Chris Conlon
|
ddf3c3f03a
|
F-9323: correct FIPS CAST ordering comment in WolfObject init
|
2026-08-17 13:25:01 -06:00 |
Chris Conlon
|
145c212625
|
F-9321 / F-9322: correct key state precondition in AesCcm and AesGcm javadoc
|
2026-08-17 13:25:01 -06:00 |
Chris Conlon
|
377b1ae5b7
|
F-9320: throw on operational errors in RsaPSS CheckPadding wrapper
|
2026-08-14 17:32:55 -06:00 |
Chris Conlon
|
99040da417
|
F-9319: distinguish MAC mismatch from operational errors in AesCmac.verify
|
2026-08-14 15:55:34 -06:00 |
Chris Conlon
|
43425fbff7
|
F-9318: correct CertPathBuilder revocation checking documentation
|
2026-08-14 15:23:48 -06:00 |
Chris Conlon
|
6c5680a571
|
F-9317: remove stale MGF parameter fallback comment in PSS validation
|
2026-08-14 14:52:55 -06:00 |
Chris Conlon
|
9b589b14a6
|
F-4435 / F-4436: initialize GMAC size locals read by debug logging
|
2026-08-13 15:51:08 -06:00 |
Chris Conlon
|
83ffe17d83
|
F-3995: throw on operational errors in RsaPSS VerifyCheck wrapper
|
2026-08-13 15:51:08 -06:00 |
Chris Conlon
|
17818e0f19
|
F-3768: distinguish tag mismatch from operational errors in AesGmac.verify
|
2026-08-13 12:06:23 -06:00 |
Chris Conlon
|
be144d2782
|
F-3767: match AesGcmDecrypt input validation in AesGcmEncrypt
|
2026-08-13 11:47:51 -06:00 |
Chris Conlon
|
2efc0ffbe4
|
F-8195: pass INVALID_DEVID to wc_InitSha3_* init calls
|
2026-08-11 12:54:22 -06:00 |
Ruby Martin
|
786e606703
|
Merge pull request #251 from cconlon/v1.11
Prep for 1.11 release
|
2026-08-10 17:18:06 -05:00 |
Chris Conlon
|
284c989de1
|
F-8200: gate Ed25519 verify JNI wrapper on HAVE_ED25519_VERIFY
|
2026-08-10 16:13:07 -06:00 |
Chris Conlon
|
5783b15189
|
Update ChangeLog.md for 1.11 release
|
2026-08-10 14:17:13 -06:00 |
Chris Conlon
|
0d76df308e
|
Windows: add ERROR_QUEUE_PER_THREAD and HAVE_THREAD_LS to user_settings.h defines
|
2026-08-07 12:55:23 -06:00 |
Chris Conlon
|
b5ad4c9321
|
Testing: bound latch waits and shut down thread pools in JNI tests
|
2026-08-06 15:28:33 -06:00 |
Chris Conlon
|
9ca89c4210
|
Testing: capture expected malformed-entry warnings in FilteredProviderFunctionalTest
|
2026-08-06 14:42:13 -06:00 |
Chris Conlon
|
1bbacd440b
|
JNI/JCE: bump version to 1.11
|
2026-08-06 12:37:27 -06:00 |
Ruby Martin
|
7d8188f9ff
|
Merge pull request #246 from cconlon/filteredProvidersDefaultName
Filtered providers: add useOriginalNames and additionalServices properties
|
2026-07-31 18:23:48 -05:00 |
Ruby Martin
|
f520b03a7f
|
Merge pull request #250 from cconlon/fenrirJuly30
Fenrir fixes for WolfCryptCipher update()
|
2026-07-31 16:54:33 -05:00 |
Chris Conlon
|
dd3220f710
|
Filtered providers: add wolfssl.filtered.*.additionalServices properties
|
2026-07-31 14:23:28 -06:00 |
Ruby Martin
|
a9cccc1761
|
Merge pull request #249 from cconlon/fenrirJuly27
Fenrir fixes for wolfJCE key equality, KeyStore conversion, and EC key validation
|
2026-07-31 11:53:52 -05:00 |
Chris Conlon
|
c19e3f0fa1
|
F-5033: grow update() buffer by doubling in WolfCryptCipher
|
2026-07-30 17:17:53 -06:00 |
Ruby Martin
|
90c50b850b
|
Merge pull request #245 from cconlon/fenrirJuly23
Fenrir correctness and robustness fixes
|
2026-07-29 17:50:57 -05:00 |
Chris Conlon
|
7a1e4d0229
|
Testing: cold boot Android emulator to avoid snapshot restore race
|
2026-07-29 15:06:09 -06:00 |
Chris Conlon
|
0cf08c9d15
|
