wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 19:00:49 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
ba51fbd30b81444b29a4202d2640cd023bf25f6a
wolfssl/tests/api
T
History
Sameeh Jubran ba51fbd30b Zero TLS 1.3 traffic keys after AES SE offload 
When WOLF_CRYPTO_CB_AES_SETKEY is enabled and a CryptoCB callback
imports the AES key into a Secure Element (aes->devCtx != NULL), the
TLS-layer copy in keys->{client,server}_write_key has no further
consumer: the software key schedule is not populated on offload.
ForceZero it in SetKeysSide() per provisioned side.

The static IVs (keys->{client,server}_write_IV and
keys->aead_{enc,dec}_imp_IV) are left intact because BuildTls13Nonce()
reads aead_{enc,dec}_imp_IV on every record (RFC 8446 Section 5.3).

Scope: TLS 1.3, non-DTLS, non-QUIC.  DTLS 1.3 needs the write keys
in Dtls13EpochCopyKeys; TLS 1.2 needs them for rehandshake; QUIC is
untouched pending audit.

Add two memio tests (test_wc_CryptoCb_Tls13_Key_{Zero_After_Offload,
No_Zero_Without_Offload}) that pin AES-GCM and check key / IV state
after the handshake and a KeyUpdate round.

Signed-off-by: Sameeh Jubran <sameeh@wolfssl.com>
2026-04-20 10:45:23 +03:00
..
api_decl.h
update Copyright year
2026-02-18 09:52:21 -07:00
api.h
wolfcrypt: add additional enforcement of correct digest sizes in signature gen and verify ops:
2026-04-06 00:53:57 -05:00
create_ocsp_test_blobs.py
Fix OCSP->CRL fallback
2026-02-26 11:44:50 -08:00
include.am
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
test_aes.c
Zero TLS 1.3 traffic keys after AES SE offload
2026-04-20 10:45:23 +03:00
test_aes.h
Zero TLS 1.3 traffic keys after AES SE offload
2026-04-20 10:45:23 +03:00
test_arc4.c
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_arc4.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_ascon_kats.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ascon.c
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_ascon.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_asn.c
Rebase conflicts
2026-03-20 16:19:11 -05:00
test_asn.h
Rebase conflicts
2026-03-20 16:16:21 -05:00
test_blake2.c
globally fix all "BLAKE2" references (implicit BLAKE2B) to explicit "BLAKE2B":
2026-04-07 13:18:53 -05:00
test_blake2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_camellia.c
Merge pull request #10136 from JeremiahM37/fenrir-issues-2
2026-04-16 08:51:17 +10:00
test_camellia.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_certman.c
Fix from review
2026-04-14 13:39:17 -05:00
test_certman.h
Report cert verify failure with MD5
2026-04-14 12:31:01 -05:00
test_chacha20_poly1305.c
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_chacha20_poly1305.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_chacha.c
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_chacha.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_cmac.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_cmac.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_curve448.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_curve448.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_curve25519.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_curve25519.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_des3.c
Merge pull request #10136 from JeremiahM37/fenrir-issues-2
2026-04-16 08:51:17 +10:00
test_des3.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_dh.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_dh.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_digest.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_dsa.c
wolfcrypt: add additional enforcement of correct digest sizes in signature gen and verify ops:
2026-04-06 00:53:57 -05:00
test_dsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_dtls.c
Fix DTLS 1.3 extSz out-of-bounds and word16 truncation on oversized certificate chains
2026-04-03 12:10:42 +02:00
test_dtls.h
Fix DTLS 1.3 extSz out-of-bounds and word16 truncation on oversized certificate chains
2026-04-03 12:10:42 +02:00
test_ecc.c
ecc: fix invalid-curve attack via missing on-curve validation
2026-04-06 21:18:32 +02:00
test_ecc.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ed448.c
Better macro gating
2026-03-31 12:48:12 -04:00
test_ed448.h
Add privKeySet checks to Ed25519, Ed448, ML-DSA, and ML-KEM
2026-03-26 14:56:00 -04:00
test_ed25519.c
Better macro gating
2026-03-31 12:48:12 -04:00
test_ed25519.h
Add privKeySet checks to Ed25519, Ed448, ML-DSA, and ML-KEM
2026-03-26 14:56:00 -04:00
test_evp_cipher.c
evp: verify Poly1305 tag on ChaCha20-Poly1305 decrypt
2026-04-02 12:35:15 +02:00
test_evp_cipher.h
Fix review feedback
2026-03-05 08:51:52 -06:00
test_evp_digest.c
globally fix all "BLAKE2" references (implicit BLAKE2B) to explicit "BLAKE2B":
2026-04-07 13:18:53 -05:00
test_evp_digest.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_evp_pkey.c
Require exact tag length in EVP_DigestVerifyFinal HMAC path
2026-04-15 03:09:11 +02:00
test_evp_pkey.h
Require exact tag length in EVP_DigestVerifyFinal HMAC path
2026-04-15 03:09:11 +02:00
test_evp.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_evp.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_hash.c
globally fix all "BLAKE2" references (implicit BLAKE2B) to explicit "BLAKE2B":
2026-04-07 13:18:53 -05:00
test_hash.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_hmac.c
Fix test cleanup
2026-02-26 14:51:49 -06:00
test_hmac.h
Fix issue in TLS_hmac size calculation
2026-02-26 10:26:20 -06:00
test_md2.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_md4.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md4.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_md5.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md5.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_mldsa.c
Remove some duplicate CI tests
2026-04-10 12:50:24 +02:00
test_mldsa.h
Merge pull request #10083 from anhu/privkeyset
2026-04-02 00:15:12 -05:00
test_mlkem.c
Initialize ctTampered in test
2026-04-15 03:09:11 +02:00
test_mlkem.h
Fix ML-KEM ARM64 NEON ciphertext comparison reduction
2026-04-15 03:09:11 +02:00
test_ocsp_test_blobs.h
Fix OCSP->CRL fallback
2026-02-26 11:44:50 -08:00
test_ocsp.c
Merge pull request #10064 from julek-wolfssl/master
2026-04-02 22:54:10 -05:00
test_ocsp.h
Fix multiple bugs in OCSP implementation
2026-04-02 11:24:25 +02:00
test_ossl_asn1.c
prevent resource leak if ASN1_INTEGER_to_BN() != null if expected
2026-04-03 17:13:29 -06:00
test_ossl_asn1.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_bio.c
bio: add tests
