WolfSSL
/
wolfcrypt-jni
mirror of https://github.com/wolfSSL/wolfcrypt-jni.git
1
0
Fork 0
Code Issues Releases Wiki Activity
1,123 Commits
2 Branches
12 Tags
17 MiB
Commit Graph

369 Commits (master)

Author SHA1 Message Date
Ruby Martin a1f4cfac71
Merge pull request #264 from cconlon/fenrirAug20_2 
wolfCrypt JNI/JCE hardening fixes
 2026-09-17 13:53:34 -05:00
Ruby Martin 887e459e16
Merge pull request #257 from cconlon/fenrirAug13_2 
Fixes for buffer bounds, error handling, and key material cleanup
 2026-09-17 12:18:49 -05:00
Chris Conlon 399e3f4b6f F-6154: zeroize native ML-DSA seed and private key copies before JNI release 2026-09-11 17:09:39 -06:00
Chris Conlon 3b1f9031fa F-6153: zeroize full RSA decrypt output buffer before free 2026-09-11 17:09:39 -06:00
Chris Conlon 67bad31ced F-5396: validate 3DES key and IV length in native setKey wrapper 2026-09-11 17:09:39 -06:00
Chris Conlon 69d6555bda F-5395: validate AES IV length in native setKey wrappers 2026-09-11 17:08:56 -06:00
Chris Conlon 36dd5f1664 F-5226: zeroize native ChaCha key copy before JNI release 2026-09-11 17:07:35 -06:00
Chris Conlon 39974a4f62 F-5225: validate ChaCha IV length before native SetIV read 2026-09-11 17:07:35 -06:00
Chris Conlon cb05f101c0 F-9989 / F-9990: correct copied import comments in Ed25519 wrappers 2026-09-11 17:06:23 -06:00
Chris Conlon 1e0263ee43 F-9986 / F-9987 / F-9988: correct copied import comments in Curve25519 wrappers 2026-09-11 17:06:23 -06:00
Chris Conlon 068f6b4938 F-9996: clean up partial initialization on JNI_OnLoad failure 2026-09-11 17:06:23 -06:00
Chris Conlon f69f448e49 F-9995: detach natively attached threads in FIPS error callback 2026-09-11 17:06:23 -06:00
Chris Conlon 786d92ca82 F-9994: log requested size in FIPS GCM decrypt wrappers 2026-09-11 17:06:23 -06:00
Chris Conlon 8de26b2fe7 F-9993: free active CMAC context in native free and setKey reinit 2026-09-11 17:06:23 -06:00
Chris Conlon 3970e39c1d F-9992: validate caller buffer sizes in RsaExportCrtKey wrapper 2026-09-11 17:06:23 -06:00
Chris Conlon 65adee1049 F-3561: zeroize AES and 3DES key material in releaseNativeStruct 2026-09-11 17:05:02 -06:00
Chris Conlon 3590c2af6d F-8206: check GetStringUTFChars result in ECC curve name paths 2026-09-11 17:05:02 -06:00
Chris Conlon d52838c2d4 F-6903: bound direct buffer write position in SHA final wrappers 2026-09-11 17:05:02 -06:00
Chris Conlon 8dedff93d4 F-6902: zeroize secret SLH-DSA input copies before JNI release 2026-09-11 17:05:02 -06:00
Chris Conlon 5a75925fef F-6437: zeroize secret ML-KEM input copies before JNI release 2026-09-11 17:05:02 -06:00
Chris Conlon 40a1039110 F-8205: bound direct buffer write position in Md5 final 2026-09-11 17:05:02 -06:00
Chris Conlon 4ed855d629 F-8199: fix curve size sign handling in ECC import_public_raw 2026-09-11 17:05:02 -06:00
Chris Conlon e7235c3156 F-8198: check size query result before PKCS8 buffer allocation 2026-09-11 17:05:02 -06:00
Chris Conlon 672a73a831 F-8197: normalize X509_STORE_add_cert failure codes to negative 2026-09-11 17:05:02 -06:00
Chris Conlon 166993e265 F-6904: return false for malformed LMS signatures in verify wrapper 2026-09-11 17:05:02 -06:00
