Commit Graph

1274 Commits (master)

Author SHA1 Message Date
Ruby Martin 4d247047d2
Merge pull request #303 from cconlon/v1.12
Prep for 1.12 release
2026-10-29 13:12:50 -05:00
Chris Conlon b533e51b42 Update ChangeLog.md for 1.12 release 2026-10-29 09:09:45 -06:00
Chris Conlon 9528033978 JNI/JCE: bump version to 1.12 2026-10-28 16:54:28 -06:00
Chris Conlon 18f40ccac6 JCE: Mark assumption-skipped tests as skipped in test timing output 2026-10-28 16:54:27 -06:00
Ruby Martin 1c45da40fe
Merge pull request #298 from cconlon/fenrirOct14
Fixes for DH agree buffer, digest/CMAC native context lifecycle, RSA-PSS default salt, PBKDF2 JNI errors
2026-10-26 15:56:03 -05:00
Ruby Martin b7a013b4d8
Merge pull request #301 from cconlon/fenrirOct16_2
Javadoc and comment corrections for WKS format, SlhDsa, LMS verify, AES-CBC and Fips.DhAgree()
2026-10-26 11:41:49 -05:00
Ruby Martin f8f320184d
Merge pull request #302 from cconlon/fenrirOct16_3
Fixes for ECC import key zeroization, ant test native library paths
2026-10-26 11:37:24 -05:00
Chris Conlon c00dc5d043 F-15082: document that Fips.DhAgree() agree must hold the full DH shared secret 2026-10-23 17:52:21 -06:00
Chris Conlon 4cd464faac F-15083: document the block-aligned AES-CBC update() length requirement in Aes Javadoc 2026-10-23 17:52:21 -06:00
Chris Conlon 0b27a2f342 F-15070: correct LMS verify comment to say which returns map to false and which throw 2026-10-23 17:49:03 -06:00
Chris Conlon 052e15e9be F-15069: correct SlhDsa class Javadoc to describe deferred and DER-detected parameter sets 2026-10-23 17:49:03 -06:00
Chris Conlon 90f5d26a79 F-15068: document the length-prefixed encodedEntry wrapper in the WolfSSLKeyStore WKS format Javadoc 2026-10-23 17:49:03 -06:00
Chris Conlon 26132ef22f F-15033: stop PBKDF2 JNI wrapper on GetByteArrayElements failure and keep the pending exception 2026-10-23 17:48:14 -06:00
Chris Conlon 517e77fb1c F-15032: verify default-salt RSA-PSS through wc_RsaPSS_VerifyCheck() so the modulus bits set the salt length 2026-10-23 17:48:14 -06:00
Chris Conlon b502e60b83 F-15031: reset AesCmac with the stored key after doFinal() frees the native context 2026-10-23 17:48:14 -06:00
Chris Conlon 552d44e5d6 F-15030: free native digest contexts on re-init and release via MessageDigest.native_free() 2026-10-23 17:48:14 -06:00
Chris Conlon c4f15cd8e6 F-15081: size DH shared secret buffer to fit p in wc_DhAgree JNI wrapper 2026-10-23 17:40:33 -06:00
Ruby Martin bc8f091593
Merge pull request #299 from cconlon/fenrirOct15
Fixes for DH parameter and key pair export, padPKCS7() block size checks, PKCS12 mapping comment
2026-10-23 17:01:00 -05:00
Ruby Martin 1967cc8c53
Merge pull request #300 from cconlon/fenrirOct16
Javadoc corrections for AesCcm/AesGcm allocation and FeatureDetect ML-DSA, LMS and XMSS probes
2026-10-23 16:13:13 -05:00
Ruby Martin acfa6061bd
Merge pull request #297 from cconlon/rsaVerifySigLength
Reject wrong-length RSA signatures in Signature.verify()
2026-10-21 18:27:00 -05:00
Ruby Martin 237395526c
Merge pull request #296 from cconlon/sigSignWrapNativeErrors
Throw SignatureException on native sign errors in WolfCryptSignature
2026-10-21 18:17:36 -05:00
Ruby Martin 2bda11366b
Merge pull request #295 from cconlon/rsaKeyGenSpecChecks
JCE: validate RSA keygen size and public exponent at KeyPairGenerator.initialize()
2026-10-19 12:37:14 -05:00
Chris Conlon b1091438ed F-15085: drop literal $JAVA_HOME and unset Windows DLL dirs from the ant test native library paths 2026-10-16 12:32:24 -06:00
Chris Conlon d5598b7e7e F-15084: zeroize the JNI private key copy on the GetStringUTFChars() failure path in Ecc import 2026-10-16 12:28:13 -06:00
Chris Conlon 92fa11de54 F-15067: document the wolfSSL 5.9.2 requirement in FeatureDetect.XmssEnabled() Javadoc 2026-10-16 11:17:23 -06:00
