01 16:29:36 -05:00
Daniel Pouzzner a66b87b926 Merge pull request #10645 from holtrop-wolfssl/rust-ed-verify-result-codes 
Rust wrapper: fix signature incorrect return value from Ed448 and Ed25519 verify functions.
 2026-07-01 16:28:44 -05:00
David Garske 0cecccdf6e Merge pull request #10756 from SparkiDev/aes_asm_ymm_zmm 
Intel x64 ASM: Add new assembly for AES
 2026-06-25 21:41:17 -07:00
aidan garske c8ccffd84c F-5757 - Reject negative Size in Ada AES_Set_Cbc_Decrypt wrapper 2026-06-25 15:07:33 -07:00
aidan garske bd18a9bfcc F-4229 - Reject negative Size in Ada AES_Set_Cbc_Encrypt wrapper 2026-06-25 15:07:33 -07:00
Josh Holtrop b6d962350d Rust wrapper: rename dilithium to mldsa 2026-06-25 10:31:44 -04:00
jordan 0fe21bbcd5 prepare for release 5.9.2 2026-06-24 12:01:51 -05:00
Sean Parkinson a342eba578 Intel x64 ASM: Add new assembly for AES 
Support AES-XTS AVX512/VAES
Support AES-GCM AVX512/VAES
Support AES-ECB/CBC/CTR AVX512/VAES/AVX1/AES-NI.
Remove code from aes_asm.S/aes_asm.asm
Add CPU defines for AVX512 and VAES
Updated ASM files with new defines for AVX512.
Added support for printing out the new CPU Id flags in benchmark.
Added new files to Windows projects.
aes.c: Supports ECB/CBC/CTR in assembly. Supports calling AVX512/VAES assembly.
 2026-06-23 20:54:59 +10:00
Josh Holtrop d523e463a5 Rust wrapper: validate WOLFSSL_PREFIX in build.rs 2026-06-16 15:22:04 -04:00
Daniel Pouzzner 0097739dd8 fixes for F-3325: 
wolfcrypt/src/aes.c: enforce AES-XTS K1!=K2 constraint in wc_AesXtsSetKeyNoInit() unless WC_AES_XTS_ALLOW_DUPLICATE_KEYS and !HAVE_FIPS:

tests/api/test_aes.c: add negative tests to test_wc_AesXtsSetKey() for K1==K2;

wolfcrypt/test/test.c: fix keys in aes_xts_128_inplace_test() and aes_xts_192_inplace_test() so that K1!=K2, update test vectors, and remove associated !HAVE_FIPS gating;

linuxkm/lkcapi_aes_glue.c: synchronize aes_xts_128_test() test of ciphertext stealing in-place with wolfcrypt/test/test.c.

wrapper/rust/wolfssl-wolfcrypt/src/aes.rs: synchronize XTS streaming test with wolfcrypt/test/test.c.

