wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 18:20:53 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
e32e926f4e789d04615e0edd8fa641058952d010
wolfssl/wolfcrypt/src
T
History
Tobias Frauenschläger e32e926f4e evp: fix EVP_PKEY2PKCS8 returning NULL for private-key-only EC keys 
When an EC_KEY is created via EC_KEY_new + EC_KEY_set_group +
EC_KEY_set_private_key (no public point set), SetECKeyInternal
incorrectly marks the internal ecc_key as ECC_PRIVATEKEY (instead of
ECC_PRIVATEKEY_ONLY) because pub_key is always non-NULL — EC_KEY_new
always allocates it as an empty, zero-initialised EC_POINT.

ECC_populate_EVP_PKEY only calls wc_ecc_make_pub for ECC_PRIVATEKEY_ONLY
keys, so the zero public-key point was serialised into the DER stored in
pkey->pkey.ptr.  After commit 929dd9913 made wc_ecc_import_x963_ex always
pass untrusted=1, the re-decode inside wolfSSL_EVP_PKEY2PKCS8 →
wolfSSL_d2i_PrivateKey_EVP correctly rejected that zero point with an
on-curve failure, causing EVP_PKEY2PKCS8 to return NULL.

Fix: in ECC_populate_EVP_PKEY, also call wc_ecc_make_pub when the key
type is ECC_PRIVATEKEY but pubkey.x is zero (meaning the public key was
never actually populated).  This reconstructs the public key from the
private scalar so that the encoded DER contains a valid on-curve point.
2026-04-06 21:18:32 +02:00
..
port
Merge pull request #10114 from Frauschi/fenrir
2026-04-02 22:52:48 -05:00
aes_asm.asm
update Copyright year
2026-02-18 09:52:21 -07:00
aes_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_gcm_asm.asm
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
aes_gcm_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_gcm_x86_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_xts_asm.asm
ASM generation fixes
2026-03-20 11:56:25 +10:00
aes_xts_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
aes.c
free authInPadded if alloc'd on early return
2026-03-26 16:11:19 -06:00
arc4.c
update Copyright year
2026-02-18 09:52:21 -07:00
ascon.c
Make sure ASCON is unusable on big endian
2026-04-02 11:55:41 +02:00
asm.c
update Copyright year
2026-02-18 09:52:21 -07:00
asn_orig.c
fixes from CI testing and peer review:
2026-04-01 15:28:35 -05:00
ASN_TEMPLATE.md
codespell fixes.
2024-11-05 00:19:07 -06:00
asn.c
Merge pull request #10064 from julek-wolfssl/master
2026-04-02 22:54:10 -05:00
async.c
Fixes for async and crypto callbacks
2026-02-27 14:35:03 -08:00
blake2b.c
Add bounds checks for Blake2 digest size
2026-04-02 11:55:41 +02:00
blake2s.c
Add bounds checks for Blake2 digest size
2026-04-02 11:55:41 +02:00
camellia.c
update Copyright year
2026-02-18 09:52:21 -07:00
chacha20_poly1305.c
remove casts that would cause truncation if long int is 32-bit but size_t is 64-bit
2026-03-27 12:09:53 -06:00
chacha_asm.asm
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
chacha_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
chacha.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
cmac.c
wolfcrypt/src/aes.c, wolfcrypt/src/cmac.c, wolfssl/wolfcrypt/aes.h, wolfssl/wolfcrypt/types.h: optimizations to mitigate performance regressions from 299e7bd097 (#9783):
2026-02-24 13:59:12 -06:00
coding.c
update Copyright year
2026-02-18 09:52:21 -07:00
compress.c
update Copyright year
2026-02-18 09:52:21 -07:00
cpuid.c
update Copyright year
2026-02-18 09:52:21 -07:00
cryptocb.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
curve448.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
curve25519.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
des3.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
dh.c
linuxkm/, wolfcrypt/src/dh.c, wolfcrypt/test/test.c, wolfcrypt/test/test.h, wolfssl/wolfcrypt/wc_port.h:
2026-03-26 15:41:47 -05:00
dilithium.c
Merge pull request #10083 from anhu/privkeyset
2026-04-02 00:15:12 -05:00
dsa.c
Fix test with cast
2026-03-06 07:33:52 -06:00
ecc_fp.c
…
ecc.c
ecc: fix invalid-curve attack via missing on-curve validation
2026-04-06 21:18:32 +02:00
eccsi.c
