Commit Graph

1123 Commits (master)

Author SHA1 Message Date
Chris Conlon ddf3c3f03a F-9323: correct FIPS CAST ordering comment in WolfObject init 2026-08-17 13:25:01 -06:00
Chris Conlon 145c212625 F-9321 / F-9322: correct key state precondition in AesCcm and AesGcm javadoc 2026-08-17 13:25:01 -06:00
Chris Conlon 377b1ae5b7 F-9320: throw on operational errors in RsaPSS CheckPadding wrapper 2026-08-14 17:32:55 -06:00
Chris Conlon 99040da417 F-9319: distinguish MAC mismatch from operational errors in AesCmac.verify 2026-08-14 15:55:34 -06:00
Chris Conlon 43425fbff7 F-9318: correct CertPathBuilder revocation checking documentation 2026-08-14 15:23:48 -06:00
Chris Conlon 6c5680a571 F-9317: remove stale MGF parameter fallback comment in PSS validation 2026-08-14 14:52:55 -06:00
Chris Conlon 9b589b14a6 F-4435 / F-4436: initialize GMAC size locals read by debug logging 2026-08-13 15:51:08 -06:00
Chris Conlon 83ffe17d83 F-3995: throw on operational errors in RsaPSS VerifyCheck wrapper 2026-08-13 15:51:08 -06:00
Chris Conlon 17818e0f19 F-3768: distinguish tag mismatch from operational errors in AesGmac.verify 2026-08-13 12:06:23 -06:00
Chris Conlon be144d2782 F-3767: match AesGcmDecrypt input validation in AesGcmEncrypt 2026-08-13 11:47:51 -06:00
Chris Conlon 2efc0ffbe4 F-8195: pass INVALID_DEVID to wc_InitSha3_* init calls 2026-08-11 12:54:22 -06:00
Ruby Martin 786e606703
Merge pull request #251 from cconlon/v1.11
Prep for 1.11 release
2026-08-10 17:18:06 -05:00
Chris Conlon 284c989de1 F-8200: gate Ed25519 verify JNI wrapper on HAVE_ED25519_VERIFY 2026-08-10 16:13:07 -06:00
Chris Conlon 5783b15189 Update ChangeLog.md for 1.11 release 2026-08-10 14:17:13 -06:00
Chris Conlon 0d76df308e Windows: add ERROR_QUEUE_PER_THREAD and HAVE_THREAD_LS to user_settings.h defines 2026-08-07 12:55:23 -06:00
Chris Conlon b5ad4c9321 Testing: bound latch waits and shut down thread pools in JNI tests 2026-08-06 15:28:33 -06:00
Chris Conlon 9ca89c4210 Testing: capture expected malformed-entry warnings in FilteredProviderFunctionalTest 2026-08-06 14:42:13 -06:00
Chris Conlon 1bbacd440b JNI/JCE: bump version to 1.11 2026-08-06 12:37:27 -06:00
Ruby Martin 7d8188f9ff
Merge pull request #246 from cconlon/filteredProvidersDefaultName
Filtered providers: add useOriginalNames and additionalServices properties
2026-07-31 18:23:48 -05:00
Ruby Martin f520b03a7f
Merge pull request #250 from cconlon/fenrirJuly30
Fenrir fixes for WolfCryptCipher update()
2026-07-31 16:54:33 -05:00
Chris Conlon dd3220f710 Filtered providers: add wolfssl.filtered.*.additionalServices properties 2026-07-31 14:23:28 -06:00
Ruby Martin a9cccc1761
Merge pull request #249 from cconlon/fenrirJuly27
Fenrir fixes for wolfJCE key equality, KeyStore conversion, and EC key validation
2026-07-31 11:53:52 -05:00
Chris Conlon c19e3f0fa1 F-5033: grow update() buffer by doubling in WolfCryptCipher 2026-07-30 17:17:53 -06:00
Ruby Martin 90c50b850b
Merge pull request #245 from cconlon/fenrirJuly23
Fenrir correctness and robustness fixes
2026-07-29 17:50:57 -05:00
Chris Conlon 7a1e4d0229 Testing: cold boot Android emulator to avoid snapshot restore race 2026-07-29 15:06:09 -06:00
