David Garske a9f29dbb61 Adds strict checking of the ECDSA signature DER encoding length. With this change the total signature size should be (sequence + r int + s int) as ASN.1 encoded. While I could not find any "must" rules for the signature length I do think this is a good change. ...

If the old length checking method is desired `NO_STRICT_ECDSA_LEN` can be used. This would allow extra signature byes at the end (unused and not altering verification result). This is kept for possible backwards compatibility.

Per RFC6979: `How a signature is to be encoded is not covered by the DSA and ECDSA standards themselves; a common way is to use a DER-encoded ASN.1 structure (a SEQUENCE of two INTEGERs, for r and s, in that order).`

ANSI X9.62: ASN.1 Encoding of ECDSA:

```
ECDSA-Sig-Value ::= SEQUENCE {
  r INTEGER,
  s INTEGER
}
```

Fixes #2088

2019-02-14 12:05:34 -08:00

..

port

Merge pull request #2052 from dgarske/atecc_fixes

2019-01-25 14:26:09 -08:00

aes_asm.asm

Test Fixes

2018-05-16 15:47:13 -04:00

aes_asm.S

AES assembly file name change

2018-04-12 16:47:58 -07:00

aes_gcm_asm.S

Pull out x86_64 ASM into separate files

2019-01-29 13:08:24 +10:00

aes.c

Fix for TLS HMAC constant timing to ensure final is called for dummy operations. Added devCtx to AES for CryptoCb.

2019-02-12 16:03:10 -08:00

arc4.c

Rename INLINE

2018-06-26 15:17:46 -07:00

asm.c

Rename INLINE

2018-06-26 15:17:46 -07:00

asn.c

Adds strict checking of the ECDSA signature DER encoding length. With this change the total signature size should be (sequence + r int + s int) as ASN.1 encoded. While I could not find any "must" rules for the signature length I do think this is a good change.

2019-02-14 12:05:34 -08:00

blake2b.c

Rename INLINE

2018-06-26 15:17:46 -07:00

camellia.c

mdk5 error

2018-01-11 06:53:34 +09:00

chacha20_poly1305.c

Improve performance of chacha20-poly1305 on AVX and AVX2.

2018-01-16 13:45:36 +10:00

chacha_asm.S

Pull out x86_64 ASM into separate files

2019-01-29 13:08:24 +10:00

chacha.c

Pull out x86_64 ASM into separate files

2019-01-29 13:08:24 +10:00

cmac.c

FIPS Revalidation

2018-05-16 15:47:12 -04:00

coding.c

Further cleanup of the Base64 and Base16 encoding start/min value.

2018-10-02 14:38:08 -07:00

compress.c

Added GZIP compression tests. Added new wc_Compress_ex API to support GZIP compression option.

2018-10-03 16:29:45 -07:00

cpuid.c

Update cpuid.c to optimize intelasm for performance

2018-06-06 16:44:46 -06:00

cryptocb.c

Updates to HMAC crypto callback support to capture raw KEY and require hmac struct.

2019-02-12 16:03:10 -08:00

curve25519.c

Changes for interop and performance

2018-04-13 12:01:20 +10:00

des3.c

Rename INLINE

2018-06-26 15:17:46 -07:00

dh.c

Merge pull request #1903 from dgarske/dhkeycheck

2018-11-06 16:35:27 -08:00

dsa.c

silence warning for unreachable statement from some compilers.

2018-08-17 15:13:06 -06:00

ecc_fp.c

for make dist and also aes compatibility

2015-01-05 13:40:26 -07:00

ecc.c

Merge pull request #2086 from dgarske/atecc_makekey

2019-02-13 09:52:54 -08:00

ed25519.c

Changes to build with X25519 and Ed25519 only

2018-07-23 10:20:18 +10:00

error.c

stream of PKCS7 decode encrypted

2018-11-06 18:35:12 -08:00

evp.c

fix afalg/cryptodev + opensslextra build

2018-12-20 10:52:17 -07:00

fe_low_mem.c

Fix old-style function definitions

2018-09-07 09:13:20 +02:00

fe_operations.c

Fix old-style function definitions

2018-09-07 09:13:20 +02:00

fe_x25519_128.i

Fix old-style function definitions

2018-09-07 09:13:20 +02:00

fe_x25519_x64.i

Fixes for Curve25519 FE math build error with Intel Speedups enabled and no AVX2. These changes should have been part of PR #1958 and were missed.

2018-12-06 12:40:06 -08:00

fp_mont_small.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_3.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_4.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_6.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_7.i

Fixed typo in fp_mul_comba_7

2018-09-05 14:51:50 -06:00

fp_mul_comba_8.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_9.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_12.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_17.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_20.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_24.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_28.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_32.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_48.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_64.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_mul_comba_small_set.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_3.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_4.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_6.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_7.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_8.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_9.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_12.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_17.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_20.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_24.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_28.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_32.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_48.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_64.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

fp_sqr_comba_small_set.i

Small stack for fast math code

2018-08-31 17:55:49 +10:00

ge_low_mem.c

Release v3.12.2 (lib 14.0.0). Updated copywright.

2017-10-22 15:58:35 -07:00

ge_operations.c

Rename INLINE

2018-06-26 15:17:46 -07:00

hash.c

Added flags build option to hashing algorithms. This allows indicator to determine if hash will be "copied" as done during a TLS handshake.

