wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 14:30:48 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
1823f2e9fcdf0c3a6a41d255033d817d23a5ebb3
wolfssl/wolfcrypt/src
T
History
Tobias Frauenschläger a88dd07c70 pkcs7,aes: reject truncated GCM auth tags 
wc_PKCS7_DecodeAuthEnvelopedData() accepted an attacker-controlled GCM tag
length from the mac OCTET STRING and did not validate it against the
parsed aes-ICVlen parameter. In parallel, wc_AesGcmDecrypt() accepted
very short tags on decrypt while encrypt enforced WOLFSSL_MIN_AUTH_TAG_SZ.

This made short-tag verification reachable through CMS AuthEnvelopedData
and weakened integrity checks by allowing tag truncation.

Fixes:
- validate parsed macSz range in AuthEnvelopedData decode
- require authTagSz to match parsed macSz
- reject undersized GCM tags in PKCS7 decode
- enforce WOLFSSL_MIN_AUTH_TAG_SZ in wc_AesGcmDecrypt() and
  wc_AesGcmDecryptFinal()

Also add a regression test in pkcs7authenveloped vectors that truncates
the final MAC OCTET STRING length from 16 to 1 and verifies decode fails.

Reported by: Nicholas Carlini (Anthropic) & Thai Duong (Calif.io)
2026-04-02 22:38:05 -06:00
..
port
fix lost error in SE050 ECC key insert
2026-03-31 14:34:49 +00:00
aes_asm.asm
update Copyright year
2026-02-18 09:52:21 -07:00
aes_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_gcm_asm.asm
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
aes_gcm_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_gcm_x86_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_xts_asm.asm
ASM generation fixes
2026-03-20 11:56:25 +10:00
aes_xts_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
aes.c
pkcs7,aes: reject truncated GCM auth tags
2026-04-02 22:38:05 -06:00
arc4.c
update Copyright year
2026-02-18 09:52:21 -07:00
ascon.c
ascon: don't skip wc_AsconAEAD128_Clear on auth error.
2026-03-09 09:33:34 -05:00
asm.c
update Copyright year
2026-02-18 09:52:21 -07:00
asn_orig.c
fixes from CI testing and peer review:
2026-04-01 15:28:35 -05:00
ASN_TEMPLATE.md
codespell fixes.
2024-11-05 00:19:07 -06:00
asn.c
Merge pull request #10120 from douzzer/20260331-wolfcrypt-Wcast-qual
2026-04-02 00:25:13 -05:00
async.c
Fixes for async and crypto callbacks
2026-02-27 14:35:03 -08:00
blake2b.c
wolfcrypt/src/blake2b.c and wolfcrypt/src/blake2s.c: restore volatile-based workaround for ARM32 gcc optimizer bug.
2026-04-01 17:14:30 -05:00
blake2s.c
wolfcrypt/src/blake2b.c and wolfcrypt/src/blake2s.c: restore volatile-based workaround for ARM32 gcc optimizer bug.
2026-04-01 17:14:30 -05:00
camellia.c
update Copyright year
2026-02-18 09:52:21 -07:00
chacha20_poly1305.c
remove casts that would cause truncation if long int is 32-bit but size_t is 64-bit
2026-03-27 12:09:53 -06:00
chacha_asm.asm
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
chacha_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
chacha.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
cmac.c
CMAC: fix wraparound in streaming update.
2026-04-02 12:35:15 +02:00
coding.c
update Copyright year
2026-02-18 09:52:21 -07:00
compress.c
update Copyright year
2026-02-18 09:52:21 -07:00
cpuid.c
update Copyright year
2026-02-18 09:52:21 -07:00
cryptocb.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
curve448.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
curve25519.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
des3.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
dh.c
linuxkm/, wolfcrypt/src/dh.c, wolfcrypt/test/test.c, wolfcrypt/test/test.h, wolfssl/wolfcrypt/wc_port.h:
2026-03-26 15:41:47 -05:00
dilithium.c
Merge pull request #10083 from anhu/privkeyset
2026-04-02 00:15:12 -05:00
dsa.c
Fix test with cast
2026-03-06 07:33:52 -06:00
ecc_fp.c
…
ecc.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
eccsi.c
eccsi: fix universal signature forgery via r=0/s=0
2026-04-02 12:35:15 +02:00
ed448.c
Add privKeySet checks to Ed25519, Ed448, ML-DSA, and ML-KEM
2026-03-26 14:56:00 -04:00
ed25519.c
Add privKeySet checks to Ed25519, Ed448, ML-DSA, and ML-KEM
2026-03-26 14:56:00 -04:00
error.c
wolfcrypt/src/hpke.c, wolfssl/wolfcrypt/error-crypt.h, wolfcrypt/src/error.c: implement RFC 9180 overflow checks on context->seq in wc_HpkeContextSealBase() and wc_HpkeContextOpenBase(), and add SEQ_OVERFLOW_E to wolfCrypt_ErrorCodes (Fenrir M-70).
2026-02-27 23:40:37 -06:00
evp_pk.c
wolfcrypt/src/evp_pk.c: fix benign nullPointer in d2i_make_pkey() reported by cppcheck-2.20.0.
2026-03-09 10:58:36 -05:00
evp.c
evp: verify Poly1305 tag on ChaCha20-Poly1305 decrypt
2026-04-02 12:35:15 +02:00
ext_lms.c
Add buffer size and callback checks to external wc_LmsKey_Sign
2026-03-30 15:02:13 -07:00
ext_mlkem.c
update Copyright year
2026-02-18 09:52:21 -07:00
ext_xmss.c
update Copyright year
2026-02-18 09:52:21 -07:00
falcon.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_448.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_low_mem.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_operations.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_x25519_128.h
update Copyright year
2026-02-18 09:52:21 -07:00
fe_x25519_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
fp_mont_small.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_3.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_4.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_6.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_7.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_8.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_9.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_12.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_17.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_20.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_24.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_28.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_32.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_48.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_64.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_small_set.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_3.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_4.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_6.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_7.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_8.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_9.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_12.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_17.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_20.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_24.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_28.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_32.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_48.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_64.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_small_set.i
