WolfSSL
/
wolfcrypt-jni
mirror of https://github.com/wolfSSL/wolfcrypt-jni.git
1
0
Fork 0
Code Issues Releases Wiki Activity
1,123 Commits
2 Branches
12 Tags
17 MiB
Commit Graph

1123 Commits (master)

Author SHA1 Message Date
Chris Conlon bda97d6618 F-5067: reject out-of-range DER lengths in decodeDERLengthWithOffset 2026-07-24 10:01:17 -06:00
Chris Conlon 073df509e0 F-5034: zero native HMAC key copy before release in wc_HmacSetKey 2026-07-24 10:01:17 -06:00
Chris Conlon 406f6b7ec0 Filtered providers: add wolfssl.filtered.useOriginalNames property 2026-07-23 17:06:10 -06:00
Chris Conlon 582ceca610 Testing: fix flaky Android emulator boot from cached AVD snapshot 2026-07-23 15:44:04 -06:00
Chris Conlon d11076ea75 Testing: cache wolfSSL builds, cancel superseded PR runs, trim redundant job steps 2026-07-23 15:32:32 -06:00
Ruby Martin a02707230d
Merge pull request #241 from cconlon/gplv3 
Change license from GPLv2 to GPLv3 to match native wolfSSL
 2026-07-22 15:54:40 -05:00
Chris Conlon fdda2f88b9 IDE/Android: exclude ssl_api_hs.c, ssl_api_rw.c and ssl_err.c from CMake build, included inline by ssl.c 2026-07-22 13:43:57 -06:00
Chris Conlon 98fbe75412 License: change license from GPLv2 to GPLv3 to match native wolfSSL 2026-07-22 13:43:57 -06:00
Ruby Martin 564348564d
Merge pull request #242 from cconlon/certManObj 
Fix wolfJCE compatibility with current wolfSSL FIPS Ready
 2026-07-22 13:24:05 -05:00
Chris Conlon 38a72ec2d5 Testing: restore jdk.mlkem.pkcs8.encoding to expandedKey, not empty/seed 2026-07-21 16:57:11 -06:00
Chris Conlon 287675b9c7 Testing: assert KEK cache contents instead of timing in cache tests 2026-07-21 16:57:11 -06:00
Chris Conlon 078aec9189 JNI: add missing PRIVATE_KEY_UNLOCK/LOCK around PBKDF2 and key exports 2026-07-21 16:33:35 -06:00
Chris Conlon d0786a269f Testing: skip DH tests when native wolfSSL is built without DH 2026-07-21 16:33:35 -06:00
Chris Conlon 44e377b0ce AES-GCM: use wc_AesGcmSetExtIV/wc_AesGcmEncrypt_ex on FIPS v5.1+ 2026-07-21 16:33:32 -06:00
Chris Conlon 81082dbc47 WolfSSLCertManager: extend WolfObject to guarantee native library load 2026-07-21 14:34:23 -06:00
Ruby Martin 648adff8d3
Merge pull request #240 from cconlon/certpathConstraintsGcmReuse 
JCE: align certpath algorithm constraints and AES-GCM IV reuse with SunJCE
 2026-07-21 12:37:56 -05:00
Chris Conlon 64a4214531 JCE: match SunJCE certpath disabledAlgorithms and AES-GCM IV reuse behavior, add PQ/DH key constraints 2026-07-16 10:35:03 -06:00
Chris Conlon a208384e23 JCE: only register PQC parameter sets compiled into native wolfSSL 2026-07-15 17:05:38 -06:00
Chris Conlon da22841006 JNI: load native library and run FIPS CASTs in WolfSSLCertManager static initializer 2026-07-15 16:20:20 -06:00
Ruby Martin da7139e415
Merge pull request #238 from cconlon/fenrirJuly26AiAudit2 
Fenrir fixes - WolfSSLKeyStore, WolfCryptPKIXCertPathValidator
 2026-07-09 12:00:00 -06:00
Ruby Martin 907d850afc
Merge pull request #237 from cconlon/fenrirJuly26AiAudit 
Fenrir fixes
 2026-07-09 10:41:16 -06:00
Chris Conlon b1496e6e4a Android: exclude asn_tsp.c from CMake sources 2026-07-08 15:09:55 -06:00
Chris Conlon 118af16df6 F-4363: use value equality for FIPS sigProvider check in engineValidate 2026-07-08 14:43:38 -06:00
