Commit Graph

  • a28e107722 Merge pull request #9336 from holtrop/rust-wc-kdf-prf JacobBarthelmeh 2025-10-24 09:27:56 -06:00
  • 62deeedb52 Merge pull request #9335 from cconlon/jniAesCts JacobBarthelmeh 2025-10-24 09:20:02 -06:00
  • 4282ad38ec Merge pull request #9300 from effbiae/ImportPeerECCKey David Garske 2025-10-24 08:17:54 -07:00
  • c354202f11 Merge pull request #9341 from holtrop/rust-dh-test-fix David Garske 2025-10-24 08:17:35 -07:00
  • 2127365559 Rust wrapper: fix intermittent test_dh failure Josh Holtrop 2025-10-24 09:04:55 -04:00
  • f087b1300c refactor to MakePSKPreMasterSecret effbiae 2025-10-24 12:02:39 +11:00
  • 67c2d80470 Merge pull request #9337 from douzzer/20251023-FIPS-autotools-fix David Garske 2025-10-23 15:44:53 -07:00
  • 6ff47a7a4c src/include.am: fix gate flub, !BUILD_FIPS_V6 -> !BUILD_FIPS_V6_PLUS, around sp-asm files (covered earlier for FIPS). Daniel Pouzzner 2025-10-23 16:57:39 -05:00
  • 61a277c262 Rust wrapper: Use core::ptr instead of std::ptr Josh Holtrop 2025-10-23 16:30:03 -04:00
  • b75be94f0d Rust wrapper: use SHA256::DIGEST_SIZE instead of WC_SHA256_DIGEST_SIZE Josh Holtrop 2025-10-23 16:24:09 -04:00
  • 5b8115ed8f Rust wrapper: add wolfssl::wolfcrypt::kdf, wolfssl::wolfcrypt::prf Josh Holtrop 2025-10-23 09:23:46 -04:00
  • 33b08ed136 Merge pull request #9328 from holtrop/rust-wc-hmac JacobBarthelmeh 2025-10-23 14:02:11 -06:00
  • 3e85b572f3 define HAVE_CTS for --enable-jni build, used by JCE AES/CTS/NoPadding mode Chris Conlon 2025-10-23 12:46:59 -06:00
  • f1fa60067c Check-in stm32.c changes for v5.2.5 WCv5.2.5-STM32-PAA Lealem Amedie 2025-10-23 11:35:09 -06:00
  • 985a090adc Merge pull request #9334 from julek-wolfssl/wolfSSL_PEM_X509_X509_CRL_X509_PKEY_read_bio-len JacobBarthelmeh 2025-10-23 09:36:46 -06:00
  • 7f5d02c36b Merge pull request #9317 from SparkiDev/benchmark_asym_cc JacobBarthelmeh 2025-10-23 09:31:30 -06:00
  • f376512692 Merge pull request #9332 from douzzer/20251022-FIPS-armasm-autotools-fixup David Garske 2025-10-23 07:45:32 -07:00
  • 27212312f1 Rust wrapper: Remove unnecessary double casts in hmac Josh Holtrop 2025-10-23 09:46:05 -04:00
  • df4a2120c2 Rust wrapper: add wolfssl::wolfcrypt::hkdf module Josh Holtrop 2025-10-23 09:41:12 -04:00
  • b801396d52 Rust wrapper: HMAC::get_hmac_size does not need mut ref Josh Holtrop 2025-10-23 09:32:37 -04:00
  • 36b64fb5ae x509: make sure pem buffer will be large enough to hold pem header Juliusz Sosinowicz 2025-10-23 13:27:44 +02:00
  • 3bd5a30a77 .wolfssl_known_macro_extras: snip out a couple no-longer-needed extras. Daniel Pouzzner 2025-10-22 22:54:51 -05:00
  • b1f2ff73ed wolfcrypt/src/sha256.c: in wc_Sha256HashBlock(), use ByteReverseWords() rather than a series of ByteReverseWord32() to get WOLFSSL_USE_ALIGN. Daniel Pouzzner 2025-10-22 22:54:20 -05:00
