wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-08-20 12:03:47 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
af0eb33fffa478c42dc800dd39cd55197cd48f6d
wolfssl/wolfcrypt/src
T
History
Tobias Frauenschläger af0eb33fff Invalidate LMS key when private key write fails 
wc_LmsKey_Sign computes the signature with the one-time key at the
current leaf and only afterwards advances the leaf index and writes it
to non-volatile storage. When that write failed the signature was erased
but the key state was left as OK, so the same in-memory key could sign
again while storage still recorded the already consumed leaf. A restart
followed by wc_LmsKey_Reload would then resume from that leaf and sign a
second message with the same LM-OTS private key.

Set the key state to bad before signing and only restore it to OK once
the advanced private key has been committed to storage, matching what
wc_xmsskey_signupdate already does for XMSS. Exhausted keys keep their
existing NOSIGS state.

Fixes F-7411.
2026-08-07 08:11:23 +02:00
..
port
Merge pull request #11031 from douzzer/20260727-fips-dev-no-post
2026-08-06 08:47:10 +02:00
aes_asm.asm
Intel x64 ASM: Add new assembly for AES
2026-06-23 20:54:59 +10:00
aes_asm.S
wolfssl/wolfcrypt/libwolfssl_sources_asm.h: define BUILDING_WOLFSSL_ASM when not
2026-08-05 13:53:45 -05:00
aes_gcm_asm.asm
ML-DSA AVX512: Add new assembly
2026-08-05 14:08:25 +10:00
aes_gcm_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
aes_gcm_x86_asm.asm
Add Windows assembly files to the build
2026-07-07 08:02:20 +10:00
aes_gcm_x86_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
aes_x86_64_asm.asm
ML-DSA AVX512: Add new assembly
2026-08-05 14:08:25 +10:00
aes_x86_64_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
aes_xts_asm.asm
ML-DSA AVX512: Add new assembly
2026-08-05 14:08:25 +10:00
aes_xts_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
aes.c
Merge pull request #11031 from douzzer/20260727-fips-dev-no-post
2026-08-06 08:47:10 +02:00
arc4.c
Ensure a key is set for ARC4 operations
2026-06-10 11:36:29 +02:00
ascon.c
ascon: handle empty input in wc_AsconAEAD128_DecryptUpdate
2026-07-29 08:02:02 +02:00
asm.c
…
asn_orig.c
Merge pull request #10961 from anhu/crl_unknown_ext
2026-07-30 09:00:23 -07:00
ASN_TEMPLATE.md
…
asn_tsp.c
Time-Stamp Protocol (RFC 3161)
2026-07-08 09:33:47 +10:00
asn.c
Fix buffer overrun in SignCert when sizing the signature wrapper
2026-08-06 08:50:30 +02:00
async.c
Intel QAT: add async hybrid PQC server key share regression test
2026-07-07 09:54:04 -07:00
blake2b.c
MemZero: Add more checks of buffers.
2026-07-30 10:50:52 +10:00
blake2s.c
MemZero: Add more checks of buffers.
2026-07-30 10:50:52 +10:00
camellia.c
F-6426 - Reject Camellia cipher ops when no key is set
2026-07-02 11:36:01 +02:00
chacha20_poly1305.c
MemZero: Add more checks of buffers.
2026-07-30 10:50:52 +10:00
chacha_asm.asm
Generated Assembly/SP: regeneration and fixes
2026-07-30 10:52:44 +10:00
chacha_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
chacha.c
Reject unset key in wc_Chacha_Process
2026-08-01 13:11:52 +02:00
cmac.c
wolfssl/wolfcrypt/cmac.h: add WC_CMAC_NONE = 0 to CmacType.
2026-08-05 13:53:45 -05:00
coding.c
coding: remove unreachable in operand in Base16_Decode
2026-07-31 15:37:10 +02:00
compress.c
F-5858 - Grow decompress buffer geometrically to avoid quadratic copy DoS
2026-06-25 15:07:33 -07:00
cpuid.c
Merge pull request #10957 from SparkiDev/arm32_cpuid_flags
2026-08-05 07:34:34 -07:00
cryptocb.c
PR feedback: add missing strings and precompiler checks
2026-08-04 14:36:11 -07:00
curve448.c
MemZero: Add more checks of buffers.
2026-07-30 10:50:52 +10:00
curve25519.c
Merge pull request #11043 from SparkiDev/curve25519_avx2
2026-08-04 20:48:58 -07:00
des3.c
wolfcrypt/src/*.c: define WC_FIPS_LL_CRYPTO in FIPS-controlled sources before
2026-08-05 13:53:45 -05:00
dh.c
fixes and improvements from AI review:
2026-08-05 13:53:47 -05:00
dsa.c
MemZero: Add more checks of buffers.