Chris Conlon 05b0d9c62f JNI: Report no long PSS salt support on FIPS v7 and later 2026-09-10 15:01:50 -06:00
Chris Conlon 2808beda3b F-11206: return early on failed JNI array acquisition in CertManager buffer wrappers 2026-09-10 15:01:50 -06:00
Chris Conlon ee2c2eeed6 F-11204: encode RSA DER key before the PKCS#8 size query 2026-09-10 15:01:50 -06:00
Chris Conlon 2d4e0a8c97 F-11203: guard SLH-DSA private buffer zeroization with ForceZero fallback macro 2026-09-10 15:01:50 -06:00
Chris Conlon 96d9a23324 F-11202: report ECC make_key_ex argument errors distinctly from curve errors 2026-09-10 15:01:50 -06:00
Chris Conlon ec8d69466c F-11205: free embedded AES in AesGmac native release 2026-09-10 15:01:50 -06:00
Chris Conlon 33ae375f02 F-11215: stop logging DH shared secret and private key in debug output 2026-09-10 15:01:50 -06:00
Chris Conlon a0e320685d F-11201: always use AES encryption schedule for AES-OFB key setup 2026-09-10 15:01:50 -06:00
Ruby Martin 67072b3a46
Merge pull request #263 from cconlon/fenrirAug20 
Zeroize native private key copies before JNI byte array release
 2026-08-25 13:18:22 -05:00
Ruby Martin 986e391ec9
Merge pull request #262 from cconlon/fenrirAug19 
Fixes for key material zeroization across JCE and JNI, PBKDF input validation
 2026-08-21 17:13:22 -05:00
Ruby Martin 61968eb2ce
Merge pull request #261 from cconlon/fenrirAug18 
Fixes for JNI error paths, key material zeroization, and JCE hardening
 2026-08-21 15:29:11 -05:00
Chris Conlon bd21987551 F-5053 / F-5054 / F-5055: zeroize native CMAC key copies before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon e8c71b3934 F-5050 / F-5051 / F-5052: zeroize native GMAC key copies before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon fbd259aac1 F-5049: zeroize native AES-CCM key copy before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon 7f333310cb F-5048: zeroize native AES-GCM key copy before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon 0fae3bc840 F-5047: zeroize native 3DES key copy before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon e166a6a633 F-5042 / F-5043 / F-5044 / F-5045 / F-5046: zeroize native DH and RSA private key copies before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon 5506469ed6 F-5041: zeroize native Ed25519 private key copies before JNI release 2026-08-20 15:43:51 -06:00
Chris Conlon f3c6ba590a F-5040: zeroize native Curve25519 private key copies before JNI release 2026-08-20 15:43:51 -06:00
Chris Conlon 3a1199be7a F-5039 / F-5056: zeroize native ECC private key copies before JNI release 2026-08-20 15:43:51 -06:00
Chris Conlon 82503a3060 F-5037: reject negative key length in PKCS12 PBKDF JNI wrapper 2026-08-19 16:42:28 -06:00
Chris Conlon 97e1229fa0 F-4370: zeroize native PKCS8 key copy in X509CheckPrivateKey 2026-08-19 15:05:22 -06:00
Chris Conlon 4f7b64fc14 F-3562: zeroize AES-CTS key schedule in releaseNativeStruct 2026-08-19 11:33:22 -06:00
Chris Conlon ade193cf93 F-6155: remove redundant wc_ecc_init from ECC raw import wrappers 2026-08-19 11:33:22 -06:00
Chris Conlon b95503fbaf F-5989: report curves from index 0 in wc_ecc_get_all_curve_names 2026-08-19 11:33:22 -06:00