David Garske
|
3bec816f97
|
Cleanup min(), TRUE, FALSE, ALIGN16 and ALIGN32. Replace only use of BYTE3_LEN with OPAQUE24_LEN. Replace “ “ with “\t” (saves bytes and is consistent). Fix align issue with “WOLFSSL_EVP_MD_CTX” hash.
|
2016-12-21 14:05:00 -08:00 |
|
David Garske
|
d73338851d
|
Combine generic math functions into new wolfmath.c/.h. Cleanup of the !ALT_ECC_SIZE code so fp_int always has size. This is in prep for async changes for new WC_BIGINT type for hardware crypto.
|
2016-12-21 13:39:33 -08:00 |
|
David Garske
|
6cc1fd293e
|
Fixed issue with stack increase with curve cache disabled. Fixed issue with missing wc_ecc_curve_free() in wc_ecc_verify_hash_ex() causing mem leak. Changed ecc_curve_spec_cache to be allocated per curve. Added new wc_ecc_curve_cache_free() API to release all curve cache memory. Moved ecc_curve_spec struct and ecc_curve_load_mask enum to ecc.c. Add missing wc_ecc_fp_free() to wolfCrypt test. Added ecc.c comment for FP_ECC.
|
2016-12-21 12:31:02 -08:00 |
|
toddouska
|
1a5c5d0011
|
Merge pull request #676 from cconlon/fortify
address fortify high issues
|
2016-12-19 20:03:24 -08:00 |
|
toddouska
|
07e7521f34
|
Merge pull request #674 from JacobBarthelmeh/Testing
Bug fix for cache attack
|
2016-12-19 18:31:04 -08:00 |
|
Chris Conlon
|
46f3b2a367
|
address fortify high issues
|
2016-12-19 15:50:11 -07:00 |
|
Jacob Barthelmeh
|
345df93978
|
Bug fix for cache attack
|
2016-12-19 14:51:42 -07:00 |
|
toddouska
|
6cefca6a49
|
Merge pull request #672 from cconlon/pkcs7fix
PKCS#7: fixes for building with AES disabled, smallstack
|
2016-12-19 13:46:35 -08:00 |
|
toddouska
|
dca57bf2f0
|
Merge pull request #673 from cconlon/fortify
address fortify critical issues
|
2016-12-19 13:42:11 -08:00 |
|
Chris Conlon
|
060ff5e5ef
|
address fortify critical issues
|
2016-12-19 11:53:14 -07:00 |
|
toddouska
|
168203ff9d
|
Merge pull request #649 from dgarske/distro
Linux Distro Patches
|
2016-12-16 16:03:16 -08:00 |
|
toddouska
|
c313d97579
|
Merge pull request #622 from SparkiDev/sha384
SHA384
|
2016-12-16 15:57:40 -08:00 |
|
toddouska
|
50cf1df8da
|
Merge pull request #669 from SparkiDev/scrypt
Implementation of scrypt
|
2016-12-16 15:53:48 -08:00 |
|
Chris Conlon
|
c5fbf96557
|
PKCS#7: fixes for building with AES disabled, smallstack
|
2016-12-16 15:58:18 -07:00 |
|
David Garske
|
57571cb45e
|
Fix merge issues with ECC HAVE_COMP_KEY after rebase.
|
2016-12-16 14:20:00 -08:00 |
|
David Garske
|
f990775451
|
Fix issue with ECC_SHAMIR disabled due to curve->b remnant from async branch.
|
2016-12-16 11:53:33 -08:00 |
|
David Garske
|
cbc3cc6e91
|
Removed the execute bit on the new port files.
|
2016-12-16 11:35:40 -08:00 |
|
David Garske
|
f1ead30987
|
New ECC curve cache feature to improve performance. Disabled by default and enabled using ./configure CFALGS="-DECC_CACHE_CURVE" or #define ECC_CACHE_CURVE. Added internal ECC states. Combined wc_ecc_mulmod_ex versions for timing rest / not. Tested with all math, timing, FP variants and NXP LTC and ECC508A hardware. Pulled in from latest async branch. Added new ECC_MAX_SIG_SIZE enum to help with sizing the sign buffer.
Performance Increases with ECC_CACHE_CURVE enabled:
* Key Gen 4.2%
* Key Agree, 4.0%
* Sign 6.8%
* Verify 5.8%
|
2016-12-16 11:32:59 -08:00 |
|
Kaleb Himes
|
7b948fe04d
|
Merge pull request #667 from JacobBarthelmeh/SGX
add Windows build for SGX
|
2016-12-15 16:23:29 -07:00 |
|
toddouska
|
d0533c6dad
|
Merge pull request #664 from cconlon/pkcs7
PKCS#7/CMS expansion
|
2016-12-15 12:01:00 -08:00 |
|
Jacob Barthelmeh
|
e16f2c0722
|
add Windows build for SGX
|
2016-12-14 10:41:52 -07:00 |
|
Chris Conlon
|
55554b79a9
|
PKCS#7: fix use after free in wc_DecodeKtri
|
2016-12-14 09:15:45 -07:00 |
|
Sean Parkinson
|
20887a8c35
|
Implementation of scrypt
Tests and benchmarking added.
