WolfSSL
/
wolfcrypt-jni
mirror of https://github.com/wolfSSL/wolfcrypt-jni.git
1
0
Fork 0
Code Issues Releases Wiki Activity
1,274 Commits
2 Branches
13 Tags
6.5 MiB
Commit Graph

1274 Commits (master)

Author SHA1 Message Date
Chris Conlon 98e9dcdba8 F-12962: log JNI hex dumps only after the input range is accepted 2026-09-22 15:16:53 -06:00
Chris Conlon 5db8e6e6fa F-12961: guard the PKCS8 algorithm ID JNI array release on the acquired pointer 2026-09-22 15:16:52 -06:00
Chris Conlon 01e932df4f JNI/JCE: add RSA/ECB/NoPadding Cipher for the raw RSA primitive 2026-09-22 15:13:35 -06:00
Ruby Martin 8cc4335fd0
Merge pull request #274 from cconlon/shake 
Add SHAKE-128 and SHAKE-256 (FIPS 202 XOF) MessageDigest support
 2026-09-22 13:39:25 -05:00
Ruby Martin 63224b19db
Merge pull request #270 from cconlon/fenrirAug28 
Hardening for FIPS RNG, AES-CMAC key wipe, SHA finals
 2026-09-21 18:12:12 -05:00
Ruby Martin ae992093d4
Merge pull request #277 from cconlon/fenrirSept4_2 
Zeroize PEM and PKCS8 JNI copies, add wipeable char[] PEM password
 2026-09-21 17:51:50 -05:00
Chris Conlon c75b48f2a4 F-13670 / F-13671: document that AesCtr and AesOfb can be re-initialized after release 2026-09-21 16:34:36 -06:00
Chris Conlon 82b6077211 F-13669: free the GMAC one-shot AES struct only after a successful init 2026-09-21 16:34:36 -06:00
Chris Conlon 61877cc12f F-13668: report AES-CTS key setup failures as BAD_FUNC_ARG instead of the compatibility status 2026-09-21 16:34:36 -06:00
Chris Conlon fe92cdcb0e F-12957: reject certificate verification when GetEnv fails without a detached thread 2026-09-21 16:34:36 -06:00
Chris Conlon a3d169ea61 F-12956: abort the MD5 final output array copy on failure like the SHA wrappers 2026-09-21 16:29:22 -06:00
Chris Conlon 0be8fe097b F-12955: return from SHA-3 init when getNativeStruct leaves an exception pending 2026-09-21 16:29:22 -06:00
Chris Conlon 7d201f7c2a F-12954: return AlgorithmParameters for the AES/CTS IV 2026-09-21 16:29:20 -06:00
Chris Conlon 03817507df F-13003: add a checksum pinned Maven Wrapper and enforce strict artifact checksums 2026-09-21 16:27:42 -06:00
Chris Conlon 33a60108ba F-12982: drop private key, shared secret and plaintext dumps from asymmetric JNI debug traces 2026-09-21 16:27:42 -06:00
Chris Conlon 2eccdd18ba F-12188: require wolfSSL 5.9.2+ for native X509 CertPathBuilder verifier 2026-09-21 15:51:47 -06:00
Chris Conlon 9711f2a4e5 F-12164: reject mismatched PRF algorithm in PBKDF2 translateKey 2026-09-21 15:51:47 -06:00
Chris Conlon e24c75eb4c F-12163: preserve DH privateValueLength in DER parameter encoding 2026-09-21 15:51:47 -06:00
Chris Conlon a900e8b188 F-12162: enforce native AES-CCM nonce length limits at init time 2026-09-21 15:51:46 -06:00
Chris Conlon 936c4b91c2 F-12161: account for AES-CCM auth tag in Cipher engineGetOutputSize 2026-09-21 15:48:08 -06:00
Chris Conlon 8e87abc56e F-13002: use the defined package name in the rpm cleanup pattern 2026-09-18 17:09:00 -06:00
Ruby Martin f5143056c8
Merge pull request #268 from cconlon/aesXts 
Add AES-XTS support
 2026-09-18 17:54:16 -05:00
Chris Conlon 59bbec0a90 F-13675: bound Base16 encode input to a Java array size and double it in unsigned arithmetic 2026-09-18 16:49:56 -06:00
Chris Conlon cca70bb5df F-13674: report RSA-PSS padding check success only after the padding comparison runs 2026-09-18 16:46:30 -06:00
