David Garske
c05aea7c5a
Improvements to the wolfCrypt FIPS Visual Studio project link settings to resolve ASLR (Randomized Base Address) issue on some platforms. ZD 16615
2023-10-12 12:05:14 -07:00
David Garske
3cebf35b1b
Cleanups for IDE/WIN10 user_settings.h to allow for FIPS 140-2 3389 cert. Fixed compiler warning with possible use of uninitialized data.
2023-10-12 12:04:51 -07:00
JacobBarthelmeh
0e35e9cbbe
Merge pull request #6806 from lealem47/XTS
...
Add XTS API's required for VeraCrypt
2023-10-11 13:35:45 -06:00
JacobBarthelmeh
653e5b01b1
Merge pull request #6646 from embhorn/gh5636_5637
...
Fix RFC references and add WOLFSSL_ALLOW_CRIT_AIA
2023-10-11 13:30:42 -06:00
Lealem Amedie
e7eec645b0
Sanity checks and correct comment
2023-10-11 12:03:02 -06:00
JacobBarthelmeh
f0bfcc50d7
Merge pull request #6748 from julek-wolfssl/dtls13-frag-ch2
...
DTLS 1.3: allow fragmenting the second ClientHello message
2023-10-11 11:13:57 -06:00
JacobBarthelmeh
5e4baf898c
Merge pull request #6786 from SparkiDev/aes_gcm_align_arm_fix
...
AES GCM ARM32 alignment fix
2023-10-11 10:18:11 -06:00
Chris Conlon
7f562f8259
Merge pull request #6851 from miyazakh/rnd_gen_updates_rx
...
Update random generation on RX TSIP
2023-10-11 09:10:34 -06:00
TakayukiMatsuo
a4f9ae90d0
Merge pull request #6845 from kojo1/jp-doc
...
fix jp doc translations
2023-10-11 07:00:16 +09:00
Hideki Miyazaki
f8604da8e3
change to use a cutom random generation func for PRNG
2023-10-11 06:50:26 +09:00
Lealem Amedie
a27b49882d
Add XTS API's required for VeraCrypt
2023-10-10 15:09:35 -06:00
Juliusz Sosinowicz
ca73a311cf
Don't use /dev/null
2023-10-10 17:31:45 +02:00
Juliusz Sosinowicz
5372cd5026
Update openwrt script
2023-10-10 17:08:58 +02:00
Chris Conlon
210fff5569
Merge pull request #6849 from miyazakh/rnd_gen_updates
...
Update random generation on RZ RSIP
2023-10-10 08:52:22 -06:00
Juliusz Sosinowicz
53f14206d1
Increase curl timeout
2023-10-10 14:36:00 +02:00
Juliusz Sosinowicz
cb912219e4
Run only stable curl tests
2023-10-10 14:19:03 +02:00
Juliusz Sosinowicz
365fae8ac0
Add curl test dep
2023-10-10 11:37:48 +02:00
JacobBarthelmeh
d83f2fa126
Merge pull request #6850 from douzzer/20231008-Wconversion-and-Aes-Eax-FIPS-fixes
...
20231008-Wconversion-and-Aes-Eax-FIPS-fixes
2023-10-09 09:06:17 -06:00
Juliusz Sosinowicz
64ed7d57eb
Add comment
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
275c0a0838
Update window in one place only when stateful
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
8ac72750bc
Fix linting issues
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
948d7ae761
keyLog_callback: flush the descriptor to make sure it is written out
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
c1a49fef99
Fix unreachable code error
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
bec87e525f
PQC TLS 1.3: test setting pqc with wolfSSL_CTX_set_groups
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
3a881079d3
Fix async
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
2c6c52078a
test_dtls13_frag_ch_pq: make sure kyber5 is used
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
37c0d52fa8
Dump manual memio stream with WOLFSSL_DUMP_MEMIO_STREAM
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
c802193119
Simplify the pqc keyshare handling
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
0dbf97c867
fixup! Clear the keyshare instead of storing it
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
230f81712c
fixup! Clear the keyshare instead of storing it
2023-10-09 12:54:11 +02:00
Anthony Hu
f640fdf91f
Adding a post-quantum DTLS 1.3 test.
