wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 04:20:50 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
225d1beda88600716773cdc045947a3cdbd68107
wolfssl/wolfcrypt/src
T
History
William Beasley (The Capable Hub) 7cba06da8a cheri: Fix CHERI tag violation on constant time pointer selection 
The branchless code in casts sp_int pointers to size_t for bitmask
arithmetic, then casts the result back to sp_int*.

On CHERI, pointer-to-integer casts strip the hardware capability tag.
The reconstructed pointer is tagless and cannot be dereferenced,
causing a tag-violation fault.

Add _sp_cond_copy that uses the bitmask on the digit data itself rather
than the addresses, this avoids needed to do pointer arithmetic.

On non-CHERI targets the behaviour is the same.

Signed-off-by: William Beasley (The Capable Hub) <wbeasley@thegoodpenguin.co.uk>
2026-05-12 10:11:54 +01:00
..
port
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes_asm.asm
update Copyright year
2026-02-18 09:52:21 -07:00
aes_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_gcm_asm.asm
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes_gcm_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes_gcm_x86_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes_xts_asm.asm
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes_xts_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes.c
cheri: Use macro for cache line masking
2026-04-21 08:55:45 +01:00
arc4.c
update Copyright year
2026-02-18 09:52:21 -07:00
ascon.c
Make sure ASCON is unusable on big endian
2026-04-02 11:55:41 +02:00
asm.c
update Copyright year
2026-02-18 09:52:21 -07:00
asn_orig.c
reject crls with unrecognized critical extensions per rfc 5280 section 5.2
2026-04-17 19:36:55 +02:00
ASN_TEMPLATE.md
codespell fixes.
2024-11-05 00:19:07 -06:00
asn.c
Merge pull request #10239 from gasbytes/crl-idp-extension-fix
2026-04-21 10:21:31 +10:00
async.c
Fixes for async and crypto callbacks
2026-02-27 14:35:03 -08:00
blake2b.c
globally fix all "BLAKE2" references (implicit BLAKE2B) to explicit "BLAKE2B":
2026-04-07 13:18:53 -05:00
blake2s.c
Add bounds checks for Blake2 digest size
2026-04-02 11:55:41 +02:00
camellia.c
reject non-block-aligned CBC cipher input
2026-04-13 15:50:52 +00:00
chacha20_poly1305.c
remove casts that would cause truncation if long int is 32-bit but size_t is 64-bit
2026-03-27 12:09:53 -06:00
chacha_asm.asm
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
chacha_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
chacha.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
cmac.c
Add (void)ret after CRYPTOCB_UNAVAILABLE fall-through reset in _InitCmac_common to acknowledge intentional store.
2026-04-10 13:19:01 -06:00
coding.c
move length check before dispatch
2026-04-13 15:52:45 +00:00
compress.c
update Copyright year
2026-02-18 09:52:21 -07:00
cpuid.c
update Copyright year
2026-02-18 09:52:21 -07:00
cryptocb.c
Fix CMake SHE deps, const-correctness in CryptoCb uid, stale comment, XSTRLEN double call, configure.ac AES-CBC guard, and add LoadKey/LoadKey_Verify test coverage
2026-04-15 11:28:03 -06:00
curve448.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
curve25519.c
Fix wc_*_delete() functions (ZD 21415)
2026-04-07 10:04:35 -06:00
des3.c
move length check before dispatch
2026-04-13 15:52:45 +00:00
dh.c
fix for wc_DhAgree public key validation
2026-04-05 11:32:53 +02:00
dilithium.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
dsa.c
wolfcrypt: add additional enforcement of correct digest sizes in signature gen and verify ops:
2026-04-06 00:53:57 -05:00
ecc_fp.c
for make dist and also aes compatibility
2015-01-05 13:40:26 -07:00
ecc.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
eccsi.c
eccsi: fix universal signature forgery via r=0/s=0
2026-04-02 12:35:15 +02:00
ed448.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
ed25519.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
error.c
wolfcrypt/src/rng_bank.c and wolfssl/wolfcrypt/rng_bank.h: add new wc_rng_bank_default facility:
2026-04-06 14:06:20 -05:00
evp_pk.c
Remove some duplicate CI tests
2026-04-10 12:50:24 +02:00
evp.c
Merge pull request #10217 from ColtonWilley/null-checks-evp-ocsp-x509
2026-04-20 17:27:19 -06:00
ext_lms.c
zero LMS signature on write failure
2026-04-16 17:35:50 +00:00
ext_mlkem.c
update Copyright year
2026-02-18 09:52:21 -07:00
ext_xmss.c
update Copyright year
2026-02-18 09:52:21 -07:00
falcon.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
fe_448.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_low_mem.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_operations.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_x25519_128.h
update Copyright year
2026-02-18 09:52:21 -07:00
fe_x25519_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
fp_mont_small.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_3.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_4.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_6.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_7.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_8.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_9.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_12.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_17.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_20.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_24.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_28.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_32.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_48.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_64.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_small_set.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_3.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_4.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_6.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_7.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_8.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_9.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_12.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_17.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_20.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_24.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_28.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_32.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_48.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_64.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_small_set.i