Fix resource leak in wc_InitEccsiKey_ex error path
2026-03-16 15:15:11 -07:00
ed448.c
Add privKeySet checks to Ed25519, Ed448, ML-DSA, and ML-KEM
2026-03-26 14:56:00 -04:00
ed25519.c
Add privKeySet checks to Ed25519, Ed448, ML-DSA, and ML-KEM
2026-03-26 14:56:00 -04:00
error.c
wolfcrypt/src/hpke.c, wolfssl/wolfcrypt/error-crypt.h, wolfcrypt/src/error.c: implement RFC 9180 overflow checks on context->seq in wc_HpkeContextSealBase() and wc_HpkeContextOpenBase(), and add SEQ_OVERFLOW_E to wolfCrypt_ErrorCodes (Fenrir M-70).
2026-02-27 23:40:37 -06:00
evp_pk.c
wolfcrypt/src/evp_pk.c: fix benign nullPointer in d2i_make_pkey() reported by cppcheck-2.20.0.
2026-03-09 10:58:36 -05:00
evp.c
evp: fix EVP_PKEY2PKCS8 returning NULL for private-key-only EC keys
2026-04-06 21:18:32 +02:00
ext_lms.c
Add buffer size and callback checks to external wc_LmsKey_Sign
2026-03-30 15:02:13 -07:00
ext_mlkem.c
update Copyright year
2026-02-18 09:52:21 -07:00
ext_xmss.c
update Copyright year
2026-02-18 09:52:21 -07:00
falcon.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_448.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_low_mem.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_operations.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_x25519_128.h
update Copyright year
2026-02-18 09:52:21 -07:00
fe_x25519_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
fp_mont_small.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_3.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_4.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_6.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_7.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_8.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_9.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_12.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_17.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_20.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_24.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_28.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_32.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_48.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_64.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_small_set.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_3.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_4.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_6.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_7.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_8.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_9.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_12.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_17.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_20.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_24.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_28.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_32.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_48.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_64.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_small_set.i
update Copyright year
2026-02-18 09:52:21 -07:00
ge_448.c
update Copyright year
2026-02-18 09:52:21 -07:00
ge_low_mem.c
update Copyright year
2026-02-18 09:52:21 -07:00
ge_operations.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
hash.c
wolfssl/wolfcrypt/types.h: add missing values in FIPS <=v2 enum wc_HashType definition;
2026-03-23 14:04:06 -05:00
hmac.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
hpke.c
Merge pull request #9999 from sebastian-carpenter/hpke-fix
2026-03-24 08:47:01 -07:00
include.am
Split original ASN.1 code from asn.c into asn_orig.c
2026-03-23 15:27:47 -07:00
integer.c
wolfcrypt/src/integer.c and wolfssl/wolfcrypt/integer.h: constify args to mp_cmp() and mp_cmp_mag().
2026-04-01 16:32:15 -05:00
kdf.c
update Copyright year
2026-02-18 09:52:21 -07:00
logging.c
wolfcrypt/src/logging.c: fix recursion in wc_backtrace_render().