...
This exercises the fragmenting of ClientHello via large post-quantum key share.
./configure --enable-dtls-mtu --enable-dtls-frag-ch --enable-dtls \
--enable-dtls13 --with-liboqs
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
ada785e115
Address code review
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
8da863184c
Force DTLS 1.3 when accepting fragmented CH
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
df8ee69075
Clear the keyshare instead of storing it
2023-10-09 12:54:11 +02:00
Juliusz Sosinowicz
85a596e54a
DTLS 1.3: allow fragmenting the second ClientHello message
...
- DTLS 1.3 pqc support
- Add --enable-dtls-frag-ch option to enable CH fragmenting
- Send an alert when we get an empty keyshare with a cookie present to not allow for multiple HRR in one connection
- Only update the DTLS window when we have successfully processed or stored a message
- Call ssl->chGoodCb as soon as we have processed a verified full or fragmented ClientHello cookie
2023-10-09 12:54:11 +02:00
Daniel Pouzzner
61371d403a
minor fixes for AES-EAX implementation and test routines.
2023-10-08 18:02:52 -05:00
Sean Parkinson
832e0f3726
Merge pull request #6842 from kaleb-himes/fix-err-introduce-with-cm-move
...
Fix -4 return code when expected BAD_FUNC_ARG(-173)
2023-10-09 07:04:24 +10:00
Hideki Miyazaki
8d5df6fec2
change to use custom random generation func
2023-10-08 16:42:36 +09:00
JacobBarthelmeh
c082216661
Merge pull request #6836 from anhu/iar_ewarm_gitignore
...
Changes to what gets ignored by git for the IAR-EWARM IDE
2023-10-06 20:57:25 -06:00
JacobBarthelmeh
5cb80ea898
Merge pull request #6847 from embhorn/zd16767
...
Fix wolfSSL_set_verify_result to use correct value
2023-10-06 16:52:32 -06:00
Eric Blankenhorn
b329c0d5f4
Fix wolfSSL_set_verify_result to use correct value
2023-10-06 16:34:31 -05:00
Anthony Hu
52a9730f56
Changes to gitignore for IAR-EWARM IDE.
2023-10-06 17:02:22 -04:00
JacobBarthelmeh
fd2d098566
Merge pull request #6821 from bigbrett/aes-eax
...
AES EAX mode
2023-10-06 14:14:28 -06:00
Brett Nicholas
fafb9e81c0
Add support for AES EAX mode, as described in https://eprint.iacr.org/2003/069
2023-10-06 11:10:06 -06:00
JacobBarthelmeh
a7950a3739
Merge pull request #6846 from SparkiDev/aes_xts_arm_hw_crypto
...
Aarch64 and ARM32 AES XTS with crypto instructions
2023-10-06 09:58:38 -06:00
JacobBarthelmeh
a24d66939f
Merge pull request #6843 from embhorn/gh6760_take2
...
Fix RNG with writedup
2023-10-06 09:11:33 -06:00
Sean Parkinson
862a98abe0
Aarch64 and ARM32 AES XTS with crypto instructions
...
Optimised assembly of AES-XTS for Aarch64 and ARM32 using hardware
crypto instructions.
Aarch64 has loop unrolling.
Update aes.c to not have AES-XTS implementation when assembly
compilable.
Update test of AES-XTS to check expected cipher text of partial block
encryption.
2023-10-06 12:39:31 +10:00
Takashi Kojo
5fdc3d8dd5
fix jp doc translations
2023-10-06 09:16:41 +09:00
Takashi Kojo
97b6b00226
Merge branch 'master' of https://github.com/wolfssl/wolfssl
2023-10-06 09:15:10 +09:00
kaleb-himes
e51399ca0f
Do the success checkout out front
2023-10-05 17:05:36 -06:00