wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 23:50:52 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
eb180dbee2b3cdcb4c33917dbd2b5b2babed9393
wolfssl/wolfcrypt/src
T
History
Colton Willey 94b36c9092 Harden chain depth bounds and parser input validation 
Enforce MAX_CHAIN_DEPTH limits in OCSP chain processing
(SendCertificateStatus, ProcessChainOCSPRequest), certificate loading
(ProcessUserChain), and TLS 1.3 certificate sending
(SendTls13Certificate). Add idx bounds checks to chain accessors
in ssl.c.

Harden SNI extension parser (TLSX_SNI_GetFromBuffer) with length
checks preventing buffer overreads on malformed ClientHello.

Fix off-by-one in TLSX_CSR_Free where <= should be < since
csr->requests is a count, not a max index.

Add remaining-buffer bounds checks to PKCS7 decoders:
DecodeEnvelopedData, DecodeAuthEnvelopedData (encryptedContentSz
and authTagSz), DecodeEncryptedData, SignedData null signature tag,
and PwriKek_KeyUnWrap cekLen validation.
2026-05-27 17:16:30 -07:00
..
port
Merge pull request #10508 from JacobBarthelmeh/static_analysis_3
2026-05-28 09:24:56 +10:00
aes_asm.asm
update Copyright year
2026-02-18 09:52:21 -07:00
aes_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
aes_gcm_asm.asm
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes_gcm_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes_gcm_x86_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes_xts_asm.asm
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes_xts_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
aes.c
Merge pull request #10351 from rizlik/cryptocbonly
2026-05-14 10:37:39 -07:00
arc4.c
zero sensitive state before free
2026-04-20 17:20:54 +00:00
ascon.c
Make sure ASCON is unusable on big endian
2026-04-02 11:55:41 +02:00
asm.c
update Copyright year
2026-02-18 09:52:21 -07:00
asn_orig.c
Finalize ML-DSA renaming
2026-05-26 14:54:30 +02:00
ASN_TEMPLATE.md
codespell fixes.
2024-11-05 00:19:07 -06:00
asn.c
Finalize ML-DSA renaming
2026-05-26 14:54:30 +02:00
async.c
Fixes for async and crypto callbacks
2026-02-27 14:35:03 -08:00
blake2b.c
Fix Blake2 oversized key path
2026-05-11 04:56:16 +02:00
blake2s.c
Fix Blake2 oversized key path
2026-05-11 04:56:16 +02:00
camellia.c
wolfcrypt: zero sensitive buffers
2026-05-07 02:31:25 +00:00
chacha20_poly1305.c
remove casts that would cause truncation if long int is 32-bit but size_t is 64-bit
2026-03-27 12:09:53 -06:00
chacha_asm.asm
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
chacha_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
chacha.c
handling unaligned ChaCha input key buffer
2026-05-13 11:51:33 -06:00
cmac.c
stash caller heap before cryptocb fires so InitCmac_* callbacks can honor it
2026-05-26 09:51:59 -06:00
coding.c
move length check before dispatch
2026-04-13 15:52:45 +00:00
compress.c
wolfcrypt: validate API input sizes
2026-05-07 02:31:25 +00:00
cpuid.c
update Copyright year
2026-02-18 09:52:21 -07:00
cryptocb.c
Finalize ML-DSA renaming
2026-05-26 14:54:30 +02:00
curve448.c
Enable all-zero shared secret check for curve448/25519 by default. Change macro to opt-out macro WOLFSSL_NO_ECDHX_SHARED_ZERO_CHECK. Add unit test.
2026-05-13 17:02:08 -07:00
curve25519.c
Merge pull request #10374 from kareem-wolfssl/zd21699
2026-05-28 09:29:49 +10:00
des3.c
zero sensitive state before free
2026-04-20 17:20:54 +00:00
dh.c
Check params to GeneratePrivateDh186
2026-05-13 17:00:13 -05:00
dsa.c
Fully exclude the wc_DsaCheckPubKey function when building with NO_DSA_PUBKEY_CHECK.
