Juliusz Sosinowicz 754f5cfe41 F-5606: enforce DTLS 1.3 KeyUpdate 2^48-1 sending epoch ceiling ...

RFC 9147 Section 4.2.1 limits the DTLS 1.3 epoch to 2^48-1.
SendTls13KeyUpdate now refuses to send a KeyUpdate when the sending
epoch is already at the maximum, and Dtls13KeyUpdateAckReceived rejects
an epoch that would exceed the limit after incrementing (previously only
a full 64-bit wrap to zero was checked).

2026-06-03 13:01:19 +02:00

..

bio.c

Merge pull request #10208 from ColtonWilley/bio-io-negative-length-checks

2026-05-05 11:32:21 -07:00

conf.c

Make sure large buffers are on the heap with SMALL_STACK

2026-04-19 20:38:41 +02:00

crl.c

Merge pull request #10162 from embhorn/gh9753

2026-04-24 14:28:00 -06:00

dtls13.c

F-5606: enforce DTLS 1.3 KeyUpdate 2^48-1 sending epoch ceiling

2026-06-03 13:01:19 +02:00

dtls.c

dtls13: WOLFSSL_DTLS13_5_9_0_COMPAT -> WOLFSSL_DTLS13_ECHO_LEGACY_SESSION_ID

2026-05-26 09:16:56 +02:00

include.am

Rename Dilithium to canonical ML-DSA (FIPS 204) names

2026-05-16 09:48:35 -05:00

internal.c

Support importing/exporting DTLS sessions with encrypt-then-mac options

2026-06-02 09:34:14 -04:00

keys.c

zero sensitive material before free

2026-05-14 16:59:48 +00:00

ocsp.c

Code review feedback and minor fixes.

2026-05-27 16:54:14 -07:00

pk_ec.c

support of NO_BIO and NO_FILESYSTEM build with opensslextra

2026-05-15 10:37:46 -06:00

pk_rsa.c

support of NO_BIO and NO_FILESYSTEM build with opensslextra

2026-05-15 10:37:46 -06:00

pk.c

Refactor - Fix pr notes + compilation error for a test

2026-05-22 19:24:53 +03:00

quic.c

add missing WOLFSSL_QUIC_MAX_RECORD_CAPACITY check on the early-data path in quic_record_make() and added a unit test for it

2026-04-14 12:43:19 +02:00

sniffer.c

zero sensitive material before free

2026-05-14 16:59:48 +00:00

ssl_api_cert.c

Add a debug message.

2026-04-17 15:10:56 -04:00

ssl_api_crl_ocsp.c

Add bounds check on wolfSSL_X509_notBefore and wolfSSL_X509_notAfter

2026-03-31 09:29:46 -07:00

ssl_api_pk.c

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00

ssl_asn1.c

Add checks for ascii digits in time decode functions

2026-04-21 15:24:06 -07:00

ssl_bn.c

Add BN_bn2binpad API and enable OpenVPN master CI testing

2026-04-13 15:35:40 +02:00

ssl_certman.c

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00

ssl_crypto.c

fix copy-paste constant mismatches

2026-05-14 16:59:12 +00:00

ssl_ech.c

Merge pull request #10469 from sebastian-carpenter/tls-ech-server-improvements

2026-05-23 00:07:40 +10:00

ssl_load.c

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00

ssl_misc.c

nginx 1.28.1

2026-02-25 15:19:13 +01:00

ssl_p7p12.c

honor OpenSSL fail-open contracts

2026-05-14 16:59:12 +00:00

ssl_sess.c

Validate minDowngrade in wolfSSL_SetSession before reusing version

2026-05-14 14:07:53 +02:00

ssl_sk.c

Add Python CI workflow and Blake2 EVP support

2026-03-06 08:27:41 +01:00

ssl.c

Merge pull request #10426 from JeremiahM37/fenrir-8

2026-05-28 09:48:10 +10:00

tls13.c

F-5606: enforce DTLS 1.3 KeyUpdate 2^48-1 sending epoch ceiling

2026-06-03 13:01:19 +02:00

tls.c

Merge pull request #10332 from jackctj117/SNI

2026-05-27 08:37:05 +10:00

wolfio.c

Merge pull request #10290 from LinuxJedi/emnet

2026-05-05 11:46:15 -07:00

x509_str.c

zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore

2026-05-06 16:45:58 +02:00

x509.c

Finalize ML-DSA renaming

2026-05-26 14:54:30 +02:00