2026-03-22 13:22:27 -05:00
md2.c
update Copyright year
2026-02-18 09:52:21 -07:00
md4.c
update Copyright year
2026-02-18 09:52:21 -07:00
md5.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
memory.c
Implement OCSP responder
2026-03-11 10:21:16 +01:00
misc.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
pkcs7.c
Merge pull request #10120 from douzzer/20260331-wolfcrypt-Wcast-qual
2026-04-02 00:25:13 -05:00
pkcs12.c
Merge pull request #10064 from julek-wolfssl/master
2026-04-02 22:54:10 -05:00
poly1305_asm.asm
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
poly1305_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
poly1305.c
SP int: fixes from AI review
2026-03-24 10:49:58 +10:00
pwdbased.c
wolfcrypt/src/pwdbased.c: in wc_PKCS12_PBKDF_ex(), refactor the "Increment B by 1" loop to avoid bugprone-inc-dec-in-conditions.
2026-03-24 12:07:04 -05:00
random.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
rc2.c
update Copyright year
2026-02-18 09:52:21 -07:00
ripemd.c
check if ripemd->buffLen >= RIPEMD_BLOCK_SZ is true to prevent out of bounds write
2026-03-05 10:52:20 -07:00
rng_bank.c
wolfcrypt/src/rng_bank.c and wolfssl/wolfcrypt/rng_bank.h: add !WC_NO_CONSTRUCTORS gate around wc_rng_new_bankref().
2026-03-17 17:45:09 -05:00
rsa.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
sakke.c
Fix Fenrir issues in wolfcrypt
2026-02-24 18:51:58 -08:00
sha3_asm.S
FIPS 205, SLH-DSA: implementation
2026-03-09 19:06:34 +10:00
sha3.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
sha256_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sha256.c
Merge pull request #9836 from Frauschi/pkcs11_dilithium
2026-03-05 15:22:10 -06:00
sha512_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
sha512.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
sha.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
signature.c
fixes from CI testing and peer review:
2026-04-01 15:28:35 -05:00
siphash.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
sm2.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm3_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sm3.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm4.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_arm32.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_arm64.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_armthumb.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_c32.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_c64.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_cortexm.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_dsp32.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_int.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
sp_sm2_arm32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_arm64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_armthumb.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_c32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_c64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_cortexm.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_x86_64_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_x86_64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_x86_64_asm.asm
ASM generation fixes
2026-03-20 11:56:25 +10:00
sp_x86_64_asm.S
ASM generation fixes
2026-03-20 11:56:25 +10:00
sp_x86_64.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sphincs.c
update Copyright year
2026-02-18 09:52:21 -07:00
srp.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
tfm.c
fixes from CI testing and peer review:
2026-04-01 15:28:35 -05:00
wc_dsp.c
update Copyright year
2026-02-18 09:52:21 -07:00
wc_encrypt.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
wc_lms_impl.c
Fix buffer-overflow in LMS leaf cache indexing
2026-03-11 16:58:48 -04:00
wc_lms.c
Add buffer size and callback checks to wc_LmsKey_Sign
2026-03-27 08:49:43 -04:00
wc_mldsa_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
wc_mlkem_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
wc_mlkem_poly.c
wolfcrypt/src/wc_mlkem.c, wolfcrypt/src/wc_mlkem_poly.c, wolfssl/wolfcrypt/mlkem.h, wolfssl/wolfcrypt/wc_mlkem.h: fixes for C89 compliance and aarch64-FIPS-linuxkm compatibility.
2026-03-20 14:53:05 -05:00
wc_mlkem.c
Add privKeySet checks to Ed25519, Ed448, ML-DSA, and ML-KEM
2026-03-26 14:56:00 -04:00
wc_pkcs11.c
Update the PKCS11 ECC and dilithium free handlers so they will now return CRYPTOCB_UNAVAILABLE after attempting the context free so the caller still does software cleanup on the rest of the context that the callback does not handle.
2026-03-12 15:18:56 -06:00
wc_port.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
wc_slhdsa.c
Cast to unsigned prior to shift to avoid UB in SLH-DSA
2026-03-31 09:43:58 -07:00
wc_xmss_impl.c
XMSS: Fix index copy for signing.
2026-03-16 21:24:08 +10:00
wc_xmss.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfentropy.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfevent.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfmath.c
SP int: fixes from AI review
2026-03-24 10:49:58 +10:00