2026-05-11 10:05:45 -07:00
ecc_fp.c
…
ecc.c
[TA-100] Address review feedback (Copilot + Fenrir)
2026-05-08 18:50:44 +02:00
eccsi.c
eccsi: fix universal signature forgery via r=0/s=0
2026-04-02 12:35:15 +02:00
ed448.c
eddsa: zero orig_k after sign
2026-05-07 02:31:25 +00:00
ed25519.c
eddsa: zero orig_k after sign
2026-05-07 02:31:25 +00:00
error.c
PQ FIPS v7.0.0 Phase 2 & 3: All changes
2026-04-24 06:52:49 -06:00
evp_pk.c
Finalize ML-DSA renaming
2026-05-26 14:54:30 +02:00
evp.c
Merge pull request #10504 from miyazakh/f-2180_pbkdf
2026-05-28 09:32:01 +10:00
falcon.c
Merge pull request #10340 from JeremiahM37/fenrir-3
2026-05-05 11:57:41 -07:00
fe_448.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_low_mem.c
Fix W560 "possible truncation at implicit conversion to type unsigned char" warnings raised by Tasking compiler.
2026-04-22 15:47:48 -07:00
fe_operations.c
update Copyright year
2026-02-18 09:52:21 -07:00
fe_x25519_128.h
update Copyright year
2026-02-18 09:52:21 -07:00
fe_x25519_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
fp_mont_small.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_3.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_4.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_6.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_7.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_8.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_9.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_12.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_17.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_20.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_24.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_28.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_32.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_48.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_64.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_mul_comba_small_set.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_3.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_4.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_6.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_7.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_8.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_9.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_12.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_17.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_20.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_24.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_28.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_32.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_48.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_64.i
update Copyright year
2026-02-18 09:52:21 -07:00
fp_sqr_comba_small_set.i
update Copyright year
2026-02-18 09:52:21 -07:00
ge_448.c
update Copyright year
2026-02-18 09:52:21 -07:00
ge_low_mem.c
update Copyright year
2026-02-18 09:52:21 -07:00
ge_operations.c
wolfcrypt/src/ge_operations.c and wolfssl/wolfcrypt/ge_operations.h: when ge_tobytes_nct and ge_tobytes have identical definitions, map the former to the latter using a macro and omit the latter definition, to avoid problematic R_ARM_THM_JUMP11 tail call.
2026-04-28 12:58:32 -05:00
hash.c
PQ FIPS v7.0.0 Phase 2 & 3: All changes
2026-04-24 06:52:49 -06:00
hmac.c
PQ FIPS v7.0.0 Phase 2 & 3: All changes
2026-04-24 06:52:49 -06:00
hpke.c
F-1908, improve hpke return codes
2026-05-11 11:35:22 -06:00
include.am
Merge pull request #10278 from twcook86/lpc55s69_crypto
2026-05-08 16:00:54 -07:00
integer.c
mp_cond_swap_ct: branchless masked XOR
2026-05-05 04:36:16 +00:00
kdf.c
Make sure large buffers are on the heap with SMALL_STACK
2026-04-19 20:38:41 +02:00
logging.c
wolfcrypt/src/logging.c and wolfssl/wolfcrypt/logging.h: add wc_backtrace_set_fp().
2026-04-15 21:28:43 -05:00
md2.c
update MD2 functions to return int instead of void
2026-05-13 11:36:36 -06:00
md4.c
update MD4 return from void to int
2026-05-13 11:36:36 -06:00
md5.c
Add inline documentation for missing macros and fix spelling errors
2026-03-16 17:09:13 -07:00
memory.c
Fix minor compile error with WOLFSSL_DEBUG_MEMORY
2026-05-26 11:39:34 -07:00
misc.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
pkcs7.c
Harden chain depth bounds and parser input validation
2026-05-27 17:16:30 -07:00
pkcs12.c
fix issue where ToTraditional_ex may assign negative value to *pkeySz
2026-05-01 14:06:51 -06:00
poly1305_asm.asm
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
poly1305_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
poly1305.c
SP int: fixes from AI review
2026-03-24 10:49:58 +10:00
puf.c
wolfCrypt SRAM PUF Support
2026-04-22 11:39:39 -07:00
pwdbased.c
fix clamp iterations <= 0 to 1 instead of returning an error
2026-05-20 07:25:35 -07:00
random.c
Merge pull request #10278 from twcook86/lpc55s69_crypto
2026-05-08 16:00:54 -07:00
rc2.c
explicit cast to word16 before shift with RC2
2026-05-20 01:25:46 -07:00
ripemd.c
check if ripemd->buffLen >= RIPEMD_BLOCK_SZ is true to prevent out of bounds write
2026-03-05 10:52:20 -07:00
rng_bank.c
validate preconditions at public API boundary
2026-05-04 17:18:39 +00:00
rsa.c
Merge pull request #10155 from aidangarske/fenrir-fixes-2
2026-05-11 21:07:53 -07:00
sakke.c
Merge pull request #10442 from JeremiahM37/zd21783
2026-05-14 19:51:52 +10:00
sha3_asm.S
Rename Dilithium to canonical ML-DSA (FIPS 204) names
2026-05-16 09:48:35 -05:00
sha3.c
ML-DSA fixes: small vfy key object, small SHA-3, fix test
2026-05-07 10:03:41 +10:00
sha256_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sha256.c
sha256: check no hw accelleartion is enabled with CB_ONLY_SHA256
2026-05-20 11:33:31 +02:00
sha512_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sha512.c
PQ FIPS v7.0.0 Phase 2 & 3: All changes
2026-04-24 06:52:49 -06:00
sha.c
Merge branch 'master' into lpc55s69_crypto
2026-05-05 10:20:39 -04:00
signature.c
fix(signature): fenrir 2626 enforce min hash strength
2026-05-19 10:06:56 -07:00
siphash.c
Fixes for -Wcast-qual hygiene in wolfCrypt.