Chris Conlon 0cf08c9d15 F-5032: accumulate AES-GCM/CCM AAD with amortized growth in engineUpdateAAD 2026-07-29 15:06:09 -06:00
Chris Conlon 00d55d66cc F-4858: fail-fast validate DH public key in publicKeyDecodeX509 JNI import 2026-07-29 15:06:09 -06:00
Chris Conlon c5d0402877 F-4857: enforce BasicConstraints pathLenConstraint in Java fallback chain builder 2026-07-29 15:06:09 -06:00
Chris Conlon 399dd8719b F-4856: reject oversized and out-of-range DER lengths in getDERLength 2026-07-29 15:06:09 -06:00
Chris Conlon 9d2080d6cf F-4369 / F-4859 / F-4860: zero UTF-8 password copies at wolfJCE PBKDF2 call sites 2026-07-29 15:06:09 -06:00
Chris Conlon 4d2cb5edbb F-4368: zero native password copy before release in PBKDF2 and PKCS12 PBKDF JNI 2026-07-29 14:46:25 -06:00
Chris Conlon 4043b2eaf1 F-4367: look up CertManager verify callback by store->userCtx, not list head 2026-07-29 14:46:25 -06:00
Chris Conlon b683fbcdb8 Testing: cold boot Android emulator to avoid snapshot restore race 2026-07-29 10:32:43 -06:00
Chris Conlon c59e889487 F-5908: validate EC public key point in ECPublicKeySpec conversion 2026-07-29 10:32:43 -06:00
Chris Conlon fa6028da87 F-5907: reject negative offset and zeroize secrets on all paths in KeyAgreement 2026-07-29 10:32:43 -06:00
Chris Conlon a250fc879e F-5891: buffer KeyStore stream for type detection in convertKeyStoreToWKS 2026-07-29 10:32:43 -06:00
Chris Conlon 1feacd6c71 JCE: avoid cross-key lock nesting in WolfCryptSecretKey.equals() 2026-07-29 10:32:43 -06:00
Chris Conlon c1339977e8 F-5890: avoid cross-key lock nesting in WolfCryptPBEKey.equals() 2026-07-29 10:32:43 -06:00
Ruby Martin 4aca27554a
Merge pull request #248 from cconlon/fenrirJuly24
Fenrir static analysis fixes
2026-07-28 13:24:50 -05:00
Ruby Martin 795ec78d8e
Merge pull request #247 from cconlon/fenrirJuly23_2
Robustness fixes across wolfJCE PKIX, ASN.1, and JNI HMAC
2026-07-27 17:49:21 -05:00
Ruby Martin 2a6b50264d
Merge pull request #244 from cconlon/ci-workflow-optimizations
Reduce PR workflow time and runner usage
2026-07-27 16:57:55 -05:00
Chris Conlon 04b6d5a9ea F-5889: minimize and clear pinned password buffer in wcKeyPemToDer 2026-07-24 15:52:25 -06:00
Chris Conlon de7d9136f5 F-5803: close Ed25519 release split-lock race by freeing under one lock 2026-07-24 15:52:25 -06:00
Chris Conlon 1466e4f5aa F-5801 / F-5802: bound PEM input size in JNI PEM to DER conversion functions 2026-07-24 15:52:25 -06:00
Chris Conlon fc218ab9e5 F-5800: bound DER field lengths in WolfCryptDHPublicKey X.509 parsing 2026-07-24 15:52:25 -06:00
Chris Conlon 17ed413a29 F-5799: preserve caller-supplied RSASSA-PSS parameters across digest init 2026-07-24 15:52:25 -06:00
Chris Conlon 97842c5087 F-5798: reject non-byte-aligned AES-GCM/CCM tag lengths at Cipher init 2026-07-24 15:52:25 -06:00
Chris Conlon f1a011956e F-5797: bound DER field lengths in WolfCryptDHPrivateKey PKCS#8 parsing 2026-07-24 15:17:51 -06:00
Chris Conlon e314b928b5 F-5224 / F-5796: enforce 512-bit minimum DH prime in KeyPairGenerator spec init 2026-07-24 15:17:51 -06:00
Chris Conlon fc45f9ec30 F-5223: enforce PKIX maxPathLength as a per-iteration depth budget 2026-07-24 10:01:17 -06:00