  • be301f93da fixes for autotools config around armasm AES/SHA refactor in #9284: in configure.ac, add BUILD_FIPS_V5_PLUS and BUILD_FIPS_V6_PLUS conditionals, and fix BUILD_FIPS_V6 conditional to match v6 only; Daniel Pouzzner 2025-10-22 22:52:24 -05:00
  • dc45a6f340 Benchmark: add cycle counts for asym ops Sean Parkinson 2025-10-17 09:40:30 +10:00
  • 4daab8a813 Merge pull request #9284 from SparkiDev/aarch64_asm_gen JacobBarthelmeh 2025-10-22 11:10:27 -06:00
  • 520d9501af Merge pull request #9322 from SparkiDev/crldist_reason_fix JacobBarthelmeh 2025-10-22 09:33:08 -06:00
  • d60e4ddbd1 Merge pull request #9329 from SparkiDev/regression_fixes_20 JacobBarthelmeh 2025-10-22 09:12:58 -06:00
  • 58e37067ef Merge pull request #9315 from SparkiDev/aes_cfb_ofb_improv JacobBarthelmeh 2025-10-22 09:06:46 -06:00
  • 821dc5cb13 Regression testing fixes Sean Parkinson 2025-10-22 18:33:44 +10:00
  • 8533bc803b AES: Improve CFB and OFB and add tests Sean Parkinson 2025-10-17 07:22:37 +10:00
  • 4964a1760a refactor to ImportPeerECCKey effbiae 2025-10-22 13:03:55 +11:00
  • ce610db4e8 Rust wrapper: add wolfssl::wolfcrypt::hmac module Josh Holtrop 2025-10-20 12:03:37 -04:00
  • 7e6c86a6c3 Merge pull request #9326 from douzzer/20251021-KDF-FIPS-gate-tweaks philljj 2025-10-21 12:49:21 -05:00
  • 9c3a0e3a67 Merge pull request #9324 from douzzer/20251020-coverity-WC_SAFE_foo David Garske 2025-10-21 09:41:25 -07:00
  • 936e350c63 Merge pull request #9325 from LinuxJedi/zp-fixes JacobBarthelmeh 2025-10-21 10:19:01 -06:00
  • 1134d246f7 Merge pull request #9309 from night1rider/CryptoCbCopy Brett Nicholas 2025-10-21 09:45:18 -06:00
  • b07bc74a71 wolfcrypt/test/test.c: skip nist_sp80056c_kdf_test() and nist_sp800108_cmac() on FIPS <7.0.0. Daniel Pouzzner 2025-10-21 10:25:00 -05:00
  • 818d1e37eb Merge pull request #9321 from anhu/no_conv_ems JacobBarthelmeh 2025-10-21 09:38:00 -06:00
  • c1339abc05 Merge pull request #9323 from philljj/fix_coverity_onestep David Garske 2025-10-21 08:23:05 -07:00
  • 6f9ca6cb52 Merge pull request #9294 from LinuxJedi/benchmark-ram David Garske 2025-10-21 08:15:28 -07:00
  • 0eb7ad0ead Merge pull request #9320 from holtrop/rust-wc-sha David Garske 2025-10-21 08:15:01 -07:00
  • 90e0857d2d Validate LinuxKM I/O lengths Andrew Hutchings 2025-10-21 14:36:06 +01:00
  • 259670055a Bound buffered HTTP body size Andrew Hutchings 2025-10-21 14:13:41 +01:00
  • be1428d108 Validate AF_ALG RSA inputs Andrew Hutchings 2025-10-21 13:57:36 +01:00
  • 11d2f4894e Guard ProcessKeyShare against truncated key shares Andrew Hutchings 2025-10-21 13:38:05 +01:00
  • 8b4f816ae7 BioReceiveInternal: allow NULL write BIO Andrew Hutchings 2025-10-21 13:12:52 +01:00
  • e6ca4d15e2 MicriumReceiveFrom: tighten peer validation Andrew Hutchings 2025-10-21 13:09:03 +01:00