2026-07-30 10:50:52 +10:00
ecc_fp.c
…
ecc.c
wolfcrypt/src/ecc.c: pull in wolfssl/wolfcrypt/wc_compat.h for wc_AesGcmEncrypt() remapping if needed.
2026-08-05 13:53:45 -05:00
eccsi.c
Keep the record size probe clear of a suspended build
2026-08-05 20:39:57 +02:00
ed448.c
wolfcrypt/src/*.c: define WC_FIPS_LL_CRYPTO in FIPS-controlled sources before
2026-08-05 13:53:45 -05:00
ed25519.c
wolfcrypt/src/*.c: define WC_FIPS_LL_CRYPTO in FIPS-controlled sources before
2026-08-05 13:53:45 -05:00
error.c
fixes and improvements from AI review:
2026-08-05 13:53:47 -05:00
evp_pk.c
Reset stale key metadata when d2i reuses an EVP_PKEY
2026-08-06 22:19:42 +02:00
evp.c
Tighten EC key ownership on the EVP_PKEY
2026-08-06 22:19:42 +02:00
falcon.c
wolfssl/wolfcrypt/settings.h: remove automatic HAVE___INT128_T/HAVE___UINT128_T
2026-08-05 13:53:47 -05:00
fe_448.c
Wycheproof: fixes for various platforms
2026-07-07 09:06:00 +10:00
fe_low_mem.c
PR feedback: add missing strings and precompiler checks
2026-08-04 14:36:11 -07:00
fe_operations.c
Curve25519 crypto cb full
2026-08-03 16:30:31 -07:00
fe_x25519_128.h
…
fe_x25519_asm.asm
wolfcrypt/src/fe_x25519_asm.{S,asm}, wolfcrypt/src/sp_x86_64_asm.{S,asm}:
2026-08-05 13:53:46 -05:00
fe_x25519_asm.S
fixes from peer review, post-rebase test results, and test coverage expansion:
2026-08-05 13:55:14 -05:00
fp_mont_small.i
…
fp_mul_comba_3.i
…
fp_mul_comba_4.i
…
fp_mul_comba_6.i
…
fp_mul_comba_7.i
…
fp_mul_comba_8.i
…
fp_mul_comba_9.i
…
fp_mul_comba_12.i
…
fp_mul_comba_17.i
…
fp_mul_comba_20.i
…
fp_mul_comba_24.i
…
fp_mul_comba_28.i
…
fp_mul_comba_32.i
…
fp_mul_comba_48.i
…
fp_mul_comba_64.i
…
fp_mul_comba_small_set.i
…
fp_sqr_comba_3.i
…
fp_sqr_comba_4.i
…
fp_sqr_comba_6.i
…
fp_sqr_comba_7.i
…
fp_sqr_comba_8.i
…
fp_sqr_comba_9.i
…
fp_sqr_comba_12.i
…
fp_sqr_comba_17.i
…
fp_sqr_comba_20.i
…
fp_sqr_comba_24.i
…
fp_sqr_comba_28.i
…
fp_sqr_comba_32.i
…
fp_sqr_comba_48.i
…
fp_sqr_comba_64.i
…
fp_sqr_comba_small_set.i
…
ge_448.c
Regression testing fixes
2026-07-29 14:59:47 +10:00
ge_low_mem.c
Add make_pub and check_key hooks for ed25519 cryptocb only
2026-07-14 09:08:12 -07:00
ge_operations.c
Merge pull request #11043 from SparkiDev/curve25519_avx2
2026-08-04 20:48:58 -07:00
hash.c
hash: consistent error code for uninitialized wc_Hash ops under debug
2026-07-15 23:44:40 +02:00
hmac.c
wolfcrypt/src/hmac.c: in wc_HmacSetKey_ex reject WC_MD5 under HAVE_FIPS
2026-08-05 13:53:45 -05:00
hpke.c
Restore the caller's key RNG after an HPKE operation
2026-08-01 12:04:56 +02:00
include.am
Add WISeKey/SealSQ VaultIC secure element port
2026-08-04 18:49:31 -07:00
integer.c
integer: remove unreachable mp_init failure handling in mp_init_multi
2026-08-03 12:33:14 +02:00
kdf.c
wolfcrypt/src/hmac.c: in wc_HmacSetKey_ex reject WC_MD5 under HAVE_FIPS
2026-08-05 13:53:45 -05:00
logging.c
wolfcrypt/src/logging.c, wolfssl/wolfcrypt/logging.h: recognize WOLFSSL_DEBUG_TRACE_ERROR_CODES_SUPPORT, facilitating opt-in per-file error tracing in debug campaigns.