Chris Conlon 658f990605 F-15066: document the wolfSSL 5.9.2 requirement in FeatureDetect.LmsEnabled() Javadoc 2026-10-16 11:16:07 -06:00
Chris Conlon 022a1c6a59 F-15065: name WOLFSSL_HAVE_MLDSA alongside HAVE_DILITHIUM in FeatureDetect.MlDsaEnabled() Javadoc 2026-10-16 11:14:25 -06:00
Chris Conlon 10234fd832 F-15064: correct AesGcm mallocNativeStruct() Javadoc to say allocation happens on first use 2026-10-16 11:10:55 -06:00
Chris Conlon ec672f13ff F-15063: correct AesCcm mallocNativeStruct() Javadoc to say allocation happens on first use 2026-10-16 11:07:39 -06:00
Chris Conlon 59721dd20c F-15062: reword PKCS12-to-WKS mapping comment in WolfCryptProvider to refer to PKCS12 instead of JKS 2026-10-16 10:49:17 -06:00
Chris Conlon 2aafafd215 F-15061: correct padPKCS7() Javadoc for zero-length input and reject block sizes outside 1 to 255 2026-10-16 10:49:17 -06:00
Chris Conlon aaaef0423c F-15035: size DH key pair export buffers from p since wc_DhExportKeyPair() has no size query 2026-10-16 10:15:46 -06:00
Chris Conlon e7751897a6 F-15036: pass qSz and a q buffer to wc_DhExportParamsRaw() in Dh.exportParams() so keys without q export p and g 2026-10-16 10:15:43 -06:00
Chris Conlon e39642407e F-15034: pass a q buffer to wc_DhExportParamsRaw() in DH param generation so generateDhParams() returns p and g 2026-10-15 16:52:54 -06:00
Ruby Martin 056ef7ff80
Merge pull request #293 from cconlon/gcmShortIvFips
Reject AES-GCM/GMAC IVs under 96 bits on FIPS modules that mark them not approved
2026-10-14 12:51:08 -05:00
Chris Conlon 81c25d523b JCE: reject RSA signatures not equal to modulus length in WolfCryptSignature.engineVerify() 2026-10-13 16:49:44 -06:00
Chris Conlon 7ed69f7f66 JCE: throw SignatureException from WolfCryptSignature.engineSign() on native sign errors 2026-10-13 16:32:14 -06:00
Ruby Martin 64d4d29015
Merge pull request #294 from cconlon/kwDefaultIvJava17
JCE: match SunJCE AES Key Wrap default IV and update() behavior
2026-10-13 10:40:24 -05:00
Chris Conlon 8d1f6faadc JCE: reject RSA keygen sizes below RSA_MIN_SIZE and exponents below native minimum at initialize(), add Rsa.RSA_MIN_EXPONENT 2026-10-09 09:44:49 -06:00
Chris Conlon a3aa98d71f JCE: match SunJCE AES Key Wrap default IV and null update() on Java 17+, add WolfCryptUtil.getJavaVersion() 2026-10-08 17:04:45 -06:00
Chris Conlon 17ac9f28bf JNI/JCE: reject AES-GCM/GMAC IVs under 96 bits at init() on FIPS modules that mark them not approved, map WC_FIPS_NOT_APPROVED 2026-10-07 16:27:48 -06:00
Ruby Martin 49f73bfc5f
Merge pull request #292 from cconlon/rsaEncryptMaxLen
Throw IllegalBlockSizeException for RSA encrypt input over max length, add WolfCrypt.getDigestSize()
2026-10-07 10:49:11 -05:00
Ruby Martin 9eed13fcd9
Merge pull request #291 from cconlon/cipherParamDefaults
AES-GCM null-param decrypt init and pre-init getParameters() defaults
2026-10-06 18:17:01 -05:00
Ruby Martin f905aed2b5
Merge pull request #279 from cconlon/ed25519_448
Add Ed25519/Ed448 support (Signature, KeyPairGenerator, KeyFactory)
2026-10-06 18:15:18 -05:00
Chris Conlon 001dc8be70 JNI/JCE: add WolfCrypt.getDigestSize(), throw IllegalBlockSizeException for RSA PKCS#1 and OAEP encrypt input over the max length 2026-10-06 11:47:48 -06:00
Chris Conlon eb73f08971 JCE: allow AES-GCM decrypt init with null params and return default IVs from getParameters() before init 2026-10-06 09:19:23 -06:00
Chris Conlon 02de5def5c JNI/JCE: add Ed25519/Ed448 support (Signature, KeyPairGenerator, KeyFactory) 2026-10-02 12:13:27 -06:00
Ruby Martin 891e130a6f
Merge pull request #272 from cconlon/aescfb
Add AES-CFB (CFB1/CFB8/CFB128) support to JNI/JCE
2026-10-02 11:44:34 -05:00
Chris Conlon 383c8ecb30 JNI/JCE: add AES-CFB (CFB1/CFB8/CFB128) support 2026-10-01 16:53:55 -06:00
Ruby Martin a706da5f1d
Merge pull request #281 from cconlon/aesGcmIVDrbg
Add internal AES-GCM IV generation for FIPS IG C.H
2026-10-01 12:25:16 -05:00