2019-02-12 16:03:10 -08:00

hc128.c

Rename INLINE

2018-06-26 15:17:46 -07:00

hmac.c

Reverted the Hmac_UpdateFinal change to call final as it causing constant timing issues. Improved the wc_HmacFree to handle the case were final isn't called for Crypto callbacks.

2019-02-13 10:24:53 -08:00

idea.c

Rename INLINE

2018-06-26 15:17:46 -07:00

include.am

Refactor and rename of cryptodev to cryptocb. Refactor API names from wc_CryptoDev to use wc_CryptoCb. Backwards compatibility is retained for anyone using old WOLF_CRYPTO_DEV name. Added comment about fall-through case when CryptoCb return NOT_COMPILED_IN.

2019-01-17 11:01:14 -08:00

integer.c

Make RsaUnPad constant time when Block Type 2 message

2018-12-06 08:36:49 +10:00

logging.c

Merge pull request #1997 from tmael/portingDeos

2019-02-01 09:56:55 -08:00

md2.c

Release v3.12.2 (lib 14.0.0). Updated copywright.

2017-10-22 15:58:35 -07:00

md4.c

Rename INLINE

2018-06-26 15:17:46 -07:00

md5.c

Added flag to indicate if hash is copied.

2019-02-12 16:03:10 -08:00

memory.c

Fixes for build warnings.

2019-01-11 21:07:23 -08:00

misc.c

Allow a very small build based on SHA-256 and RSA verify

2018-12-10 08:48:01 +10:00

pkcs7.c

rearrange order of default CMS SignedData signed attributes for better interop compatibility

2019-02-11 14:48:37 -07:00

pkcs12.c

Return ToTraditional API to original signature

2018-11-28 12:27:57 +10:00

poly1305_asm.S

Pull out x86_64 ASM into separate files

2019-01-29 13:08:24 +10:00

poly1305.c

Pull out x86_64 ASM into separate files

2019-01-29 13:08:24 +10:00

pwdbased.c

Further improvements to hashing code to make sure wc_*Free is always called including wc_HashFree. Added new defines to disable PIC32MZ hardware features using NO_PIC32MZ_HASH, NO_PIC32MZ_RNG and NO_PIC32MZ_CRYPT.

2018-07-26 14:41:30 -07:00

rabbit.c

Rename INLINE

2018-06-26 15:17:46 -07:00

random.c

Fix warning about HAL_RNG_GenerateRandomNumber type.

2019-02-12 16:03:10 -08:00

ripemd.c

Rename INLINE

2018-06-26 15:17:46 -07:00

rsa.c

make build more modular

2019-01-18 16:25:24 -07:00

sha3.c

Added flag to indicate if hash is copied.

2019-02-12 16:03:10 -08:00

sha256_asm.S

Pull out x86_64 ASM into separate files

2019-01-29 13:08:24 +10:00

sha256.c

Added flag to indicate if hash is copied.

2019-02-12 16:03:10 -08:00

sha512_asm.S

Pull out x86_64 ASM into separate files

2019-01-29 13:08:24 +10:00

sha512.c

Added flag to indicate if hash is copied.

2019-02-12 16:03:10 -08:00

sha.c

Added flag to indicate if hash is copied.

2019-02-12 16:03:10 -08:00

signature.c

Allow a very small build based on SHA-256 and RSA verify

2018-12-10 08:48:01 +10:00

sp_arm32.c

Allow ECC Verify-only operations with NO_ASN and SP_MATH

2019-01-21 07:11:35 +01:00

sp_arm64.c

Allow ECC Verify-only operations with NO_ASN and SP_MATH

2019-01-21 07:11:35 +01:00

sp_armthumb.c

Allow ECC Verify-only operations with NO_ASN and SP_MATH

2019-01-21 07:11:35 +01:00

sp_c32.c

Allow ECC Verify-only operations with NO_ASN and SP_MATH

2019-01-21 07:11:35 +01:00

sp_c64.c

Allow ECC Verify-only operations with NO_ASN and SP_MATH

2019-01-21 07:11:35 +01:00

sp_cortexm.c

Allow ECC Verify-only operations with NO_ASN and SP_MATH

2019-01-21 07:11:35 +01:00

sp_int.c

Fix to allow RSA public only to build without verify only.

2019-01-11 21:11:40 -08:00

sp_x86_64_asm.S

Pull out x86_64 ASM into separate files

2019-01-29 13:08:24 +10:00

sp_x86_64.c

Pull out x86_64 ASM into separate files

2019-01-29 13:08:24 +10:00

srp.c

OpenSSL Compatibility functions on PR#942.

2017-11-01 13:00:47 +09:00

tfm.c

Adds new wc_RsaSetNonblockTime API and WC_RSA_NONBLOCK_TIME build option. This new function configures the maximum amount of blocking time in microseconds. It uses a pre-computed table along with the CPU speed in megahertz to determine if the next operation can be completed within the maximum blocking time provided.

2018-12-19 13:15:41 -08:00

wc_encrypt.c

Fixes for building with the latest QuickAssist v1.7 driver:

2018-12-04 12:54:11 -08:00

wc_pkcs11.c

Fix PKCS #11 AES-GCM and handling of unsupported algorithms

2019-02-14 17:06:15 +10:00

wc_port.c

Merge pull request #1997 from tmael/portingDeos

2019-02-01 09:56:55 -08:00

wolfevent.c

Release v3.12.2 (lib 14.0.0). Updated copywright.

2017-10-22 15:58:35 -07:00

wolfmath.c

* Fixes for async with TLS where keys are being free'd too soon.

2018-09-21 09:33:40 -07:00