  • 9c1462a9ec Aarch64 asm: convert to generated Sean Parkinson 2025-08-22 09:04:42 +10:00
  • ca552cc345 src/internal.c: work around false positive "C4701: potentially uninitialized local variable" in GrowOutputBuffer(). Daniel Pouzzner 2025-10-20 23:54:15 -05:00
  • 279238ce63 wolfssl/wolfcrypt/types.h: * fix WC_MIN_SINT_OF(). * add outer cast back to target type in WC_MAX_UINT_OF() and WC_MAX_SINT_OF(). * rename WC_SAFE_SUM_*_NO_WUR to WC_SAFE_SUM_*_CLIP(). * remove clipping assignments from failure paths in WC_WUR_INT() variants. * add WC_SAFE_SUB_UNSIGNED_CLIP(), WC_SAFE_SUB_UNSIGNED(), WC_SAFE_SUB_SIGNED_CLIP(), and WC_SAFE_SUB_SIGNED(). * add Coverity-specific annotations in WC_SAFE_*() to suppress false-positive overflow warnings. Daniel Pouzzner 2025-10-20 23:27:09 -05:00
  • c1032a8cb6 KDF onestep: hashOutSz err check. jordan 2025-10-20 22:05:41 -05:00
  • 5adf392d56 Merge pull request #9281 from effbiae/tlsx-with-ech Sean Parkinson 2025-10-21 10:58:33 +10:00
  • 3f9e2e5baa X.509 cert: crl distribution point reasons is IMPLICIT Sean Parkinson 2025-10-21 09:30:45 +10:00
  • 00c936c29e Only change WC_BENCH_MAX_LINE_LEN when we need to Andrew Hutchings 2025-10-20 18:58:16 +01:00
  • f1faefed91 Added callbacks for copy and free to SHA, 224, 384, 512, and SHA3. Also split macros for FREE and COPY Callbacks, and add configure.ac option. night1rider 2025-10-17 14:04:25 -06:00
  • 26ba17b48e Prevent a conversion warning Anthony Hu 2025-10-20 11:17:39 -04:00
  • d86575c766 Merge pull request #9312 from night1rider/FixCallbackRngInit David Garske 2025-10-20 09:19:17 -07:00
  • 0dca3bc24d Setup to be opt-in for copy callback, and also added a outline for a free callback night1rider 2025-10-16 13:43:24 -06:00
  • 4d6418f31a Add crypto callback support for copy operations (SHA-256) night1rider 2025-10-15 15:15:13 -06:00
  • 7fa53c8c71 Merge pull request #9289 from philljj/cmac_kdf David Garske 2025-10-20 08:33:30 -07:00
  • bd4099d2d7 Update test.c tests to use global devId instead of INVALID_DEVID night1rider 2025-10-17 14:42:09 -06:00
  • 28c78b5c0c Use global devId for RNG initialization in tests: mlkem_test, dilithium_test, xmss_test, lms_test night1rider 2025-10-16 10:31:08 -06:00
  • fba8cab200 Refactor wc_rng_new to use wc_rng_new_ex, and to use WC_USE_DEVID as the devId if set at compile time night1rider 2025-10-16 09:42:42 -06:00
  • 525c212d1c cmac kdf: add NIST SP 800-108, and NIST SP 800-56C two-step. jordan 2025-10-20 08:20:23 -05:00
  • 987bf2fe2e Rust wrapper: fix test_ecc sig_to_rs() check Josh Holtrop 2025-10-20 09:09:53 -04:00
  • 714abfa1c0 Rust wrapper: add wolfssl::wolfcrypt::sha module Josh Holtrop 2025-10-17 16:46:52 -04:00
