wolfssl

mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 15:30:49 +02:00

Files

T

Tobias Frauenschläger c3289f8aa9 Enable and use ML-KEM by default

* Enable ML-KEM by default in build systems (autoconf and CMake)
* Only allow three to-be-standardized hybrid PQ/T combinations by
  default
* Use X25519MLKEM768 as the default KeyShare in the ClientHello (if user
  does not override that). When Curve25519 is disabled, then either
  WOLFSSL_SECP384R1MLKEM1024 or WOLFSSL_SECP256R1MLKEM768 is used as
  default depending on the ECC configuration
* Disable standalone ML-KEM in supported groups by default (enable with
  --enable-tls-mlkem-standalone)
* Disable extra OQS-based hybrid PQ/T curves by default and gate
  behind --enable-experimental (enable with --enable-extra-pqc-hybrids)
* Reorder the SupportedGroups extension to reflect the preferences
* Reorder the preferredGroup array to also reflect the same preferences
* Add async support for ML-KEM hybrids

2026-03-18 10:48:16 +01:00

api

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

api.c

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

CONF_FILES_README.md

Cleanup markdown documentation

2021-10-13 16:39:46 +01:00

include.am

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

NCONF_test.cnf

Internal unit tests

2020-12-17 14:26:49 +01:00

quic.c

bounds check on ext_dump

2026-03-12 09:53:35 -06:00

README

…

srp.c

update Copyright year

2026-02-18 09:52:21 -07:00

suites.c

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

test-altchains.conf

Fix to catch the issue in this PR with alt cert chains, which only happens if the verify callback is used and the chain is long enough. Cleanup of the myVerify callback to allow specific actions. Fix the suites.c to not crash if no newline at end of file. Added helpful debug message to show that a CA was found.

2020-06-18 09:26:50 -07:00

test-chains.conf

Fix for tests/test-chains.conf with new intermediate CA.

2020-06-18 08:33:59 -07:00

test-dhprime.conf

Fix for DH prime test (extra leading spaces). Fix for new chain tests with CRL enabled. The current way of testing chain only loads root CA as trusted. The intermediate CA CRL isn't trusted or loaded and causes error.

2018-12-21 12:36:47 -08:00

test-dtls13-cid.conf

add basic ConnectionID DTLS tests

2022-08-23 16:58:24 +02:00

test-dtls13-downgrade-fails.conf

tests: add negative version negotation tests

2022-09-28 18:42:38 +02:00

test-dtls13-downgrade.conf

Support (D)TLS1.3 downgrade when using PSK

2024-03-29 18:04:30 +00:00

test-dtls13-pq-hybrid-extra-frag.conf

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

test-dtls13-pq-hybrid-extra.conf

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

test-dtls13-pq-hybrid-frag.conf

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

test-dtls13-pq-standalone-frag.conf

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

test-dtls13-pq-standalone.conf

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

test-dtls13-psk.conf

fix: wrong size using DTLSv1.3 in RestartHandshakeHashWithCookie

2022-10-13 17:42:58 +02:00

test-dtls13.conf

tests: add dtls13 null cipher test

2023-05-19 08:10:26 +00:00

test-dtls-downgrade.conf

tests: add dtls downgrade tests

2022-07-06 16:18:44 +02:00

test-dtls-fails-cipher.conf

Correctly reset the Tx sequence number

2021-03-09 18:30:10 +01:00

test-dtls-fails.conf

Added a suite test use case to cover the new error check. Also fixed and issue with passing a couple flags to the test case runner, and some other changes to support the new test.

2020-07-22 13:20:23 -07:00

test-dtls-group.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-dtls-mtu.conf

Merge pull request #5149 from julek-wolfssl/store-frags-v2

2022-06-01 10:52:54 -07:00

test-dtls-reneg-client.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-dtls-reneg-server.conf

Add testing/docs for blocking write

2022-05-27 21:26:55 +02:00

test-dtls-resume.conf

tests: add bidirectional shutdown UDP tests

2022-05-11 13:27:37 +02:00

test-dtls-sha2.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-dtls-srtp-fails.conf

tests: support test for SRTP

2022-01-19 13:35:29 +01:00

test-dtls-srtp.conf

tests: support test for SRTP

2022-01-19 13:35:29 +01:00

test-dtls.conf

ECDHE-PSK with x25519

2024-01-16 15:18:05 -08:00

test-ecc-cust-curves.conf

Support TLS 1.3 ECC Brainpool authentication

2026-01-22 14:14:09 +01:00

test-ed448.conf

Update OpenSSL interopability testing

2020-08-11 16:44:45 +10:00

test-ed25519.conf

ECC: Disable ECC but have Curve25519/448 and PK callbacks fix

2021-05-10 10:32:55 +10:00

test-enckeys.conf

New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:

2018-12-21 09:54:55 -08:00

test-fails.conf

Regression test fixes

2026-01-28 07:37:29 +10:00

test-maxfrag-dtls.conf

nginx 1.28.1

2026-02-25 15:19:13 +01:00

test-maxfrag.conf

nginx 1.28.1

2026-02-25 15:19:13 +01:00

test-p521.conf

TLS 1.3: Fix P-521 algorithm matching

2020-09-18 10:51:55 +10:00

test-psk-no-id-sha2.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-psk-no-id.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-psk.conf

Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442

2022-05-27 11:05:55 -04:00

test-rsapss.conf

handle certificates with RSA-PSS signature that have RSAk public keys

2022-09-21 08:24:09 -06:00

test-sctp-sha2.conf

SCTP Test

2020-07-20 15:03:48 -07:00

test-sctp.conf

Purge IDEA cipher

2022-01-31 15:29:25 -05:00

test-sha2.conf

Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes

2019-09-06 09:31:14 +10:00

test-sig.conf

add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.

2020-11-11 22:47:47 -06:00

test-sm2.conf

SM2/SM3/SM4: Chinese cipher support

2023-07-04 13:36:28 +10:00

test-tls13-down.conf

Allow trusted_ca_keys with TLSv1.3

2025-06-09 08:31:54 +01:00

test-tls13-ecc.conf

2020-11-11 22:47:47 -06:00

test-tls13-pq-hybrid-extra.conf

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

test-tls13-pq-hybrid.conf

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

test-tls13-pq-standalone.conf

Enable and use ML-KEM by default

2026-03-18 10:48:16 +01:00

test-tls13-psk.conf

TLS 1.3 PSK: add option to require only PSK with DHE

2023-02-16 09:21:29 +10:00

test-tls13.conf

TLS 1.3: send ticket

2022-06-01 10:36:01 +10:00

test-tls-downgrade.conf

Check for TLS downgrade

2021-04-23 14:45:35 -07:00

test-trustpeer.conf

stunnel 5.61 support

2022-02-23 09:47:34 +01:00

test.conf

ECDHE-PSK with x25519

2024-01-16 15:18:05 -08:00

TXT_DB.txt

Internal unit tests

2020-12-17 14:26:49 +01:00

unit.c

update Copyright year

2026-02-18 09:52:21 -07:00

unit.h

update Copyright year

2026-02-18 09:52:21 -07:00

utils.c

update Copyright year

2026-02-18 09:52:21 -07:00

utils.h

update Copyright year

2026-02-18 09:52:21 -07:00

w64wrapper.c

update Copyright year

2026-02-18 09:52:21 -07:00

README

Before creating any new configure files (.conf) read the CONF_FILES_README.md