mirrors/wolfssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
21,571 Commits 5 Branches 162 Tags
Commit Graph

21571 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel Pouzzner
b1e5d0f9bb linuxkm: completion and stabilization of LKCAPI integration for AES-CBC, AES-CFB, AES-GCM, and AES-XTS: 
linuxkm/lkcapi_glue.c (added in earlier commit):
implement linuxkm_lkcapi_register() and linuxkm_lkcapi_unregister() with idempotency.
add AES-XTS algorithm glue and self-test implementations.
add per-algorithm gating: LINUXKM_LKCAPI_REGISTER_AESCBC, _AESCFB, _AESGCM, and _AESXTS.
carry forward philljj's implementations for AES-CBC, AES-CFB, and AES-GCM, with various cleanups.

linuxkm/module_hooks.c:
print the "wolfCrypt container hashes" message only if DEBUG_LINUXKM_PIE_SUPPORT is set.
render the FIPS version for the self-test success message using the HAVE_FIPS_VERSION* macros.
add a "skipping full wolfcrypt_test() ..." message for --disable-crypttests builds.
add CONFIG_FORTIFY_SOURCE gates.

configure.ac:
add support for --enable-linuxkm-lkcapi-register;
add AES-XTS to output config summary;
rename --enable-xts to --enable-aesxts (retaining old option for backward compatibility).

linuxkm/linuxkm_wc_port.h: add support for CONFIG_FORTIFY_SOURCE.

linuxkm/linuxkm_memory.c:
fix retvals in save_vector_registers_x86() (wc-style MEMORY_E, not sys-style ENOMEM).
add __my_fortify_panic() implementation.

linuxkm/Kbuild: for ENABLED_LINUXKM_PIE in rename-pie-text-and-data-sections recipe, create an .rodata.wolfcrypt section.

linuxkm/include.am: add linuxkm/lkcapi_glue.c to EXTRA_DIST.