  • aba9ee4015 Merge pull request #9319 from douzzer/20251018-linuxkm-gdwarf-4-g1 philljj 2025-10-18 14:35:46 -05:00
  • 9881c95c46 linuxkm/Kbuild: refactor RENAME_PIE_TEXT_AND_DATA_SECTIONS to automatically derive the list of all ELF sections to rename, rather than enumerating them staticly in the objcopy recipe (motivated by changes expected in kernel 6.19). Daniel Pouzzner 2025-10-18 12:07:35 -05:00
  • a36dd35e59 linuxkm: rename FIPS container segments from foo.wolfcrypt to foo_wolfcrypt to avoid getting rearranged by kernel scripts/module.lds klp/kpatch clauses expected in kernel 6.19. Daniel Pouzzner 2025-10-18 03:23:38 -05:00
  • 2bbc3a0ae2 wolfcrypt/test/test.c: fixes for --disable-sha256, --disable-hmac, --disable-rng, and FIPS gating on RSA-PSS. Daniel Pouzzner 2025-10-18 02:05:55 -05:00
  • 08f5c3e8b9 configure.ac: in linuxkm setup, use -g1 explicitly unless --enable-debug, whereupon use -g3. also, add -gdwarf-4 to AM_CCASFLAGS. Daniel Pouzzner 2025-10-18 01:56:48 -05:00
  • d87ca70048 Fix mixed declaration / code Andrew Hutchings 2025-10-18 06:18:29 +01:00
  • 01dc28ad31 Seperate AES alloc / dealloc phases Andrew Hutchings 2025-10-17 19:48:30 +01:00
  • 65bb68b6c0 Move heap/stack tracking to before init phase Andrew Hutchings 2025-10-17 19:27:59 +01:00
  • 036c66c777 Benchmark memory tracking Andrew Hutchings 2025-10-08 06:15:34 +01:00
  • c091c8b7ba Merge pull request #9318 from douzzer/20251017-linuxkm-signal-handling-tweaks philljj 2025-10-17 21:17:20 -05:00
  • 69f236be0a linuxkm/linuxkm_wc_port.h: suppress -Wformat-nonliteral while including kernel headers (needed for kernel <=4.9). Daniel Pouzzner 2025-10-17 19:31:17 -05:00
  • 6a0be6a7f7 configure.ac: remove -g0 from, and always add -DHAVE_REPRODUCIBLE_BUILD to, reproducible-build AM_CFLAGS, and always add -gdwarf-4 to AM_CFLAGS when ENABLED_LINUXKM; Daniel Pouzzner 2025-10-17 18:24:32 -05:00
  • d2f819a2f6 linuxkm/module_hooks.c and linuxkm/lkcapi_glue.c: check retval from WC_SIG_IGNORE_BEGIN(). Daniel Pouzzner 2025-10-17 18:23:25 -05:00
  • d475985062 Merge pull request #9306 from holtrop/rust-wc-dh David Garske 2025-10-17 15:41:58 -07:00
  • e142a9629f linuxkm/linuxkm_wc_port.h and linuxkm/module_hooks.c: tweak gating for verifyCore and my_kallsyms_lookup_name, and use the latter to reach verifyCore on old FIPS. also tweak the In-core integrity hash check failure." message to supply module-update-fips-hash instructions. Daniel Pouzzner 2025-10-17 17:12:37 -05:00
  • 354c576c96 .github/workflows/linuxkm.yml: comment out --enable-linuxkm-pie config, pending resolution of "dwarf_get_units failed" on Azure kernel 6.14 image. Daniel Pouzzner 2025-10-17 15:00:04 -05:00