2026-04-08 18:49:40 +02:00
test_ossl_bio.h
bio: add tests
2026-04-08 18:49:40 +02:00
test_ossl_bn.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_bn.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_cipher.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_cipher.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dgst.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dgst.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dh.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dh.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dsa.c
wolfcrypt: add additional enforcement of correct digest sizes in signature gen and verify ops:
2026-04-06 00:53:57 -05:00
test_ossl_dsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ec.c
ecc: fix invalid-curve attack via missing on-curve validation
2026-04-06 21:18:32 +02:00
test_ossl_ec.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ecx.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ecx.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_mac.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_mac.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_obj.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_obj.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_p7p12.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_p7p12.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_pem.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_pem.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rand.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rand.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rsa.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_rsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_sk.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_sk.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_acert.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_acert.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_crypto.c
Initialize certificate: default to SHA-1 when necessary
2026-04-10 07:58:37 +10:00
test_ossl_x509_crypto.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_ext.c
Copy pathlen in ASN1_OBJECT_dup() and set pathLengthSet in X509_add_ext() when adding basic constraints with a path length
2026-03-11 09:59:19 -06:00
test_ossl_x509_ext.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_info.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_info.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_io.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_io.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_lu.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_lu.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_name.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_name.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_pk.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_pk.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_str.c
Fix from review
2026-04-14 07:41:30 -05:00
test_ossl_x509_str.h
x509: fix CA:FALSE bypass in wolfSSL_X509_verify_cert
2026-04-02 22:38:16 -06:00
test_ossl_x509_vp.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_vp.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509.c
Improve tests
2026-04-09 16:24:12 -05:00
test_ossl_x509.h
Add test cases
2026-03-31 09:29:46 -07:00
test_pkcs7.c
Merge pull request #10139 from philljj/fix_nightly_mem
2026-04-07 09:08:01 -06:00
test_pkcs7.h
Add bounds check in PKCS7 streaming indefinite-length end-of-content parsing
2026-03-25 20:03:00 -04:00
test_pkcs12.c
Initialize fullMac in test
2026-04-15 03:09:11 +02:00
test_pkcs12.h
PKCS12: check mismatch between hash algo and hash size
2026-04-15 03:08:50 +02:00
test_poly1305.c
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_poly1305.h
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_random.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_random.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_rc2.c
Merge pull request #10136 from JeremiahM37/fenrir-issues-2
2026-04-16 08:51:17 +10:00
test_rc2.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_ripemd.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ripemd.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_rsa.c
wolfssl/wolfcrypt/types.h: restore WC_ALLOC_DO_ON_FAILURE fallback definition from 760178c7dc -- reversion in part of 5f4d499df0. fixes optest build failures in all-crypto-only-intelasm-fips-v5-linuxkm-next-insmod-optest, all-crypto-only-intelasm-fips-v6-linuxkm-next-insmod-optest, and all-crypto-only-intelasm-fips-dev-linuxkm-next-insmod-optest.
2026-03-26 16:28:18 -05:00
test_rsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha3.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha3.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha256.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha256.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha512.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha512.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_signature.c
fix f-1370 key_len size check for void* in wc_SignatureGetSize
2026-04-08 17:07:42 +09:00
test_signature.h
fix f-1370 key_len size check for void* in wc_SignatureGetSize
2026-04-08 17:07:42 +09:00
test_slhdsa.c
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
test_slhdsa.h
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
test_sm2.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm3.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm3.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm4.c
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_sm4.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_tls13.c
TLS 1.3: evict session from cache after accepted 0-RTT resumption
2026-04-14 15:35:50 +00:00
test_tls13.h
TLS 1.3: evict session from cache after accepted 0-RTT resumption
2026-04-14 15:35:50 +00:00
test_tls_ext.c
Add test case
2026-02-26 10:18:31 -06:00
test_tls_ext.h
Add test case
2026-02-26 10:18:31 -06:00
test_tls.c
Fix from review
2026-04-09 11:32:47 -05:00
test_tls.h
Fix ETM on resumption
2026-04-08 15:06:11 -05:00
test_wc_encrypt.c
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_wc_encrypt.h
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_wolfmath.c
Use size_t in wolfSSL_strnstr and reject negative indices in mp_get_digit
2026-04-10 10:48:17 -07:00
test_wolfmath.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_x509.c
Fix from review
2026-04-14 07:47:29 -05:00
test_x509.h
Fix wolfSSL_sk_X509_OBJECT_deep_copy to check bounds
2026-04-13 17:02:51 -05:00