Configure with --enable-scrypt and requires --enable-pwdbased
|
2016-12-14 16:57:41 +10:00 |
|
Chris Conlon
|
e5d1e3ae10
|
PKCS#7: only output test bundles when PKCS7_OUTPUT_TEST_BUNDLES is defined
|
2016-12-13 15:27:46 -07:00 |
|
Sean Parkinson
|
22ecd55964
|
Don't ForceZero in assembly optimized versions.
|
2016-12-14 08:22:05 +10:00 |
|
Sean Parkinson
|
a1b92dc809
|
Tidy up CPU Id check not not reference SHA384
|
2016-12-14 08:22:05 +10:00 |
|
Sean Parkinson
|
24cfba4276
|
Fix ForceZero calls
|
2016-12-14 08:22:05 +10:00 |
|
Sean Parkinson
|
0e4aa233ba
|
Use ForceZero in all implementations of Transform
|
2016-12-14 08:22:05 +10:00 |
|
Sean Parkinson
|
fd21023823
|
Share code between SHA512 and SHA384
|
2016-12-14 08:22:05 +10:00 |
|
Sean Parkinson
|
811be0eb9e
|
Faster zeroize on x86_64
|
2016-12-14 08:22:05 +10:00 |
|
David Garske
|
fd9a94b2bd
|
Fixes to build STM32 with IAR.
|
2016-12-13 10:24:55 -08:00 |
|
Chris Conlon
|
dad0cfda92
|
add EnvelopedData ECC support, refactor pkcs7
|
2016-12-13 09:40:54 -07:00 |
|
dgarske
|
483e461c49
|
Merge pull request #647 from kaleb-himes/RIOT_OS
RIOT OS support, test scripts will be submitted to RIOT-OS repository
|
2016-12-10 19:13:19 -08:00 |
|
kaleb-himes
|
6c7e1785aa
|
EXIT_TEST macro added for cleaner implementation and maintenance
|
2016-12-09 19:39:36 -07:00 |
|
Chris Conlon
|
5006306bb8
|
PKCS#7: add support for optional unprotectedAttributes with EncryptedData
|
2016-12-09 17:02:57 -07:00 |
|
Chris Conlon
|
abf18858a8
|
refactor PKCS#7 functionality into separate functions for Enveloped and EncryptedData
|
2016-12-09 17:02:57 -07:00 |
|
Chris Conlon
|
b5eb8dce2f
|
add PKCS#7/CMS EncryptedContent support
|
2016-12-09 16:57:31 -07:00 |
|
toddouska
|
b0b80bed78
|
Merge pull request #657 from cconlon/x963kdf
add ANSI-X9.63-KDF support [SEC1]
|
2016-12-09 13:29:41 -08:00 |
|
toddouska
|
ad2b0810c6
|
Merge pull request #648 from cconlon/keywrap
add AES key wrap support, RFC 3394
|
2016-12-09 13:23:39 -08:00 |
|
kaleb-himes
|
9e17b2b0aa
|
Merge branch 'master' of https://github.com/wolfssl/wolfssl into RIOT_OS
|
2016-12-09 13:09:25 -07:00 |
|
Chris Conlon
|
33e840b01b
|
add AES key wrap support, RFC 3394
|
2016-12-09 09:30:56 -07:00 |
|
toddouska
|
d2ed611757
|
fix nxp distcheck filename typo
|
2016-12-08 16:52:12 -08:00 |
|
toddouska
|
6cfb8e30b2
|
Merge pull request #591 from dgarske/STM32_CUBEMX
STM32 F2/F4 CubeMX and Std Peripheral Library hardware crypto support
|
2016-12-08 16:36:43 -08:00 |
|
toddouska
|
ab7849be0d
|
Merge pull request #655 from JacobBarthelmeh/ARMv8
ARMv8
|
2016-12-08 16:34:19 -08:00 |
|
Chris Conlon
|
2db7bf0dc0
|
use static digest for X9.63 KDF, add smallstack support
|
2016-12-08 17:28:53 -07:00 |
|
Chris Conlon
|
a5b267087f
|
add ANSI-X9.63-KDF support [SEC1]
|
2016-12-07 20:26:09 -07:00 |
|
toddouska
|
3dec222969
|
Merge pull request #523 from dgarske/atmel_pr
Support for Atmel ATECC508A
|
2016-12-07 15:01:08 -08:00 |
|
kaleb-himes
|
da4a46ddf6
|
Merge branch 'master' of https://github.com/wolfSSL/wolfssl into RIOT_OS
|
2016-12-07 14:16:34 -07:00 |
|
Nickolas Lapp
|
82c12fb7be
|
Fix DES3 on STM32 CUBEMX
|
2016-12-07 10:20:46 -07:00 |
|
David Garske
|
eaca90db28
|
New Atmel support (WOLFSSL_ATMEL) and port for ATECC508A (WOLFSSL_ATECC508A). Adds wolfCrypt support for ECC Hardware acceleration using the ATECC508A. Adds new PK callback for ECC shared secret. Fixed missing "wc_InitRng_ex" when using "CUSTOM_RAND_GENERATE_BLOCK". Added ATECC508A RNG block function for P-RNG bypass ability. Added internal "wolfSSL_GetEccPrivateKey" function for getting reference to private key for ECC shared secret (used in test.h for testing PK_CALLBACK mode). Added README.md for using the Atmel ATECC508A port.
|
2016-12-07 07:57:55 -08:00 |
|