2026-08-05 13:53:47 -05:00
md2.c
…
md4.c
…
md5.c
md5: remove unreachable len operand in wc_Md5Update
2026-07-31 15:37:10 +02:00
memory.c
wolfcrypt/src/memory.c: replace PRNG in SAVE_VECTOR_REGISTERS2_fuzzer() with xorshift64 (Marsaglia 2003).
2026-08-05 13:53:47 -05:00
misc.c
Fix invalid casts on ML-DSA
2026-07-02 22:23:52 +09:00
pkcs7.c
Merge pull request #10937 from embhorn/zd22160
2026-08-04 10:33:15 -07:00
pkcs12.c
MemZero: Add more checks of buffers.
2026-07-30 10:50:52 +10:00
poly1305_asm.asm
Generated Assembly/SP: regeneration and fixes
2026-07-30 10:52:44 +10:00
poly1305_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
poly1305.c
RISC-V 64-bit: rework assembly code.
2026-07-16 09:39:09 +10:00
puf.c
MemZero: Add more checks of buffers.
2026-07-30 10:50:52 +10:00
pwdbased.c
wolfcrypt/src/*.c: define WC_FIPS_LL_CRYPTO in FIPS-controlled sources before
2026-08-05 13:53:45 -05:00
random.c
fixes and improvements from AI review:
2026-08-05 13:53:47 -05:00
rc2.c
F-6427 - Reject RC2 cipher ops when no key is set
2026-07-02 11:36:01 +02:00
ripemd.c
…
rng_bank.c
fixes and improvements from AI review:
2026-08-05 13:53:47 -05:00
rsa.c
various minor cleanups / tweaks for buildability and clarity:
2026-08-05 13:53:46 -05:00
sakke.c
activate ECCSI and SAKKE in linuxkm:
2026-05-30 15:11:36 -05:00
sha3_asm.asm
ML-DSA AVX512: Add new assembly
2026-08-05 14:08:25 +10:00
sha3_asm.S
fixes from peer review, post-rebase test results, and test coverage expansion:
2026-08-05 13:55:14 -05:00
sha3.c
wolfcrypt/src/*.c: define WC_FIPS_LL_CRYPTO in FIPS-controlled sources before
2026-08-05 13:53:45 -05:00
sha256_asm.asm
Generated Assembly/SP: regeneration and fixes
2026-07-30 10:52:44 +10:00
sha256_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
sha256.c
fixes from peer review, post-rebase test results, and test coverage expansion:
2026-08-05 13:55:14 -05:00
sha512_asm.asm
Generated Assembly/SP: regeneration and fixes
2026-07-30 10:52:44 +10:00
sha512_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
sha512.c
wolfcrypt/src/sha256.c, wolfcrypt/src/sha512.c: clean up and fix up gating around WC_C_DYNAMIC_FALLBACK: use WC_SHA{256,512}_RAW_BE_BUFFER to indicate big-endian buffer.
2026-08-05 13:53:47 -05:00
sha.c
wolfcrypt/src/*.c: define WC_FIPS_LL_CRYPTO in FIPS-controlled sources before
2026-08-05 13:53:45 -05:00
signature.c
Fix RSA_W_ENC verify guard in signature wrapper
2026-08-07 08:11:23 +02:00
siphash.c
…
sm2.c
…
sm3_asm.S
…
sm3.c
…
sm4.c
…
sp_arm32.c
Merge pull request #9634 from SparkiDev/p521_x64_align_16
2026-07-31 13:30:45 -05:00
sp_arm64.c
Merge pull request #9634 from SparkiDev/p521_x64_align_16
2026-07-31 13:30:45 -05:00
sp_armthumb.c
Merge pull request #9634 from SparkiDev/p521_x64_align_16
2026-07-31 13:30:45 -05:00
sp_c32.c
Merge pull request #9634 from SparkiDev/p521_x64_align_16
2026-07-31 13:30:45 -05:00
sp_c64.c
Merge pull request #9634 from SparkiDev/p521_x64_align_16
2026-07-31 13:30:45 -05:00
sp_cortexm.c
Merge pull request #9634 from SparkiDev/p521_x64_align_16
2026-07-31 13:30:45 -05:00
sp_dsp32.c
…
sp_int.c
sp_int: remove tautological err check in _sp_lcm
2026-07-31 17:13:56 +02:00