2026-04-01 14:12:02 -05:00
sm2.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm3_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sm3.c
update Copyright year
2026-02-18 09:52:21 -07:00
sm4.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_arm32.c
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sp_arm64.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_armthumb.c
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sp_c32.c
Add RSA/DH SP non-blocking support for C/Small 2048/3072/4096
2026-05-08 10:36:28 -07:00
sp_c64.c
Add RSA/DH SP non-blocking support for C/Small 2048/3072/4096
2026-05-08 10:36:28 -07:00
sp_cortexm.c
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sp_dsp32.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
sp_int.c
Merge pull request #10478 from embhorn/zd21821
2026-05-28 09:00:41 +10:00
sp_sm2_arm32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_arm64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_armthumb.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_c32.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_c64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_cortexm.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_x86_64_asm.S
update Copyright year
2026-02-18 09:52:21 -07:00
sp_sm2_x86_64.c
update Copyright year
2026-02-18 09:52:21 -07:00
sp_x86_64_asm.asm
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sp_x86_64_asm.S
ASM files: generation script refactor output
2026-04-17 09:38:57 +10:00
sp_x86_64.c
Fix TOCTOU issues in SP math code
2026-04-02 15:06:35 +02:00
srp.c
srp: harden secret intermediates
2026-05-07 02:31:25 +00:00
tfm.c
fixes from CI testing and peer review:
2026-04-01 15:28:35 -05:00
wc_dsp.c
update Copyright year
2026-02-18 09:52:21 -07:00
wc_encrypt.c
Add wc_Rc2Free for key zeroization
2026-05-12 20:57:31 +00:00
wc_lms_impl.c
LMS: fixes and improvements
2026-05-11 16:18:12 +10:00
wc_lms.c
Merge pull request #10456 from padelsbach/lms-xmss-sw-fallback-fix
2026-05-13 16:43:41 +10:00
wc_mldsa_asm.S
Rename Dilithium to canonical ML-DSA (FIPS 204) names
2026-05-16 09:48:35 -05:00
wc_mldsa.c
Finalize ML-DSA renaming
2026-05-26 14:54:30 +02:00
wc_mlkem_asm.S
ML-KEM: fix AVX2 assembly
2026-05-12 13:32:19 +10:00
wc_mlkem_poly.c
ML-KEM: fix comments, API signatures, minor issues
2026-05-07 08:17:27 +10:00
wc_mlkem.c
Rename ML-DSA wc_PqcSignatureType entry
2026-05-20 09:06:54 -07:00
wc_pkcs11.c
Finalize ML-DSA renaming
2026-05-26 14:54:30 +02:00
wc_port.c
wc_port: guard fcntl behind WOLFSSL_KERNEL_MODE.
2026-05-27 14:52:54 -05:00
wc_she.c
wc_SHE_ImportM1M2M3: fix guard from || to && so it gates on WOLF_CRYPTO_CB
2026-04-15 18:03:39 -06:00
wc_slhdsa.c
Finalize ML-DSA renaming
2026-05-26 14:54:30 +02:00
wc_xmss_impl.c
XMSS Wconversion fixes
2026-05-06 15:29:08 +02:00
wc_xmss.c
Fix LMS and XMSS cryptocb software fallback
2026-05-11 10:45:38 -07:00
wolfentropy.c
Null-check wolfCrypt API inputs
2026-05-12 20:57:31 +00:00
wolfevent.c
update Copyright year
2026-02-18 09:52:21 -07:00
wolfmath.c
wolfmath: fix mpSz cast.
2026-05-11 21:46:36 -05:00