wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 18:30:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
6d439a5fca9b19e93b70e274236d7353d35fad54
wolfssl/wolfcrypt/src
T
History
Tobias Frauenschläger 6d439a5fca CMAC: fix wraparound in streaming update. 
The guard `if (cmac->totalSz != 0)` was used to skip XOR-chaining on
the first block (where digest is all-zeros and the XOR is a no-op).
However, totalSz is word32 and wraps to zero after 2^28 block flushes
(4 GiB), causing the guard to erroneously fire again and discard the
live CBC-MAC chain state.  Any two messages sharing a common suffix
beyond the 4 GiB mark then produce identical CMAC tags, enabling a
zero-work prefix-substitution forgery.  The fix removes the guard,
making the XOR unconditional; the no-op property on the first block is
preserved because digest is zero-initialized by wc_InitCmac_ex.

Identified by: Nicholas Carlini (Anthropic) & Thai Duong (Calif.io)
2026-03-31 14:31:24 +02:00
..
port
Fix wc_MXC_TPU_SHA_Copy to deep copy src msg buffer instead of freed dst pointer
2026-03-20 16:11:09 -06:00
aes_asm.asm
update Copyright year
2026-02-18 09:52:21 -07:00
aes_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_gcm_asm.asm
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
aes_gcm_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_gcm_x86_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_xts_asm.asm
ASM generation fixes
2026-03-20 11:56:25 +10:00
aes_xts_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
aes.c
CMAC: fix wraparound in streaming update.
2026-03-31 14:31:24 +02:00
arc4.c
update Copyright year
2026-02-18 09:52:21 -07:00
ascon.c
ascon: don't skip wc_AsconAEAD128_Clear on auth error.
2026-03-09 09:33:34 -05:00
asm.c
update Copyright year
2026-02-18 09:52:21 -07:00
asn_orig.c
Reject negative CRL numbers when decoding
2026-03-30 16:09:32 -07:00
ASN_TEMPLATE.md
codespell fixes.
2024-11-05 00:19:07 -06:00
asn.c
Merge pull request #10087 from padelsbach/crl-num-negative
2026-03-30 22:58:34 -05:00
async.c
Fixes for async and crypto callbacks
2026-02-27 14:35:03 -08:00
blake2b.c
update Copyright year
2026-02-18 09:52:21 -07:00
blake2s.c
update Copyright year
2026-02-18 09:52:21 -07:00
camellia.c
update Copyright year
2026-02-18 09:52:21 -07:00
chacha20_poly1305.c
remove casts that would cause truncation if long int is 32-bit but size_t is 64-bit
2026-03-27 12:09:53 -06:00
chacha_asm.asm
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
chacha_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
chacha.c
update Copyright year
2026-02-18 09:52:21 -07:00
cmac.c
CMAC: fix wraparound in streaming update.
2026-03-31 14:31:24 +02:00
coding.c
update Copyright year
2026-02-18 09:52:21 -07:00
compress.c
update Copyright year
2026-02-18 09:52:21 -07:00
cpuid.c
update Copyright year
2026-02-18 09:52:21 -07:00
cryptocb.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
curve448.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
curve25519.c
update Copyright year
2026-02-18 09:52:21 -07:00
des3.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
dh.c
linuxkm/, wolfcrypt/src/dh.c, wolfcrypt/test/test.c, wolfcrypt/test/test.h, wolfssl/wolfcrypt/wc_port.h:
2026-03-26 15:41:47 -05:00
dilithium.c
Zeroize sensitive buffers for ML-DSA
2026-03-30 11:21:32 +02:00
dsa.c
Fix test with cast
2026-03-06 07:33:52 -06:00
ecc_fp.c
for make dist and also aes compatibility
2015-01-05 13:40:26 -07:00
ecc.c
Merge pull request #9992 from dgarske/macro_docs
2026-03-19 17:08:33 -06:00
eccsi.c
Fix resource leak in wc_InitEccsiKey_ex error path
2026-03-16 15:15:11 -07:00
ed448.c
Clear sensitive stack buffers in ed448 signing
2026-03-16 15:15:11 -07:00
ed25519.c
Clear sensitive stack buffers in ed25519 signing
2026-03-16 15:15:11 -07:00
error.c
wolfcrypt/src/hpke.c, wolfssl/wolfcrypt/error-crypt.h, wolfcrypt/src/error.c: implement RFC 9180 overflow checks on context->seq in wc_HpkeContextSealBase() and wc_HpkeContextOpenBase(), and add SEQ_OVERFLOW_E to wolfCrypt_ErrorCodes (Fenrir M-70).