wolfcrypt/test/test.c:
when defined(HAVE_FIPS_VERSION), inhibit a test clause in aes_xts_128_test() disallowed by FIPS ("FIPS AES-XTS main and tweak keys must differ").
fix out-of-order user message in ecc_test().
 2024-01-26 20:01:19 -06:00
Daniel Pouzzner
39c74a9bf8 AES-XTS: 
split XtsAes.aes in two, XtsAes.aes_encrypt and XtsAes.aes_decrypt, and add AES_ENCRYPTION_AND_DECRYPTION option constant, to accommodate Linux kernel crypto API model.
in wc_AesXtsSetKeyNoInit(), add FIPS check that main and tweak keys differ, and allow setting encrypt and decrypt keys simultaneously using AES_ENCRYPTION_AND_DECRYPTION.
in wc_AesXtsEncrypt() and wc_AesXtsDecrypt(), error if the required subkey has not been set.
 2024-01-26 15:22:34 -06:00
Daniel Pouzzner
ec60f91b4a linuxkm: add linuxkm/lkcapi_glue.c. 2024-01-26 15:22:34 -06:00
Daniel Pouzzner
1f4cf4188d linuxkm: 
* LKCAPI integration tweaks for buildability and streamlining.
* add DEBUG_VECTOR_REGISTER_ACCESS_FUZZING && !DEBUG_VECTOR_REGISTER_ACCESS, with a kernel-compatible implementation of SAVE_VECTOR_REGISTERS2_fuzzer().
 2024-01-26 15:22:34 -06:00
Daniel Pouzzner
6e559ed015 linuxkm: squash of philljj's POC work integrating libwolfssl.ko with crypto_register_skcipher/crypto_register_aead, start 2022-12-26, end 2023-01-14. 2024-01-26 15:22:34 -06:00
JacobBarthelmeh
3db58af4f8
Merge pull request #7173 from gojimmypi/PR-Espressif-SHA-updates 
Improved Espressif SHA HW/SW selection
 2024-01-26 11:51:15 -07:00
JacobBarthelmeh
db3873ff40
Merge pull request #7172 from bandi13/fixUninitVar 
Fix compilation errors about uninitialized variables
 2024-01-26 08:32:41 -07:00
gojimmypi
ac6181d7ae Improved Espressif SHA HW/SW selection 2024-01-25 15:23:58 -08:00
JacobBarthelmeh
578735e06c
Merge pull request #7169 from julek-wolfssl/gh/7160 
BIO_BIO: BIO_{write|read} on a BIO pair should wrap around ring buffer
 2024-01-25 12:08:10 -08:00
lealem47
a13d107db4
Merge pull request #7171 from dgarske/stm32_cube_template 
Improvements to the STM32Cube template
 2024-01-25 10:58:46 -07:00
JacobBarthelmeh
4c7f038149
Merge pull request #7161 from SparkiDev/xmss 
XMSS implementation
 2024-01-25 08:41:13 -08:00
Andras Fekete
4971b9a567 Fix compilation errors about uninitialized variables 
When compiling with '--enable-all CFLAGS=-Og' there were a ton of errors that needed fixing.
 2024-01-25 09:49:30 -05:00
Juliusz Sosinowicz
4f1d777090 BIO_BIO: BIO_{write|read} on a BIO pair should wrap around ring buffer 
- BIO_nread0 should return 0 when no data to read and -2 when not initialized
 2024-01-25 13:46:45 +01:00
Sean Parkinson
a5961907b0 XMSS implementation 
Supporting code for wolfSSL C implementation of XMSS.
 2024-01-25 11:21:39 +10:00
David Garske
7305583f72 Improvements to the STM32Cube template. Fix defaults for ASN template and SNI. Disable Shake by default. Add comment about AES CFB. 2024-01-24 10:35:32 -08:00
JacobBarthelmeh
199a5476ec
Merge pull request #7166 from miyazakh/gcc5_strict-aliasing 
fix strict-aliasing rules warning on gcc 5.x
 2024-01-24 10:18:13 -08:00
Hideki Miyazaki
00f4afb5ea
fix strict-aliasing rules warning 2024-01-24 12:37:16 +09:00
JacobBarthelmeh
478c0633e7
Merge pull request #7159 from dgarske/features_20240122 
Add PK Callback CMake support. Document `wc_RsaDirect`
 2024-01-23 13:08:03 -08:00
David Garske
fa87e227b4 Restore useful comments above wc_RsaDirect in the .c file. 2024-01-23 08:39:35 -08:00
JacobBarthelmeh
3cbffd33b1
Merge pull request #7162 from per-allansson/dtls13-fips-missing-return 
Fix missing return in DTLS1.3 / FIPS code
 2024-01-23 08:30:11 -08:00
JacobBarthelmeh
1574de1008
Merge pull request #7128 from embhorn/zd17251 
XC32 compiler version 4.x compatibility
 2024-01-23 08:20:39 -08:00
JacobBarthelmeh
938698ec6b
Merge pull request #7157 from philljj/fix_zephyr_benchmark_rsa 
zephyr samples: fix wolfssl_benchmark RSA.
 2024-01-23 08:17:10 -08:00
JacobBarthelmeh
78f7454043
Merge pull request #7154 from anhu/EccKeyParamCopy_error 
Fix missing heap hint in `EccKeyParamCopy`
 2024-01-23 08:11:35 -08:00
David Garske
3b20f49544
Merge pull request #7139 from douzzer/20230118-fix-_sp_mont_red-WOLFSSL_NO_CT_OPS 
20230118-fix-_sp_mont_red-WOLFSSL_NO_CT_OPS
 2024-01-23 07:18:25 -08:00
Per Allansson
92d7815b5c
Fix missing return in DTLS1.3 / FIPS code 2024-01-23 08:35:07 +01:00
David Garske
916c22e021 Add PK (public key) callback support to CMake. 2024-01-22 13:42:31 -08:00
David Garske
3d62896137 Add documentation for wc_RsaDirect. 2024-01-22 13:41:25 -08:00
David Garske
dcc946575b Fix missing heap hint in EccKeyParamCopy. The XFREE is required or it will leak memory allocated in ASNToHexString. This only applies to WOLFSSL_CUSTOM_CURVES && !WOLFSSL_ASN_TEMPLATE. 2024-01-22 13:18:24 -08:00
Sean Parkinson
b0de0a1c95
Merge pull request #7143 from julek-wolfssl/zd/17303 
EVP_Cipher: correct parameter checking
 2024-01-23 07:15:20 +10:00
jordan
920aaebed7 zephyr samples: fix wolfssl_benchmark RSA. 2024-01-22 14:59:09 -06:00
JacobBarthelmeh
eb1fff3ad3
Merge pull request #7141 from julek-wolfssl/zd/17249 
EarlySanityCheckMsgReceived: version_negotiated should always be checked
 2024-01-22 12:18:57 -08:00
JacobBarthelmeh
f2a76a0630
Merge pull request #7156 from bandi13/checkNullInput 
Check NULL input
 2024-01-22 12:07:20 -08:00
Andras Fekete
5c75ca539e Check NULL input 2024-01-22 12:45:42 -05:00
JacobBarthelmeh
0c150d2391
Merge pull request #7150 from dgarske/getenv 
Fix build with `NO_STDIO_FILESYSTEM` and improve checks for `XGETENV`
 2024-01-22 08:33:24 -08:00
JacobBarthelmeh
12dafec3aa
Merge pull request #7149 from dgarske/psa_cryptocb 
Remove the PSA restriction to allow use with crypto callbacks
 2024-01-22 08:24:51 -08:00
JacobBarthelmeh
2617669302
Merge pull request #7152 from douzzer/20240120-multi-test-fixes 
20240120-multi-test-fixes
 2024-01-22 08:19:23 -08:00
Anthony Hu
ccbb726859 Remove dead code in EccKeyParamCopy 
Found with:

./configure --enable-ecccustcurves --enable-asn=original CFLAGS=-DWOLFSSL_ECC_CURVE_STATIC
 2024-01-22 10:27:59 -05:00
Juliusz Sosinowicz
fc7143a8f4 Code review 2024-01-22 16:08:06 +01:00
Sean Parkinson
d2d653cfdc
Merge pull request #7145 from douzzer/20240119-DoTls13CertificateVerify-CreateSigData-error-handling 
20240119-DoTls13CertificateVerify-CreateSigData-error-handling
 2024-01-22 07:36:49 +10:00
Sean Parkinson
b0d64b419d
Merge pull request #7084 from julek-wolfssl/set-cipher-ssl 
Allow SetCipherList to operate on SSL without modifying on SSL_CTX
 2024-01-22 07:31:22 +10:00
Daniel Pouzzner
2edd18c49d src/x509.c: fix nullPointerRedundantCheck in wolfSSL_X509V3_set_ctx(). also adds thorough WOLFSSL_MSG() coverage for failures. 2024-01-20 13:08:21 -06:00
David Garske
d043333bee
Merge pull request #7148 from gojimmypi/PR-fix-Espressif-cmake 
Fix Espressif component cmake for environment variable source
 2024-01-19 13:27:32 -08:00
David Garske
37fbb4fbae
Merge pull request #7146 from kareem-wolfssl/zd17295 
Remove git ignored files from IAR-EWARM projects.
 2024-01-19 13:13:06 -08:00
David Garske
76550465bd Fixes build with NO_STDIO_FILESYSTEM defined. 2024-01-19 12:49:53 -08:00
David Garske
111f584d99 Remove the PSA restriction to allow use with crypto callbacks. 2024-01-19 12:15:40 -08:00
David Garske
a4affd9431 Improve use of XGETENV in wolfSSL_RAND_file_name to check for macro. 2024-01-19 12:13:19 -08:00
gojimmypi
92ab2eaca3 Fix Espressif component cmake for environment variable source 2024-01-19 11:54:10 -08:00
David Garske
6b8280f663
Merge pull request #7144 from bandi13/20240119-codesonar 
20240119 codesonar
 2024-01-19 09:35:02 -08:00
David Garske
a3a7012c81
Merge pull request #7136 from jpbland1/x509-new-ex 
add heap hint support for a few of the x509 functions
 2024-01-19 09:29:47 -08:00
Kareem
f1e833005b Remove git ignored files from IAR-EWARM projects. 2024-01-19 10:24:50 -07:00