F-5032: accumulate AES-GCM/CCM AAD with amortized growth in engineUpdateAAD
|
2026-07-29 15:06:09 -06:00 |
Chris Conlon
|
00d55d66cc
|
F-4858: fail-fast validate DH public key in publicKeyDecodeX509 JNI import
|
2026-07-29 15:06:09 -06:00 |
Chris Conlon
|
c5d0402877
|
F-4857: enforce BasicConstraints pathLenConstraint in Java fallback chain builder
|
2026-07-29 15:06:09 -06:00 |
Chris Conlon
|
399dd8719b
|
F-4856: reject oversized and out-of-range DER lengths in getDERLength
|
2026-07-29 15:06:09 -06:00 |
Chris Conlon
|
9d2080d6cf
|
F-4369 / F-4859 / F-4860: zero UTF-8 password copies at wolfJCE PBKDF2 call sites
|
2026-07-29 15:06:09 -06:00 |
Chris Conlon
|
4d2cb5edbb
|
F-4368: zero native password copy before release in PBKDF2 and PKCS12 PBKDF JNI
|
2026-07-29 14:46:25 -06:00 |
Chris Conlon
|
4043b2eaf1
|
F-4367: look up CertManager verify callback by store->userCtx, not list head
|
2026-07-29 14:46:25 -06:00 |
Chris Conlon
|
b683fbcdb8
|
Testing: cold boot Android emulator to avoid snapshot restore race
|
2026-07-29 10:32:43 -06:00 |
Chris Conlon
|
c59e889487
|
F-5908: validate EC public key point in ECPublicKeySpec conversion
|
2026-07-29 10:32:43 -06:00 |
Chris Conlon
|
fa6028da87
|
F-5907: reject negative offset and zeroize secrets on all paths in KeyAgreement
|
2026-07-29 10:32:43 -06:00 |
Chris Conlon
|
a250fc879e
|
F-5891: buffer KeyStore stream for type detection in convertKeyStoreToWKS
|
2026-07-29 10:32:43 -06:00 |
Chris Conlon
|
1feacd6c71
|
JCE: avoid cross-key lock nesting in WolfCryptSecretKey.equals()
|
2026-07-29 10:32:43 -06:00 |
Chris Conlon
|
c1339977e8
|
F-5890: avoid cross-key lock nesting in WolfCryptPBEKey.equals()
|
2026-07-29 10:32:43 -06:00 |
Ruby Martin
|
4aca27554a
|
Merge pull request #248 from cconlon/fenrirJuly24
Fenrir static analysis fixes
|
2026-07-28 13:24:50 -05:00 |
Ruby Martin
|
795ec78d8e
|
Merge pull request #247 from cconlon/fenrirJuly23_2
Robustness fixes across wolfJCE PKIX, ASN.1, and JNI HMAC
|
2026-07-27 17:49:21 -05:00 |
Ruby Martin
|
2a6b50264d
|
Merge pull request #244 from cconlon/ci-workflow-optimizations
Reduce PR workflow time and runner usage
|
2026-07-27 16:57:55 -05:00 |
Chris Conlon
|
04b6d5a9ea
|
F-5889: minimize and clear pinned password buffer in wcKeyPemToDer
|
2026-07-24 15:52:25 -06:00 |
Chris Conlon
|
de7d9136f5
|
F-5803: close Ed25519 release split-lock race by freeing under one lock
|
2026-07-24 15:52:25 -06:00 |
Chris Conlon
|
1466e4f5aa
|
F-5801 / F-5802: bound PEM input size in JNI PEM to DER conversion functions
|
2026-07-24 15:52:25 -06:00 |
Chris Conlon
|
fc218ab9e5
|
F-5800: bound DER field lengths in WolfCryptDHPublicKey X.509 parsing
|
2026-07-24 15:52:25 -06:00 |
Chris Conlon
|
17ed413a29
|
F-5799: preserve caller-supplied RSASSA-PSS parameters across digest init
|
2026-07-24 15:52:25 -06:00 |
Chris Conlon
|
97842c5087
|
F-5798: reject non-byte-aligned AES-GCM/CCM tag lengths at Cipher init
|
2026-07-24 15:52:25 -06:00 |
Chris Conlon
|
f1a011956e
|
F-5797: bound DER field lengths in WolfCryptDHPrivateKey PKCS#8 parsing
|
2026-07-24 15:17:51 -06:00 |
Chris Conlon
|
e314b928b5
|
F-5224 / F-5796: enforce 512-bit minimum DH prime in KeyPairGenerator spec init
|
2026-07-24 15:17:51 -06:00 |
Chris Conlon
|
fc45f9ec30
|
F-5223: enforce PKIX maxPathLength as a per-iteration depth budget
|
2026-07-24 10:01:17 -06:00 |