Commit Graph

1123 Commits (master)

Author SHA1 Message Date
Chris Conlon bd21987551 F-5053 / F-5054 / F-5055: zeroize native CMAC key copies before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon e8c71b3934 F-5050 / F-5051 / F-5052: zeroize native GMAC key copies before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon fbd259aac1 F-5049: zeroize native AES-CCM key copy before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon 7f333310cb F-5048: zeroize native AES-GCM key copy before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon 0fae3bc840 F-5047: zeroize native 3DES key copy before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon e166a6a633 F-5042 / F-5043 / F-5044 / F-5045 / F-5046: zeroize native DH and RSA private key copies before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon 5506469ed6 F-5041: zeroize native Ed25519 private key copies before JNI release 2026-08-20 15:43:51 -06:00
Chris Conlon f3c6ba590a F-5040: zeroize native Curve25519 private key copies before JNI release 2026-08-20 15:43:51 -06:00
Chris Conlon 3a1199be7a F-5039 / F-5056: zeroize native ECC private key copies before JNI release 2026-08-20 15:43:51 -06:00
Chris Conlon 82503a3060 F-5037: reject negative key length in PKCS12 PBKDF JNI wrapper 2026-08-19 16:42:28 -06:00
Chris Conlon de66edb920 F-5035: zeroize PKCS8 spec copy in RSA KeyFactory private key decode 2026-08-19 16:42:28 -06:00
Chris Conlon 8d4e14264a F-4865: zeroize peer key copies in WolfCryptPBEKey equals 2026-08-19 16:42:28 -06:00
Chris Conlon 7ebdb0dbe4 F-4864: zeroize intermediate output copy in two-arg engineDoFinal 2026-08-19 15:26:27 -06:00
Chris Conlon 236fb1809a F-4863: zeroize plaintext input buffer in Cipher wolfCryptFinal 2026-08-19 15:26:27 -06:00
Chris Conlon 96ce0644b7 F-4862: zeroize digest and recovered sig buffers in engineVerify 2026-08-19 15:05:22 -06:00
Chris Conlon 0ce50852c7 F-4861: zeroize PKCS8 spec copy in EC KeyFactory private key decode 2026-08-19 15:05:22 -06:00
Chris Conlon 77f4e65270 F-4439: zeroize generated key bytes in KeyGenerator engineGenerateKey 2026-08-19 15:05:22 -06:00
Chris Conlon 97e1229fa0 F-4370: zeroize native PKCS8 key copy in X509CheckPrivateKey 2026-08-19 15:05:22 -06:00
Chris Conlon c4f94d1314 F-4365: zeroize digest buffers in Signature engineSign 2026-08-19 15:05:22 -06:00
Chris Conlon 2abd0fd33a F-4364: override releaseNativeStruct in Hmac to serialize native free 2026-08-19 11:46:09 -06:00
Chris Conlon 25b4ceb8cf F-4362: escape CR and LF in wolfJCE debug log messages 2026-08-19 11:46:09 -06:00
Chris Conlon 58df604f13 F-3998: zeroize abandoned DH secret buffers in engineGenerateSecret 2026-08-19 11:33:22 -06:00
Chris Conlon 6b276a76e8 F-3762: zeroize unwrapped key buffer in engineUnwrap 2026-08-19 11:33:22 -06:00
Chris Conlon 4f7b64fc14 F-3562: zeroize AES-CTS key schedule in releaseNativeStruct 2026-08-19 11:33:22 -06:00
Chris Conlon ade193cf93 F-6155: remove redundant wc_ecc_init from ECC raw import wrappers 2026-08-19 11:33:22 -06:00
Chris Conlon b95503fbaf F-5989: report curves from index 0 in wc_ecc_get_all_curve_names 2026-08-19 11:33:22 -06:00
Chris Conlon 73e0e45fd9 F-5988: return configured GMAC tag length from engineGetMacLength 2026-08-19 11:33:22 -06:00
Chris Conlon a603fb5f89 F-5401: free signature buffer on Ecc sign_hash error paths 2026-08-19 11:33:21 -06:00
Chris Conlon b337c025f6 F-4437: skip output allocation for zero length Chacha process input 2026-08-19 11:33:21 -06:00
Ruby Martin 0f24672a58
Merge pull request #260 from cconlon/fenrirAug17_2
Fixes for CertPathChecker ordering and build/example script path hardening
2026-08-18 17:39:47 -05:00
Ruby Martin 646b2b7419
Merge pull request #258 from cconlon/fenrirAug14
Fixes for error mapping, DH init, OCSP reason code, and documentation
2026-08-18 16:46:55 -05:00
Ruby Martin 216df069e0
Merge pull request #255 from cconlon/fenrirAug11
Fenrir fixes for JNI digest bounds checks and CertManager callback lifecycle
2026-08-18 15:50:30 -05:00
Ruby Martin 1553399fc3
Merge pull request #254 from cconlon/fenrirAug10
Fenrir fixes for JNI feature gates and FIPS wrappers
2026-08-18 15:49:58 -05:00
Ruby Martin a969ccbeea
Merge pull request #256 from cconlon/fenrirAug13
Fenrir fixes for AES-GCM/GMAC and RSA-PSS JNI wrappers
2026-08-18 15:49:24 -05:00
Chris Conlon 620e63e5ed F-3572: add offset and len sanity checks to Md5 byte array update 2026-08-18 13:10:05 -06:00
Chris Conlon 9e4efe06b1 F-3571: replace existing verify callback context in CertManagerSetVerify 2026-08-18 13:10:05 -06:00
Chris Conlon 492e66e78a F-8216: pin SHA-256 checksums for Android Gradle build dependencies 2026-08-18 13:10:05 -06:00
Chris Conlon 6e3a637875 F-8204: release verify callback resources in CertManagerFree 2026-08-18 13:10:05 -06:00
Chris Conlon 3b6ea84ae4 F-8194: declare PSS wrapper return variables outside WC_RSA_PSS guard 2026-08-18 13:06:32 -06:00
Chris Conlon 7639d39c7c F-8203: resolve RNG from rng_object in FIPS RsaSSL_Sign wrappers 2026-08-18 13:06:32 -06:00
Chris Conlon 8b1f3228e2 F-8201 / F-8202: use word32 size/index locals, fix RSA decode return in FIPS JNI 2026-08-18 13:06:32 -06:00
Chris Conlon 83776beb88 F-10005: anchor provider JAR path and fail closed in cacerts WKS script 2026-08-17 17:17:10 -06:00
Chris Conlon 498cbb6a05 F-10003: quote install and uninstall paths in makefile.linux 2026-08-17 17:17:10 -06:00
Chris Conlon 71c7865fa0 F-8217: anchor provider example launcher paths to script location 2026-08-17 17:17:10 -06:00
Chris Conlon 45fe5eca3b F-6617: load only spotbugs-ant.jar in spotbugs taskdef classpath 2026-08-17 17:17:10 -06:00
Chris Conlon 49871a7c37 F-9998: present certs to CertPathCheckers in declared reverse order 2026-08-17 17:17:10 -06:00
Chris Conlon 2a516afb53 F-8208: import DH private key when init given explicit DHParameterSpec 2026-08-17 13:25:01 -06:00
Chris Conlon 80affed32e F-8207: map stapled OCSP revoked status to BasicReason.REVOKED 2026-08-17 13:25:01 -06:00
Chris Conlon 687b3396f2 F-9325: match engineValidate sequence comment to implementation order 2026-08-17 13:25:01 -06:00
Chris Conlon 076671fe0c F-9324: allow null password in engineLoad javadoc to match behavior 2026-08-17 13:25:01 -06:00