wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 15:10:51 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
929dd9913b1beb605b7c8ff2f6c51ce60d54a438
wolfssl/tests
T
History
Tobias Frauenschläger f207e18f7a evp: verify Poly1305 tag on ChaCha20-Poly1305 decrypt 
EVP_DecryptFinal_ex() called wc_ChaCha20Poly1305_Final() which only
computes the Poly1305 tag, writing it into ctx->authTag and
overwriting the expected tag stored there by EVP_CTRL_AEAD_SET_TAG.
No comparison was ever performed, so any forged tag was accepted.

Fix: save the expected tag before calling Final(), then verify with
wc_ChaCha20Poly1305_CheckTag() on the decrypt path, mirroring the
existing AES-GCM branch. Add a regression test that asserts
EVP_DecryptFinal_ex() rejects an all-zero forged tag.

Reported-by: Nicholas Carlini (Anthropic) & Bronson Yen (Calif.io)
2026-03-31 14:31:24 +02:00
..
api
evp: verify Poly1305 tag on ChaCha20-Poly1305 decrypt
2026-03-31 14:31:24 +02:00
api.c
Reject negative CRL numbers when decoding
2026-03-30 16:09:32 -07:00
CONF_FILES_README.md
Cleanup markdown documentation
2021-10-13 16:39:46 +01:00
include.am
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
NCONF_test.cnf
Internal unit tests
2020-12-17 14:26:49 +01:00
quic.c
bounds check on ext_dump
2026-03-12 09:53:35 -06:00
README
re-format test-psk-no-id.conf add README
2015-08-03 11:04:18 -06:00
srp.c
update Copyright year
2026-02-18 09:52:21 -07:00
suites.c
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-altchains.conf
Fix to catch the issue in this PR with alt cert chains, which only happens if the verify callback is used and the chain is long enough. Cleanup of the myVerify callback to allow specific actions. Fix the suites.c to not crash if no newline at end of file. Added helpful debug message to show that a CA was found.
2020-06-18 09:26:50 -07:00
test-chains.conf
Fix for tests/test-chains.conf with new intermediate CA.
2020-06-18 08:33:59 -07:00
test-dhprime.conf
Fix for DH prime test (extra leading spaces). Fix for new chain tests with CRL enabled. The current way of testing chain only loads root CA as trusted. The intermediate CA CRL isn't trusted or loaded and causes error.
2018-12-21 12:36:47 -08:00
test-dtls13-cid.conf
add basic ConnectionID DTLS tests
2022-08-23 16:58:24 +02:00
test-dtls13-downgrade-fails.conf
tests: add negative version negotation tests
2022-09-28 18:42:38 +02:00
test-dtls13-downgrade.conf
Support (D)TLS1.3 downgrade when using PSK
2024-03-29 18:04:30 +00:00
test-dtls13-pq-hybrid-extra-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-hybrid-extra.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-hybrid-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-standalone-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-standalone.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-psk.conf
fix: wrong size using DTLSv1.3 in RestartHandshakeHashWithCookie
2022-10-13 17:42:58 +02:00
test-dtls13.conf
tests: add dtls13 null cipher test
2023-05-19 08:10:26 +00:00
test-dtls-downgrade.conf
tests: add dtls downgrade tests
2022-07-06 16:18:44 +02:00
test-dtls-fails-cipher.conf
Correctly reset the Tx sequence number
2021-03-09 18:30:10 +01:00
test-dtls-fails.conf
Added a suite test use case to cover the new error check. Also fixed and issue with passing a couple flags to the test case runner, and some other changes to support the new test.
2020-07-22 13:20:23 -07:00
test-dtls-group.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-dtls-mtu.conf
Merge pull request #5149 from julek-wolfssl/store-frags-v2
2022-06-01 10:52:54 -07:00
test-dtls-reneg-client.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-dtls-reneg-server.conf
Add testing/docs for blocking write
2022-05-27 21:26:55 +02:00
test-dtls-resume.conf
tests: add bidirectional shutdown UDP tests
2022-05-11 13:27:37 +02:00
test-dtls-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-dtls-srtp-fails.conf
tests: support test for SRTP
2022-01-19 13:35:29 +01:00
test-dtls-srtp.conf
tests: support test for SRTP
2022-01-19 13:35:29 +01:00
test-dtls.conf
ECDHE-PSK with x25519
2024-01-16 15:18:05 -08:00
test-ecc-cust-curves.conf
Support TLS 1.3 ECC Brainpool authentication
2026-01-22 14:14:09 +01:00
test-ed448.conf
Update OpenSSL interopability testing
2020-08-11 16:44:45 +10:00
test-ed25519.conf
ECC: Disable ECC but have Curve25519/448 and PK callbacks fix
2021-05-10 10:32:55 +10:00
test-enckeys.conf
New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:
2018-12-21 09:54:55 -08:00
test-fails.conf
Regression test fixes
2026-01-28 07:37:29 +10:00
test-maxfrag-dtls.conf
nginx 1.28.1
2026-02-25 15:19:13 +01:00
test-maxfrag.conf
nginx 1.28.1
2026-02-25 15:19:13 +01:00
test-p521.conf
TLS 1.3: Fix P-521 algorithm matching
2020-09-18 10:51:55 +10:00
test-psk-no-id-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-psk-no-id.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-psk.conf
Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442
2022-05-27 11:05:55 -04:00
test-rsapss.conf
handle certificates with RSA-PSS signature that have RSAk public keys
2022-09-21 08:24:09 -06:00
test-sctp-sha2.conf
SCTP Test
2020-07-20 15:03:48 -07:00
test-sctp.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-sig.conf
add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.
2020-11-11 22:47:47 -06:00
test-sm2.conf
SM2/SM3/SM4: Chinese cipher support
2023-07-04 13:36:28 +10:00
test-tls13-down.conf
Allow trusted_ca_keys with TLSv1.3
2025-06-09 08:31:54 +01:00
test-tls13-ecc.conf
add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.
2020-11-11 22:47:47 -06:00
test-tls13-pq-hybrid-extra.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-pq-hybrid.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-pq-standalone.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-psk.conf
TLS 1.3 PSK: add option to require only PSK with DHE
2023-02-16 09:21:29 +10:00
test-tls13.conf
TLS 1.3: send ticket
2022-06-01 10:36:01 +10:00
test-tls-downgrade.conf
Check for TLS downgrade
2021-04-23 14:45:35 -07:00
test-trustpeer.conf
stunnel 5.61 support
2022-02-23 09:47:34 +01:00
test.conf
ECDHE-PSK with x25519
2024-01-16 15:18:05 -08:00
TXT_DB.txt
Internal unit tests
2020-12-17 14:26:49 +01:00
unit.c
update Copyright year
2026-02-18 09:52:21 -07:00
unit.h
update Copyright year
2026-02-18 09:52:21 -07:00
utils.c
update Copyright year
2026-02-18 09:52:21 -07:00
utils.h
update Copyright year
2026-02-18 09:52:21 -07:00
w64wrapper.c
update Copyright year
2026-02-18 09:52:21 -07:00

README 

Before creating any new configure files (.conf) read the CONF_FILES_README.md
Reference in New Issue View Git Blame Copy Permalink