2026-02-27 23:40:37 -06:00
evp_pk.c
wolfcrypt/src/evp_pk.c: fix benign nullPointer in d2i_make_pkey() reported by cppcheck-2.20.0.
2026-03-09 10:58:36 -05:00
evp.c
wolfcrypt/src/evp.c: in wolfSSL_EVP_init(), fix -Wswitch-enums for WC_HASH_TYPE_SHAKE128 and WC_HASH_TYPE_SHAKE256.
2026-03-23 13:15:52 -05:00
ext_lms.c
Add buffer size and callback checks to external wc_LmsKey_Sign
2026-03-30 15:02:13 -07:00
ext_mlkem.c
update Copyright year
2026-02-18 09:52:21 -07:00
ext_xmss.c
update Copyright year
2026-02-18 09:52:21 -07:00
falcon.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_448.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_low_mem.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_operations.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_x25519_128.h
update Copyright year
2026-02-18 09:52:21 -07:00
fe_x25519_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
fp_mont_small.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_3.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_4.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_6.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_7.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_8.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_9.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_12.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_17.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_20.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_24.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_28.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_32.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_48.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_64.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_small_set.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_3.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_4.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_6.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_7.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_8.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_9.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_12.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_17.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_20.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_24.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_28.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_32.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_48.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_64.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_small_set.i
update Copyright year
2026-02-18 09:52:21 -07:00
ge_448.c
update Copyright year
2026-02-18 09:52:21 -07:00
ge_low_mem.c
update Copyright year
2026-02-18 09:52:21 -07:00
ge_operations.c
update Copyright year
2026-02-18 09:52:21 -07:00
hash.c
wolfssl/wolfcrypt/types.h: add missing values in FIPS <=v2 enum wc_HashType definition;
2026-03-23 14:04:06 -05:00
hmac.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
hpke.c
Merge pull request #9999 from sebastian-carpenter/hpke-fix
2026-03-24 08:47:01 -07:00
include.am
Split original ASN.1 code from asn.c into asn_orig.c
2026-03-23 15:27:47 -07:00
integer.c
clear q with integer.c and mp_div_3 in error case
2026-03-16 00:09:37 -06:00
kdf.c
update Copyright year
2026-02-18 09:52:21 -07:00
logging.c
wolfcrypt/src/logging.c: fix recursion in wc_backtrace_render().
2026-03-22 13:22:27 -05:00
md2.c
update Copyright year
2026-02-18 09:52:21 -07:00
md4.c
update Copyright year
2026-02-18 09:52:21 -07:00
md5.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
memory.c
Implement OCSP responder
2026-03-11 10:21:16 +01:00
misc.c
Fixes for documentation typos on arguments
2026-03-19 16:39:08 -07:00
pkcs7.c
refactor wc_Hash* so that known wc_HashType values are unconditionally defined in enum wc_HashType, and always either succeed if used properly, or return HASH_TYPE_E if gated out or used improperly; add detailed error code tracing in wolfcrypt/src/hash.c.
2026-03-23 13:01:38 -05:00
pkcs12.c
Fix feedback from review
2026-03-19 15:22:39 -05:00
poly1305_asm.asm
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
poly1305_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
poly1305.c
SP int: fixes from AI review
2026-03-24 10:49:58 +10:00
pwdbased.c
wolfcrypt/src/pwdbased.c: in wc_PKCS12_PBKDF_ex(), refactor the "Increment B by 1" loop to avoid bugprone-inc-dec-in-conditions.
