Ruby Martin
|
a1f4cfac71
|
Merge pull request #264 from cconlon/fenrirAug20_2
wolfCrypt JNI/JCE hardening fixes
|
2026-09-17 13:53:34 -05:00 |
|
Ruby Martin
|
887e459e16
|
Merge pull request #257 from cconlon/fenrirAug13_2
Fixes for buffer bounds, error handling, and key material cleanup
|
2026-09-17 12:18:49 -05:00 |
|
Ruby Martin
|
9b6f445f61
|
Merge pull request #259 from cconlon/fenrirAug17
Buffer sizing, native resource cleanup, and lifecycle fixes
|
2026-09-17 11:05:40 -05:00 |
Chris Conlon
|
1909401fd9
|
F-3763: fail closed when no SHA-256 tool is available in CryptoBenchmark.sh
|
2026-09-11 17:09:39 -06:00 |
|
Chris Conlon
|
399e3f4b6f
|
F-6154: zeroize native ML-DSA seed and private key copies before JNI release
|
2026-09-11 17:09:39 -06:00 |
|
Chris Conlon
|
3b1f9031fa
|
F-6153: zeroize full RSA decrypt output buffer before free
|
2026-09-11 17:09:39 -06:00 |
|
Chris Conlon
|
4382551949
|
F-5992: throw AEADBadTagException on AES-CCM tag failure
|
2026-09-11 17:09:39 -06:00 |
|
Chris Conlon
|
d3d9bdf218
|
F-5893: zeroize previous HMAC key on re-key in setKey
|
2026-09-11 17:09:39 -06:00 |
|
Chris Conlon
|
fae783ff7d
|
F-5892: enforce minimum DH prime size on KeyFactory import
|
2026-09-11 17:09:39 -06:00 |
|
Chris Conlon
|
67bad31ced
|
F-5396: validate 3DES key and IV length in native setKey wrapper
|
2026-09-11 17:09:39 -06:00 |
|
Chris Conlon
|
69d6555bda
|
F-5395: validate AES IV length in native setKey wrappers
|
2026-09-11 17:08:56 -06:00 |
|
Chris Conlon
|
36dd5f1664
|
F-5226: zeroize native ChaCha key copy before JNI release
|
2026-09-11 17:07:35 -06:00 |
|
Chris Conlon
|
39974a4f62
|
F-5225: validate ChaCha IV length before native SetIV read
|
2026-09-11 17:07:35 -06:00 |
|
Chris Conlon
|
cb05f101c0
|
F-9989 / F-9990: correct copied import comments in Ed25519 wrappers
|
2026-09-11 17:06:23 -06:00 |
|
Chris Conlon
|
1e0263ee43
|
F-9986 / F-9987 / F-9988: correct copied import comments in Curve25519 wrappers
|
2026-09-11 17:06:23 -06:00 |
|
Chris Conlon
|
068f6b4938
|
F-9996: clean up partial initialization on JNI_OnLoad failure
|
2026-09-11 17:06:23 -06:00 |
|
Chris Conlon
|
f69f448e49
|
F-9995: detach natively attached threads in FIPS error callback
|
2026-09-11 17:06:23 -06:00 |
|
Chris Conlon
|
786d92ca82
|
F-9994: log requested size in FIPS GCM decrypt wrappers
|
2026-09-11 17:06:23 -06:00 |
|
Chris Conlon
|
8de26b2fe7
|
F-9993: free active CMAC context in native free and setKey reinit
|
2026-09-11 17:06:23 -06:00 |
|
Chris Conlon
|
3970e39c1d
|
F-9992: validate caller buffer sizes in RsaExportCrtKey wrapper
|
2026-09-11 17:06:23 -06:00 |
|
Chris Conlon
|
8b6d7ccb3c
|
F-9991: size BlockCipher update output from length instead of input.length
|
2026-09-11 17:06:23 -06:00 |
|
Chris Conlon
|
65adee1049
|
F-3561: zeroize AES and 3DES key material in releaseNativeStruct
|
2026-09-11 17:05:02 -06:00 |
|
Chris Conlon
|
3590c2af6d
|
F-8206: check GetStringUTFChars result in ECC curve name paths
|
2026-09-11 17:05:02 -06:00 |
|
Chris Conlon
|
d52838c2d4
|
F-6903: bound direct buffer write position in SHA final wrappers
|
2026-09-11 17:05:02 -06:00 |
|
Chris Conlon
|
8dedff93d4
|
F-6902: zeroize secret SLH-DSA input copies before JNI release
|
2026-09-11 17:05:02 -06:00 |
|
Chris Conlon
|
5a75925fef
|
F-6437: zeroize secret ML-KEM input copies before JNI release