update Copyright year
2026-02-18 09:52:21 -07:00
ge_448.c
update Copyright year
2026-02-18 09:52:21 -07:00
ge_low_mem.c
update Copyright year
2026-02-18 09:52:21 -07:00
ge_operations.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
hash.c
save heap before Free in Delete wrappers
2026-04-16 17:14:05 +00:00
hmac.c
add NULL validation to KDF APIs
2026-04-16 17:35:50 +00:00
hpke.c
Add NULL checks for context/ciphertext/out in wc_HpkeContextOpenBase F-1374
2026-04-03 10:34:55 +02:00
include.am
Split original ASN.1 code from asn.c into asn_orig.c
2026-03-23 15:27:47 -07:00
integer.c
wolfcrypt/src/integer.c and wolfssl/wolfcrypt/integer.h: constify args to mp_cmp() and mp_cmp_mag().
2026-04-01 16:32:15 -05:00
kdf.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
logging.c
wolfcrypt/src/logging.c and wolfssl/wolfcrypt/logging.h: add wc_backtrace_set_fp().
2026-04-15 21:28:43 -05:00
md2.c
update Copyright year
2026-02-18 09:52:21 -07:00
md4.c
update Copyright year
2026-02-18 09:52:21 -07:00
md5.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
memory.c
Implement OCSP responder
2026-03-11 10:21:16 +01:00
misc.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
pkcs7.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
pkcs12.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
poly1305_asm.asm
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
poly1305_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
poly1305.c
SP int: fixes from AI review
2026-03-24 10:49:58 +10:00
pwdbased.c
Fix NULL derefs, buffer overflow, and i2d contract in EVP/OCSP/X509
2026-04-13 20:29:50 -07:00
random.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
rc2.c
reject non-block-aligned CBC cipher input
2026-04-13 15:50:52 +00:00
ripemd.c
check if ripemd->buffLen >= RIPEMD_BLOCK_SZ is true to prevent out of bounds write
2026-03-05 10:52:20 -07:00
rng_bank.c
wolfcrypt/src/rng_bank.c and wolfssl/wolfcrypt/rng_bank.h: add new wc_rng_bank_default facility:
2026-04-06 14:06:20 -05:00
rsa.c
Merge pull request #10136 from JeremiahM37/fenrir-issues-2
2026-04-16 08:51:17 +10:00
sakke.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
sha3_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sha3.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
sha256_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sha256.c
fixes for clang -Wunused-but-set-globals (coverage added by LLVM 23_pre20260331).
2026-04-12 12:07:33 -05:00
sha512_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sha512.c
fixes for clang -Wunused-but-set-globals (coverage added by LLVM 23_pre20260331).
2026-04-12 12:07:33 -05:00
sha.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
signature.c
fix typo
2026-04-10 15:26:16 +09:00
siphash.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
sm2.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm3_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sm3.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm4.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_arm32.c
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sp_arm64.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_armthumb.c
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sp_c32.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_c64.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_cortexm.c
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sp_dsp32.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_int.c
cheri: Fix CHERI tag violation on constant time pointer selection
2026-05-12 10:11:54 +01:00
sp_sm2_arm32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_arm64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_armthumb.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_c32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_c64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_cortexm.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_x86_64_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_x86_64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_x86_64_asm.asm
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sp_x86_64_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sp_x86_64.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sphincs.c
update Copyright year
2026-02-18 09:52:21 -07:00
srp.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
tfm.c
fixes from CI testing and peer review:
2026-04-01 15:28:35 -05:00
wc_dsp.c
update Copyright year
2026-02-18 09:52:21 -07:00
wc_encrypt.c
Add NULL parameter validation to wc_CryptKey F-1372
2026-04-03 10:34:55 +02:00
wc_lms_impl.c
Fix buffer-overflow in LMS leaf cache indexing
2026-03-11 16:58:48 -04:00
wc_lms.c
zero LMS signature on write failure
2026-04-16 17:35:50 +00:00
wc_mldsa_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
wc_mlkem_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
wc_mlkem_poly.c
increase rand buffer, fix valgrind invalid read size 16
2026-04-10 11:26:51 -06:00
wc_mlkem.c
save heap before Free in Delete wrappers
2026-04-16 17:14:05 +00:00
wc_pkcs11.c
Add dynamic key allocation support for Dilithium
2026-04-14 13:22:12 +02:00
wc_port.c
Use size_t in wolfSSL_strnstr and reject negative indices in mp_get_digit
2026-04-10 10:48:17 -07:00
wc_she.c
wc_SHE_ImportM1M2M3: fix guard from || to && so it gates on WOLF_CRYPTO_CB
2026-04-15 18:03:39 -06:00
wc_slhdsa.c
Cast to unsigned prior to shift to avoid UB in SLH-DSA
2026-03-31 09:43:58 -07:00
wc_xmss_impl.c
XMSS: Fix index copy for signing.
2026-03-16 21:24:08 +10:00
wc_xmss.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfentropy.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfevent.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfmath.c
Use size_t in wolfSSL_strnstr and reject negative indices in mp_get_digit
2026-04-10 10:48:17 -07:00