sp_sm2_arm32.c
…
sp_sm2_arm64.c
…
sp_sm2_armthumb.c
…
sp_sm2_c32.c
…
sp_sm2_c64.c
…
sp_sm2_cortexm.c
…
sp_sm2_x86_64_asm.S
…
sp_sm2_x86_64.c
…
sp_x86_64_asm.asm
wolfcrypt/src/fe_x25519_asm.{S,asm}, wolfcrypt/src/sp_x86_64_asm.{S,asm}:
2026-08-05 13:53:46 -05:00
sp_x86_64_asm.S
wolfcrypt/src/fe_x25519_asm.{S,asm}, wolfcrypt/src/sp_x86_64_asm.{S,asm}:
2026-08-05 13:53:46 -05:00
sp_x86_64.c
Merge pull request #9634 from SparkiDev/p521_x64_align_16
2026-07-31 13:30:45 -05:00
srp.c
Only zeroize the SRP temporaries once they are initialized
2026-08-01 12:04:56 +02:00
tfm.c
Merge pull request #11028 from danielinux/mcdc-eliminate-dead-code
2026-08-03 14:48:20 +02:00
tsp.c
Time-Stamp Protocol (RFC 3161)
2026-07-08 09:33:47 +10:00
wc_dsp.c
…
wc_encrypt.c
Validate NULL parameters in wc_AesCbcEncryptWithKey (F-1376)
2026-07-22 13:30:22 +02:00
wc_falcon_fpr_x86_64_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
wc_frodokem_asm.asm
Generated Assembly/SP: regeneration and fixes
2026-07-30 10:52:44 +10:00
wc_frodokem_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
wc_frodokem_mat.c
Fix WC_C_DYNAMIC_FALLBACK in various quantum-resistant alg implementations:
2026-08-05 13:53:46 -05:00
wc_frodokem.c
MemZero: Add more checks of buffers.
2026-07-30 10:50:52 +10:00
wc_lms_impl.c
wolfcrypt/src/*.c: define WC_FIPS_LL_CRYPTO in FIPS-controlled sources before
2026-08-05 13:53:45 -05:00
wc_lms.c
Invalidate LMS key when private key write fails
2026-08-07 08:11:23 +02:00
wc_mldsa_asm.asm
ML-DSA AVX512: Add new assembly
2026-08-05 14:08:25 +10:00
wc_mldsa_asm.S
fixes from peer review, post-rebase test results, and test coverage expansion:
2026-08-05 13:55:14 -05:00
wc_mldsa.c
Merge pull request #10918 from MarkAtwood/fix/mldsa-gamma1-19-shift-ub
2026-08-06 12:11:43 -07:00
wc_mlkem_asm.asm
AES asm: Add GCM 8-bit table, fixes
2026-08-04 17:48:14 +10:00
wc_mlkem_asm.S
wolfssl/wolfcrypt/visibility.h: add user-overrideable WC_ASM_ATT_HIDDEN(name) ->
2026-08-05 13:53:45 -05:00
wc_mlkem_poly.c
Fix WC_C_DYNAMIC_FALLBACK in various quantum-resistant alg implementations:
2026-08-05 13:53:46 -05:00
wc_mlkem.c
wolfcrypt/src/*.c: define WC_FIPS_LL_CRYPTO in FIPS-controlled sources before
2026-08-05 13:53:45 -05:00
wc_pkcs11.c
Fall back to the exported EC point for PKCS11 verify when label or ID lookup finds none
2026-07-20 14:35:53 -07:00
wc_port.c
Wait for NETOS thread to finish before freeing its stack
2026-08-07 08:11:23 +02:00
wc_she.c
MemZero: Add more checks of buffers.
2026-07-30 10:50:52 +10:00
wc_slhdsa.c
Merge pull request #10917 from MarkAtwood/fix/slhdsa-base2b-shift-ub
2026-08-06 11:41:50 -07:00
wc_xmss_impl.c
wolfcrypt/src/*.c: define WC_FIPS_LL_CRYPTO in FIPS-controlled sources before
2026-08-05 13:53:45 -05:00
wc_xmss.c
Merge pull request #11031 from douzzer/20260727-fips-dev-no-post
2026-08-06 08:47:10 +02:00
wolfentropy.c
fixes from peer review, post-rebase test results, and test coverage expansion:
2026-08-05 13:55:14 -05:00
wolfevent.c
autoconf: build wolfevent.c under --enable-usersettings
2026-07-29 08:09:12 +02:00
wolfmath.c
activate ECCSI and SAKKE in linuxkm:
2026-05-30 15:11:36 -05:00