update Copyright year
2026-02-18 09:52:21 -07:00
ge_448.c
update Copyright year
2026-02-18 09:52:21 -07:00
ge_low_mem.c
update Copyright year
2026-02-18 09:52:21 -07:00
ge_operations.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
hash.c
wolfssl/wolfcrypt/types.h: add missing values in FIPS <=v2 enum wc_HashType definition;
2026-03-23 14:04:06 -05:00
hmac.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
hpke.c
Merge pull request #9999 from sebastian-carpenter/hpke-fix
2026-03-24 08:47:01 -07:00
include.am
Split original ASN.1 code from asn.c into asn_orig.c
2026-03-23 15:27:47 -07:00
integer.c
wolfcrypt/src/integer.c and wolfssl/wolfcrypt/integer.h: constify args to mp_cmp() and mp_cmp_mag().
2026-04-01 16:32:15 -05:00
kdf.c
update Copyright year
2026-02-18 09:52:21 -07:00
logging.c
wolfcrypt/src/logging.c: fix recursion in wc_backtrace_render().
2026-03-22 13:22:27 -05:00
md2.c
update Copyright year
2026-02-18 09:52:21 -07:00
md4.c
update Copyright year
2026-02-18 09:52:21 -07:00
md5.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
memory.c
Implement OCSP responder
2026-03-11 10:21:16 +01:00
misc.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
pkcs7.c
pkcs7,aes: reject truncated GCM auth tags
2026-04-02 22:38:05 -06:00
pkcs12.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
poly1305_asm.asm
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
poly1305_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
poly1305.c
SP int: fixes from AI review
2026-03-24 10:49:58 +10:00
pwdbased.c
wolfcrypt/src/pwdbased.c: in wc_PKCS12_PBKDF_ex(), refactor the "Increment B by 1" loop to avoid bugprone-inc-dec-in-conditions.
2026-03-24 12:07:04 -05:00
random.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
rc2.c
update Copyright year
2026-02-18 09:52:21 -07:00
ripemd.c
check if ripemd->buffLen >= RIPEMD_BLOCK_SZ is true to prevent out of bounds write
2026-03-05 10:52:20 -07:00
rng_bank.c
wolfcrypt/src/rng_bank.c and wolfssl/wolfcrypt/rng_bank.h: add !WC_NO_CONSTRUCTORS gate around wc_rng_new_bankref().
2026-03-17 17:45:09 -05:00
rsa.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
sakke.c
Fix Fenrir issues in wolfcrypt
2026-02-24 18:51:58 -08:00
sha3_asm.S
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
sha3.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
sha256_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sha256.c
Merge pull request #9836 from Frauschi/pkcs11_dilithium
2026-03-05 15:22:10 -06:00
sha512_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
sha512.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
sha.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
signature.c
fixes from CI testing and peer review:
2026-04-01 15:28:35 -05:00
siphash.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
sm2.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm3_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sm3.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm4.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_arm32.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_arm64.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_armthumb.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_c32.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_c64.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_cortexm.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_dsp32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_int.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
sp_sm2_arm32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_arm64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_armthumb.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_c32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_c64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_cortexm.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_x86_64_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_x86_64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_x86_64_asm.asm
ASM generation fixes
2026-03-20 11:56:25 +10:00
sp_x86_64_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
sp_x86_64.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sphincs.c
update Copyright year
2026-02-18 09:52:21 -07:00
srp.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
tfm.c
fixes from CI testing and peer review:
2026-04-01 15:28:35 -05:00
wc_dsp.c
update Copyright year
2026-02-18 09:52:21 -07:00
wc_encrypt.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
wc_lms_impl.c
Fix buffer-overflow in LMS leaf cache indexing
2026-03-11 16:58:48 -04:00
wc_lms.c
Add buffer size and callback checks to wc_LmsKey_Sign
2026-03-27 08:49:43 -04:00
wc_mldsa_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
wc_mlkem_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
wc_mlkem_poly.c
wolfcrypt/src/wc_mlkem.c, wolfcrypt/src/wc_mlkem_poly.c, wolfssl/wolfcrypt/mlkem.h, wolfssl/wolfcrypt/wc_mlkem.h: fixes for C89 compliance and aarch64-FIPS-linuxkm compatibility.
2026-03-20 14:53:05 -05:00
wc_mlkem.c
Add privKeySet checks to Ed25519, Ed448, ML-DSA, and ML-KEM
2026-03-26 14:56:00 -04:00
wc_pkcs11.c
Update the PKCS11 ECC and dilithium free handlers so they will now return CRYPTOCB_UNAVAILABLE after attempting the context free so the caller still does software cleanup on the rest of the context that the callback does not handle.
2026-03-12 15:18:56 -06:00
wc_port.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
wc_slhdsa.c
Cast to unsigned prior to shift to avoid UB in SLH-DSA
2026-03-31 09:43:58 -07:00
wc_xmss_impl.c
XMSS: Fix index copy for signing.
2026-03-16 21:24:08 +10:00
wc_xmss.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfentropy.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfevent.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfmath.c
SP int: fixes from AI review
2026-03-24 10:49:58 +10:00