Sean Parkinson
b845c8bfc8
SP int: support mingw64 again
...
Check for _MSC_VER to determine that we are compiling for MSVC.
2022-11-07 16:34:26 +10:00
Hayden Roche
5d70f3efce
Merge pull request #5730 from philljj/zd15040
2022-11-04 13:32:48 -07:00
Hayden Roche
4a917219f7
Merge pull request #5608 from SparkiDev/pk_c_rework_2
2022-11-04 13:32:36 -07:00
Hayden Roche
1ce5951f0d
Merge pull request #5722 from dgarske/stm32
2022-11-04 13:32:11 -07:00
Hayden Roche
7cc2336af7
Merge pull request #5737 from SparkiDev/ecc_cofactor
2022-11-04 13:31:24 -07:00
Hayden Roche
e3621d5bb1
Merge pull request #5771 from dgarske/revert-5622-sniffer_sequence
2022-11-04 13:25:48 -07:00
Chris Conlon
dce1fc4766
Merge pull request #5703 from miyazakh/renesas_rx72n_simple
2022-11-04 11:43:08 -06:00
John Safranek
5f4cf53d87
Merge pull request #5772 from JacobBarthelmeh/OCSP
2022-11-04 09:46:42 -07:00
JacobBarthelmeh
8225d3642b
save next status with OCSP response verify
2022-11-03 22:39:47 -07:00
Hayden Roche
cbbe6fec94
Merge pull request #5763 from douzzer/20221031-benchmark-determinism
2022-11-03 14:52:59 -07:00
David Garske
f610df59a9
Whitespace cleanups.
2022-11-03 14:38:43 -07:00
Hayden Roche
fbc4af8701
Merge pull request #5739 from anhu/no_WOLFSSL_DYN_CERT
2022-11-03 14:24:34 -07:00
Hayden Roche
7414dd7ea5
Merge pull request #5768 from kareem-wolfssl/maxCertpolSz
2022-11-03 14:23:17 -07:00
Kareem
48bddc6d07
Update max Cert Policy size based on RFC 5280.
2022-11-03 11:49:15 -07:00
Daniel Pouzzner
b140abd1fd
wolfcrypt/benchmark/benchmark.c: add check_for_excessive_stime() and remove double declaration of base_rusage and cur_rusage.
2022-11-03 13:48:51 -05:00
David Garske
1adc06d181
Fix for Intel QAT handling of sign R when cofactor is not 1. ZD 15017
2022-11-03 10:00:07 -07:00
Sean Parkinson
4766a978cf
ECC cofactor: fix check scalar bits
...
For shared secrets, when a curve has a cofactor, the private key (in
range of order) is multiplied by the cofactor before use.
If there is a cofactor involved, check bit size of scalar against
modulus instead of order.
2022-11-03 10:00:07 -07:00
David Garske
1ec2b14922
Revert "Fix for sniffer to decode out of order packets"
2022-11-03 09:50:15 -07:00
David Garske
a7635da9e6
Merge pull request #5765 from JacobBarthelmeh/release
...
update for version 5.5.3
2022-11-02 15:46:10 -07:00
JacobBarthelmeh
9b895b74bf
update for version 5.5.3
2022-11-02 13:58:37 -07:00
Daniel Pouzzner
4ab41caf40
make static flags sym_header_printed, asym_header_printed, and pqasym_header_printed, local to the routines that use them (fixes an -Wunused-variable in -UBENCH_ASYM builds).
2022-11-01 01:12:17 -05:00
Daniel Pouzzner
89182b829f
wolfcrypt/benchmark/benchmark.c: add GENERATE_MACHINE_PARSEABLE_REPORT and LINUX_RUSAGE_UTIME codepaths;
...
fflush stdout after each scenario for line-buffered pipelining;
refactor csv_header_count into sym_header_printed, asym_header_printed, and pqasym_header_printed;
move SAKKE tests to precede PQ tests;
rename bench_stats_sym_check() to bench_stats_check();
add bench_stats_asym_finish_ex() accepting a "desc_extra" arg, and use it to disambiguate otherwise-homonymous SAKKE runs;
fix bench_aesecb_internal() to not check time (syscall) for every 3 blocks processed.
2022-11-01 00:15:37 -05:00
JacobBarthelmeh
502a395723
Merge pull request #5757 from SparkiDev/enc_err_forcezero_fix
...
ForceZero fix: encryption fail and not EtM
2022-10-31 11:43:48 -06:00
Sean Parkinson
4efba8f437
ForceZero fix: encryption fail and not EtM
...
Zeroizing of plaintext on encryption failure will use wrong size when
not using Encrypt-then-MAC. Size may go negative and cast to unsigned.
2022-10-31 09:14:16 +10:00
Anthony Hu
0158c82487
Keep WOLFSSL_DYN_CERT
2022-10-28 13:37:55 -04:00
David Garske
0ea0b887a5
Merge pull request #5749 from JacobBarthelmeh/release
...
update version to 5.5.2
2022-10-28 09:22:50 -07:00
JacobBarthelmeh
8fd5a4061c
Merge pull request #5748 from SparkiDev/arm32_asm_lr_fixup
...