Chris Conlon 74805ac9fc F-12979: compare PBEKey passwords without stopping at the first mismatch 2026-09-18 16:43:03 -06:00
Chris Conlon 611a9dfde7 F-12978: verify the leaf certificate when checking a WKS key entry chain 2026-09-18 16:32:10 -06:00
Chris Conlon 4673c0fc0f F-10000: reject undersized hash arrays in SHA byte-array native finals 2026-09-18 13:42:37 -06:00
Chris Conlon c3c8637a27 F-8213: zeroize prior AesCmac key clone before storing new key 2026-09-18 13:39:12 -06:00
Chris Conlon e42d640734 F-8212: bound bufSz to buffer capacity in FIPS RNG GenerateBlock wrappers 2026-09-18 13:39:12 -06:00
Ruby Martin 6fb9aab7cb
Merge pull request #267 from cconlon/fenrirAug27 
Fixes across debug logging, key zeroization, and native input handling
 2026-09-18 13:22:17 -05:00
Ruby Martin 555ba88dff
Merge pull request #266 from cconlon/fenrirAug26 
Quote shell paths in cert conversion/update scripts
 2026-09-18 11:13:08 -05:00
Chris Conlon 5d63c39340 Android: define HAVE_GMTIME_R so wolfSSL date checks are thread safe 2026-09-17 16:25:04 -06:00
Chris Conlon 328b9cefe3 JNI/JCE: add SHAKE-128 and SHAKE-256 (FIPS 202 XOF) MessageDigest support 2026-09-17 16:25:02 -06:00
Ruby Martin a1f4cfac71
Merge pull request #264 from cconlon/fenrirAug20_2 
wolfCrypt JNI/JCE hardening fixes
 2026-09-17 13:53:34 -05:00
Ruby Martin 887e459e16
Merge pull request #257 from cconlon/fenrirAug13_2 
Fixes for buffer bounds, error handling, and key material cleanup
 2026-09-17 12:18:49 -05:00
Ruby Martin 9b6f445f61
Merge pull request #259 from cconlon/fenrirAug17 
Buffer sizing, native resource cleanup, and lifecycle fixes
 2026-09-17 11:05:40 -05:00
Chris Conlon d9fb4aac46 F-3766: drop the retired JCenter repository from the Android IDE config 2026-09-16 15:52:12 -06:00
Chris Conlon af4e685919 F-12196: add encryptedKeyPemToDer with a wipeable char array password 2026-09-16 15:52:12 -06:00
Chris Conlon 2ad669d89e JNI/JCE: add AES-XTS support 2026-09-16 11:56:18 -06:00
Chris Conlon 2da8699db2 F-12195: zeroize the copied PKCS8 array in the algorithm ID parser 2026-09-11 17:31:51 -06:00
Chris Conlon ece6631823 F-12194: zeroize the copied private key PEM before JNI release 2026-09-11 17:31:51 -06:00
Chris Conlon 1e0c9212ed JNI: guard cipher and MAC debug logging against NULL caller buffers 2026-09-11 17:15:38 -06:00
Chris Conlon 4f5131953c F-3563: zeroize Hmac and ChaCha native structs on release 2026-09-11 17:15:38 -06:00
Chris Conlon 114338bb0c F-9328: fix stale testConvertWksToWks comment claiming stream identity 2026-09-11 17:15:38 -06:00
Chris Conlon eb33338cae F-9327: correct wcSHA3_224 class javadoc label to SHA3-224 2026-09-11 17:15:38 -06:00
Chris Conlon 998f8f91a4 F-11209: log the generated region in RNG debug output 2026-09-11 17:15:38 -06:00
Chris Conlon f712411289 F-11208: log the processed region in SHA ByteBuffer update/final debug output 2026-09-11 17:15:38 -06:00
Chris Conlon fa2e99a46b F-11207: log the processed region in MD5 ByteBuffer update/final debug output 2026-09-11 17:15:38 -06:00
Chris Conlon efe1cf855e F-9997: add explicit non-blinding arm to wc_RsaSetRNG JNI wrapper 2026-09-11 17:15:38 -06:00
Chris Conlon a89f7877e6 F-6156: avoid XMALLOC(0) on AAD-only AES-GCM/CCM paths 2026-09-11 17:15:38 -06:00