linuxkm/: refactor self-test sensing with version-gated setup in linuxkm_wc_port.h and refactored gates in lkcapi_glue.c.
 2026-06-11 15:38:28 -05:00
Yosuke Shimizu e2ed815d51 Enable SCSV check unconditionally 2026-06-11 13:05:08 +09:00
Josh Holtrop f8c86ce227 Rust wrapper: fix Ed25519/Ed448 signature verify failed return values 2026-06-09 11:31:25 -04:00
Josh Holtrop 243926f5da Update wolfssl-wolfcrypt Rust crate to v2.0.0 2026-06-08 10:14:24 -04:00
Josh Holtrop 226f96db33 Rust wrapper: add comments about label pointer casts in rsa.rs 2026-06-01 14:57:58 -04:00
Josh Holtrop b737370ac4 Rust wrapper: add new files to include.am 2026-05-29 14:51:50 -04:00
Josh Holtrop bdd70dd3e3 Rust wrapper: zeroize XTSStream.xtsaesstreamdata 
Fix F-4467
 2026-05-29 14:51:50 -04:00
Josh Holtrop 364e883941 Rust wrapper: handle MAC_CMP_FAILED_E from CMAC::verify{,_ex}() 
Fix F-4468
 2026-05-29 14:51:50 -04:00
Josh Holtrop 685a6632a9 Rust wrapper: zeroize mlkem_kem seeds after use 2026-05-29 14:51:50 -04:00
Josh Holtrop 904975d5a9 Rust wrapper: add null check for kid_ptr returned from C in Lms::get_kid() 2026-05-29 14:51:50 -04:00
Josh Holtrop e3f57d5f92 Rust wrapper: fix ParamInvalid error in hash_password_customized() 2026-05-29 14:51:50 -04:00
Josh Holtrop f7a5df3489 Rust wrapper: support older non-const RSA API in rsa_pkcs1v15.rs 2026-05-29 14:51:50 -04:00
Josh Holtrop 830aa7f7b6 Rust wrapper: fix CFB::encrypt1 and CFB::decrypt1 to take size in bits 2026-05-29 14:51:50 -04:00
Josh Holtrop 014925d37b Rust wrapper: Add RSA-OAEP API 2026-05-29 14:51:50 -04:00
Josh Holtrop 056d548467 Rust wrapper: add scrypt kdf support and scrypt_password_hash trait impl module 2026-05-29 14:51:50 -04:00
Josh Holtrop 8c11a8e028 Rust wrapper: gate RSA doc tests that use set_shared_rng() on alloc feature 2026-05-18 12:49:29 -07:00
Josh Holtrop 735d00d3d7 Rust wrapper: check slice lengths in ECC::import_unsigned 2026-05-18 12:40:17 -07:00
Josh Holtrop a2b9a24082 Rust wrapper: test more empty slices in test_ecc 2026-05-18 12:27:45 -07:00
Josh Holtrop 9696cf26eb Rust wrapper: use Rc instead of Arc for RNG references 
WC_RNG has no internal locking so it is not safe to share a single
WC_RNG across threads without locking.
 2026-05-18 12:27:45 -07:00
Josh Holtrop 67bb40be42 Rust wrapper: fix RSA::set_rng() doc test to actually call set_rng() 2026-05-18 12:27:45 -07:00
Josh Holtrop 5e65a12b62 Rust wrapper: drop mut from rng in ecc doc tests 2026-05-18 12:27:45 -07:00
Josh Holtrop 076144cd9c Rust wrapper: avoid double wc_ecc_init_ex() call 2026-05-18 12:27:45 -07:00
Josh Holtrop f6e279ab42 Rust wrapper: test for null-terminated C-style strings in ECC import_raw APIs 2026-05-18 12:27:45 -07:00
Josh Holtrop 0117baf011 Rust wrapper: document wolfSSL version requirement 2026-05-18 12:27:45 -07:00
Josh Holtrop 93db87e4ed Rust wrapper: remove outdated set_rng safety contract comments 2026-05-18 12:27:45 -07:00
Josh Holtrop 5a45fabb0d Rust wrapper: add blake2_digest module 2026-05-18 12:27:45 -07:00
Josh Holtrop cfc600977a Rust wrapper: add blake2_mac module 2026-05-18 12:27:45 -07:00
Josh Holtrop d88d5702e5 Rust wrapper: implement Clone for HMAC types 2026-05-18 12:27:45 -07:00
Josh Holtrop b3aa7ef260 Rust wrapper: add Aes192Ccm and Aes192Gcm 2026-05-18 12:27:45 -07:00
Josh Holtrop 4ed0a0a90d Rust wrapper: store pointer to C ECC key struct instead of instance 
This fixes internal pointers breaking if Rust moves the ECC struct (with
some build configurations).
 2026-05-18 12:27:45 -07:00
Josh Holtrop 54cb1d8d38 Rust wrapper: ensure memory safety for C RNG struct 
- store pointer to WC_RNG instead of full struct
- enforce RNG is not dropped before consumer structs

The C library stores a pointer via the set_rng() methods on a few
structs (e.g. RSA). This change holds a reference (or instance) of RNG
within the consumer structs to ensure it is kept alive if set_rng (or
now set_shared_rng) is used.
 2026-05-18 12:27:44 -07:00