2026-03-24 12:07:04 -05:00
random.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
rc2.c
update Copyright year
2026-02-18 09:52:21 -07:00
ripemd.c
check if ripemd->buffLen >= RIPEMD_BLOCK_SZ is true to prevent out of bounds write
2026-03-05 10:52:20 -07:00
rng_bank.c
wolfcrypt/src/rng_bank.c and wolfssl/wolfcrypt/rng_bank.h: add !WC_NO_CONSTRUCTORS gate around wc_rng_new_bankref().
2026-03-17 17:45:09 -05:00
rsa.c
Merge pull request #10045 from embhorn/zd21385
2026-03-30 13:42:14 -05:00
sakke.c
Fix Fenrir issues in wolfcrypt
2026-02-24 18:51:58 -08:00
sha3_asm.S
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
sha3.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
sha256_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sha256.c
Merge pull request #9836 from Frauschi/pkcs11_dilithium
2026-03-05 15:22:10 -06:00
sha512_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
sha512.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
sha.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
signature.c
update Copyright year
2026-02-18 09:52:21 -07:00
siphash.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm2.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm3_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sm3.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm4.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_arm32.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_arm64.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_armthumb.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_c32.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_c64.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_cortexm.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sp_dsp32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_int.c
SP int: fixes from AI review
2026-03-24 10:49:58 +10:00
sp_sm2_arm32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_arm64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_armthumb.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_c32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_c64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_cortexm.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_x86_64_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_x86_64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_x86_64_asm.asm
ASM generation fixes
2026-03-20 11:56:25 +10:00
sp_x86_64_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
sp_x86_64.c
SP non-block ECC: correct mont_inv_order
2026-03-23 23:18:37 +10:00
sphincs.c
update Copyright year
2026-02-18 09:52:21 -07:00
srp.c
Merge pull request #9896 from embhorn/f278-281-282
2026-03-06 22:36:59 -06:00
tfm.c
update Copyright year
2026-02-18 09:52:21 -07:00
wc_dsp.c
update Copyright year
2026-02-18 09:52:21 -07:00
wc_encrypt.c
wc_encrypt: add missing ForceZero for Des, Arc4, Rc2.
2026-03-05 12:22:00 -06:00
wc_lms_impl.c
Fix buffer-overflow in LMS leaf cache indexing
2026-03-11 16:58:48 -04:00
wc_lms.c
Add buffer size and callback checks to wc_LmsKey_Sign
2026-03-27 08:49:43 -04:00
wc_mldsa_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
wc_mlkem_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
wc_mlkem_poly.c
wolfcrypt/src/wc_mlkem.c, wolfcrypt/src/wc_mlkem_poly.c, wolfssl/wolfcrypt/mlkem.h, wolfssl/wolfcrypt/wc_mlkem.h: fixes for C89 compliance and aarch64-FIPS-linuxkm compatibility.
2026-03-20 14:53:05 -05:00
wc_mlkem.c
wolfcrypt/src/wc_mlkem.c, wolfcrypt/src/wc_mlkem_poly.c, wolfssl/wolfcrypt/mlkem.h, wolfssl/wolfcrypt/wc_mlkem.h: fixes for C89 compliance and aarch64-FIPS-linuxkm compatibility.
2026-03-20 14:53:05 -05:00
wc_pkcs11.c
Update the PKCS11 ECC and dilithium free handlers so they will now return CRYPTOCB_UNAVAILABLE after attempting the context free so the caller still does software cleanup on the rest of the context that the callback does not handle.
2026-03-12 15:18:56 -06:00
wc_port.c
wolfssl/wolfcrypt/wc_port.h and wolfcrypt/src/wc_port.c: implement wolfSSL_Atomic_Int_Exchange().
2026-03-20 14:53:05 -05:00
wc_slhdsa.c
wolfcrypt/src/wc_slhdsa.c: fixes for uninited data reads in slhdsakey_wots_sign_chain_x4_*() and slhdsakey_wots_pk_from_sig_x4;
2026-03-10 17:51:18 -05:00
wc_xmss_impl.c
XMSS: Fix index copy for signing.
2026-03-16 21:24:08 +10:00
wc_xmss.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfentropy.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfevent.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfmath.c
SP int: fixes from AI review
2026-03-24 10:49:58 +10:00