ARM32 ASM: fix asm saving and restoring of registers
2022-10-28 07:37:02 -06:00
JacobBarthelmeh
eb52083afd
update version to 5.5.2
2022-10-28 06:25:33 -07:00
jordan
c4e758dda5
Fix X509 subject and issuer name_hash mismatch
...
Fix logging message and g++ invalid conversion error.
2022-10-27 19:31:30 -05:00
Sean Parkinson
7bd8ced7af
ARM32 ASM: fix asm saving and restoring of registers
...
Fix push and pop generated at beginning and end of function.
2022-10-28 09:51:32 +10:00
jordan
822f11d1a1
Fix X509 subject and issuer name_hash mismatch
...
Refactor duplicate code a bit more.
2022-10-27 15:15:55 -05:00
JacobBarthelmeh
319901a85c
Merge pull request #5743 from SparkiDev/tls_perf_fix_forcezero
...
TLS performance fix: ForceZero minimization
2022-10-27 13:43:17 -06:00
JacobBarthelmeh
7366a9edbd
Merge pull request #5744 from SparkiDev/regression_fixes_4
...
Regresssion testing fixes
2022-10-27 11:49:52 -06:00
Hideki Miyazaki
e9d37b9bd1
addressed code review
2022-10-27 16:52:04 +09:00
Sean Parkinson
fd7544ca19
Regresssion testing fixes
...
Ed25519 and Ed448 need to enable certs.
If no system CA certs can't be parsed,
wolfSSL_CTX_load_system_CA_certs() will fail. Don't try test if RSA and
ECC are not enabled.
Fix benchmark.c so that e is defined when WOLFSSL_BENCHMARK_ALL defined.
MAX_LENGTH_SZ is 4 and supports lengths up to 2^24 - one byte for length
and 3 bytes of length.
(new gcc compiler fix)
2022-10-27 17:47:48 +10:00
Sean Parkinson
b1e37377a1
TLS performance fix: ForceZero minimization
...
Don't ForceZero the output buffer before free.
ForceZero it when encryption fails.
ShrinkInputBuffer needs to zeroize input buffer even if not currently
encrypting as it may be using the buffer on wolfSSL object reuse.
Fix SP to zeroize the whole buffer.
Fix DH to check cBuf when WOLFSSL_CHECK_MEM_ZERO defined.
2022-10-27 17:00:42 +10:00
JacobBarthelmeh
1c09a67f6a
Merge pull request #5735 from SparkiDev/aes_gcm_c_dec_auth
...
AES GCM decrypt C: don't decrypt when auth tag invalid
2022-10-26 22:41:25 -06:00
Sean Parkinson
7a4657c881
Fixes from review 3
2022-10-27 11:25:27 +10:00
Hayden Roche
294a26ba0c
Merge pull request #5708 from JacobBarthelmeh/OCSP
2022-10-26 15:43:15 -07:00
David Garske
e26d4f84fc
Improvements for AES GCM on STM32. Cleanups for STM32 example.
2022-10-26 14:10:19 -07:00
JacobBarthelmeh
8f2d35bb84
Merge pull request #5741 from douzzer/20221026-fixes-QUIC-and-ALPN
...
20221026-fixes-QUIC-and-ALPN
2022-10-26 15:03:28 -06:00
Hayden Roche
b477804462
Merge pull request #5725 from julek-wolfssl/rpm-pkg
2022-10-26 13:33:16 -07:00
jordan
b31567e752
Fix X509 subject and issuer name_hash mismatch
...
Refactor duplicate code, and better error messages.
2022-10-26 15:27:15 -05:00
JacobBarthelmeh
d08c204466
remove extra memset
2022-10-26 12:54:17 -07:00
Daniel Pouzzner
1608037c6b
Merge pull request #5740 from JacobBarthelmeh/release
...
minor warning fixes
2022-10-26 14:09:01 -05:00
Eric Blankenhorn
4d36d494b2
Merge pull request #5738 from SKlimaRA/SKlimaRA/fix-backslash-random-c
...
removed backslash
2022-10-26 12:42:49 -05:00
JacobBarthelmeh
33617588fc
fix setting dynamic flag with ocsp and asn template
2022-10-26 10:31:50 -07:00
Jacob Barthelmeh
8d6ee0b26a
minor warning fixes
2022-10-26 10:48:51 -06:00
David Garske
0c79ca1de1
Fix for STM32 PKA with coefSign for non 256-bit curves. Don't check point for STM PKA. ZD14928
2022-10-26 09:44:58 -07:00
Daniel Pouzzner
dfa603e502
fixes for warnings and defects around QUIC and ALPN -- fixes for clang-diagnostic-gnu-zero-variadic-macro-arguments, clang-analyzer-deadcode.DeadStores, clang-analyzer-core.UndefinedBinaryOperatorResult, clang-analyzer-security.insecureAPI.strcpy, and an overrun prevention assert in wolfSSL_ALPN_GetPeerProtocol().
2022-10-26 11:32:06 -05:00