|
2026-09-11 17:05:02 -06:00 |
|
Chris Conlon
|
40a1039110
|
F-8205: bound direct buffer write position in Md5 final
|
2026-09-11 17:05:02 -06:00 |
|
Chris Conlon
|
4ed855d629
|
F-8199: fix curve size sign handling in ECC import_public_raw
|
2026-09-11 17:05:02 -06:00 |
|
Chris Conlon
|
e7235c3156
|
F-8198: check size query result before PKCS8 buffer allocation
|
2026-09-11 17:05:02 -06:00 |
|
Chris Conlon
|
672a73a831
|
F-8197: normalize X509_STORE_add_cert failure codes to negative
|
2026-09-11 17:05:02 -06:00 |
|
Chris Conlon
|
166993e265
|
F-6904: return false for malformed LMS signatures in verify wrapper
|
2026-09-11 17:05:02 -06:00 |
|
Ruby Martin
|
b8392ced50
|
Merge pull request #265 from cconlon/fenrirAug24
Fenrir fixes across AES, ECC, RSA, SLH-DSA, DH, and PKIX revocation
|
2026-09-11 17:11:37 -05:00 |
|
Chris Conlon
|
416a321fc2
|
Skip WKS-as-PKCS12 file test on Android
|
2026-09-10 16:44:19 -06:00 |
|
Chris Conlon
|
05b0d9c62f
|
JNI: Report no long PSS salt support on FIPS v7 and later
|
2026-09-10 15:01:50 -06:00 |
|
Chris Conlon
|
5d4a9ce24d
|
JNI: Use SHA-384 as the 192F mismatched pre-hash in SlhDsaTest
|
2026-09-10 15:01:50 -06:00 |
|
Chris Conlon
|
56d2f5f1f6
|
F-11213: evaluate all keySize disabled-algorithm operators
|
2026-09-10 15:01:50 -06:00 |
|
Chris Conlon
|
2808beda3b
|
F-11206: return early on failed JNI array acquisition in CertManager buffer wrappers
|
2026-09-10 15:01:50 -06:00 |
|
Chris Conlon
|
ee2c2eeed6
|
F-11204: encode RSA DER key before the PKCS#8 size query
|
2026-09-10 15:01:50 -06:00 |
|
Chris Conlon
|
2d4e0a8c97
|
F-11203: guard SLH-DSA private buffer zeroization with ForceZero fallback macro
|
2026-09-10 15:01:50 -06:00 |
|
Chris Conlon
|
96d9a23324
|
F-11202: report ECC make_key_ex argument errors distinctly from curve errors
|
2026-09-10 15:01:50 -06:00 |
|
Chris Conlon
|
a3da1774cc
|
F-11212: fail closed when PREFER_CRLS with NO_FALLBACK has no CRL source
|
2026-09-10 15:01:50 -06:00 |
|
Chris Conlon
|
ec8d69466c
|
F-11205: free embedded AES in AesGmac native release
|
2026-09-10 15:01:50 -06:00 |
|
Chris Conlon
|
33ae375f02
|
F-11215: stop logging DH shared secret and private key in debug output
|
2026-09-10 15:01:50 -06:00 |
|
Chris Conlon
|
a0e320685d
|
F-11201: always use AES encryption schedule for AES-OFB key setup
|
2026-09-10 15:01:50 -06:00 |
|
Ruby Martin
|
44be422765
|
Merge pull request #278 from cconlon/certUpdate2026
Update expired example certs, keys, and keystores
|
2026-09-10 11:52:12 -05:00 |
|
Chris Conlon
|
e9fa6c4b29
|
Testing: skip the whole certs tree in the GitHub workflow line length check
|
2026-09-09 17:42:51 -06:00 |
|
Chris Conlon
|
086c8ef152
|
Update expired example certs, keys, and keystores
|
2026-09-09 13:22:32 -06:00 |
|
Ruby Martin
|
67072b3a46
|
Merge pull request #263 from cconlon/fenrirAug20
Zeroize native private key copies before JNI byte array release
|
2026-08-25 13:18:22 -05:00 |
|
Ruby Martin
|
986e391ec9
|
Merge pull request #262 from cconlon/fenrirAug19
Fixes for key material zeroization across JCE and JNI, PBKDF input validation
|
2026-08-21 17:13:22 -05:00 |
|
Ruby Martin
|
61968eb2ce
|
Merge pull request #261 from cconlon/fenrirAug18
Fixes for JNI error paths, key material zeroization, and JCE hardening
|
2026-08-21 15:29:11 -05:00 |