  • 7a43732daa linuxkm/linuxkm_wc_port.h, wolfssl/wolfcrypt/types.h, linuxkm/module_hooks.c, linuxkm/lkcapi_glue.c: * add WC_SIG_IGNORE_BEGIN(), WC_SIG_IGNORE_END(), wc_linuxkm_sig_ignore_begin(), wc_linuxkm_sig_ignore_end(); * move WC_CHECK_FOR_INTR_SIGNALS() and WC_RELAX_LONG_LOOP() definitions outside the BUILDING_WOLFSSL gate; * refactor linuxkm_lkcapi_registering_now as a wolfSSL_Atomic_Int and use it as a mutex for linuxkm_lkcapi_register() and linuxkm_lkcapi_unregister(); * add WC_SIG_IGNORE_BEGIN()...WC_SIG_IGNORE_END() wrappers around all relevant critical spans in linuxkm glue. Daniel Pouzzner 2025-10-17 14:58:21 -05:00
  • 4faa21a74a Rust wrapper: Fix DH::FFDHE_* constant values Josh Holtrop 2025-10-17 13:23:20 -04:00
  • 8e7f77db76 Rust wrapper: add wolfssl::wolfcrypt::dh module Josh Holtrop 2025-10-13 11:05:25 -04:00
  • 5280bfb89a Merge pull request #9297 from douzzer/20251011-more-fips-optest-tweaks lealem47 2025-10-17 12:44:25 -06:00
  • f492abfe9e Merge pull request #9314 from SparkiDev/silabs_no_hash_raw David Garske 2025-10-17 10:19:01 -07:00
  • 8969e5f36a refactor to TLSX_EchChangeSNI effbiae 2025-10-17 13:50:54 +11:00
  • 9cf08afbbb fixes for --disable-tls. Daniel Pouzzner 2025-10-16 18:49:40 -05:00
  • f508b44f0f configure.ac: in setup for cryptonly, don't set enable_tls13=no or enable_tlsv12=no -- they're needed for crypto-layer KDFs. Daniel Pouzzner 2025-10-16 18:12:05 -05:00
  • b924e9a905 linuxkm/module_hooks.c: add sanity check for compiled-in verifyCore, and fix linuxkm_op_test_1() call to use argc==3 arg list. Daniel Pouzzner 2025-10-16 18:11:52 -05:00
  • 5ee42402ae wolfssl/wolfcrypt/types.h: fix whitespace around WC_SAFE_SUM_*(). Daniel Pouzzner 2025-10-15 11:48:41 -05:00
  • 6fb547a1ae linuxkm/module_hooks.c: purge fipsMode override (fipsEntry() takes care of this), and add explicit fipsCastStatus[] reset code. Daniel Pouzzner 2025-10-15 11:42:26 -05:00
  • e8d9f91868 linuxkm/module_hooks.c and linuxkm/linuxkm_wc_port.h: finish implementation of FIPS_OPTEST glue code, including /sys/module/libwolfssl/FIPS_optest_run_code (FIPS_optest_trig_handler(), plus my_kallsyms_lookup_name() helper). Daniel Pouzzner 2025-10-13 18:09:27 -05:00
  • 581e86c178 wolfcrypt/test/test.c: fix error-path uninitialized access defect in ecc_test_buffers(). Daniel Pouzzner 2025-10-13 17:49:46 -05:00
  • 0d588b446c Merge pull request #9313 from douzzer/20251016-Wnull-dereference Zackery 2025-10-16 17:47:23 -06:00
  • d0909991fb SHA-2: No hash raw Sean Parkinson 2025-10-17 07:46:50 +10:00
  • 0c4feb0aa6 wolfcrypt/src/asn.c: revert earlier changes in EncodeName(), and add local S390-specific pragma to inhibit false-positive -Wnull-dereference. Daniel Pouzzner 2025-10-16 16:10:54 -05:00
  • d6aa157187 fixes for OPENSSL_COEXIST covering OPENSSL_COMPATIBLE_DEFAULTS and WOLFSSL_WPAS: * src/ssl.c:wolfSSL_CTX_new_ex() * src/x509.c:wolfSSL_X509_PUBKEY_set() Daniel Pouzzner 2025-10-16 15:05:46 -05:00