Chris Conlon 49c51fbc6f F-4357 / F-4358 / F-4360 / F-4361: bound variable-length allocations in WKS entry decoders 2026-07-08 14:43:38 -06:00
Chris Conlon 801e0eed1a F-4356: commit WKS entries only after HMAC verification in engineLoad 2026-07-08 11:56:51 -06:00
Chris Conlon 865c769427 F-4354 / F-4355: bound encoded entry and HMAC sizes in WolfSSLKeyStore.engineLoad 2026-07-08 11:28:52 -06:00
Chris Conlon fee50d8b4f F-5906: enforce 1 < Y < p-1 range on DH public key in X.509 import 2026-07-07 15:59:54 -06:00
Chris Conlon 9094a1f274 F-5905: enforce 1 < Y < p-1 range on DH public key in KeyFactory import 2026-07-07 15:59:54 -06:00
Chris Conlon ac82b660c4 F-5888: hard-fail OCSP revoked status regardless of SOFT_FAIL 2026-07-07 15:59:54 -06:00
Chris Conlon 21cfcc0bae F-5887: close Curve25519 release split-lock race by freeing under one lock 2026-07-07 15:59:54 -06:00
Chris Conlon 866cca671f F-5795: match qualified jdk.certpath.disabledAlgorithms entries by algorithm name 2026-07-07 15:59:54 -06:00
Chris Conlon a6e69def1c F-5794: synchronize FIPS error callback access in jni_fips.c 2026-07-07 15:59:54 -06:00
Chris Conlon 8c7abe133c F-5222: reject AES-GMAC key and IV reuse in WolfCryptMac 2026-07-07 15:59:54 -06:00
Chris Conlon d6a4e0d9a2 F-5066: use a uniform exception for RSA PKCS#1 v1.5 unwrap failures 2026-07-07 15:59:54 -06:00
Chris Conlon 1e6bcb17cc F-5030: use constant-time PKCS#7 unpadding and uniform BadPaddingException 2026-07-07 15:59:53 -06:00
Chris Conlon abb9ae8071 F-5029: reject AES-GCM key and IV reuse for encryption in WolfCryptCipher 2026-07-07 15:59:53 -06:00
Ruby Martin db0cce4fb3
Merge pull request #235 from cconlon/pqc-slhdsa 
Add SLH-DSA (FIPS 205) to wolfCrypt JNI and wolfJCE
 2026-07-07 15:08:43 -06:00
Chris Conlon 10e50c18e6 F-4855: validate peer ECC public key in WolfCryptKeyAgreement.engineDoPhase() 2026-07-07 14:24:18 -06:00
Chris Conlon 5e9578dd87 F-4366: fix use-after-free race in CertManager nativeVerifyCallback 2026-07-07 14:24:18 -06:00
Chris Conlon 3e4f6aa1e2 F-4359: validate peer DH public key in WolfCryptKeyAgreement.engineDoPhase() 2026-07-07 13:02:54 -06:00
Ruby Martin 43c0058a8e
Merge pull request #236 from cconlon/fenrirJuly26 
Fenrir fixes
 2026-07-06 12:09:43 -06:00
Chris Conlon 504b4e5970 JNI/JCE: add SLH-DSA (FIPS 205) to wolfCrypt JNI and wolfJCE 2026-07-06 10:43:24 -06:00
Chris Conlon 398b61a8bb F-5403: pin Ant classpath to wolfcrypt-jni.jar 2026-07-06 10:26:15 -06:00
Chris Conlon 9d01c586f7 F-3997: validate hash and output buffer sizes in Asn.encodeSignature() JNI wrappers 2026-07-06 10:26:15 -06:00
Chris Conlon a85511edf1 F-6436: gate ML-KEM JNI code on WOLFSSL_HAVE_MLKEM only, remove unused HAVE_MLKEM 2026-07-06 10:26:15 -06:00
Chris Conlon 0c9ba04644 F-5399 / F-5400: validate caller-provided sizes against buffer lengths in Rsa JNI wrappers 2026-07-06 10:26:15 -06:00
Chris Conlon bdf8f8ac2d F-5398: honor caller-provided buffer sizes in WolfSSLCertManager JNI wrappers 2026-07-06 10:26:15 -06:00
Chris Conlon d4205956c8 F-5397: handle null file/directory args in CertManagerLoadCA() JNI wrapper 2026-07-06 10:26:15 -06:00
Chris Conlon bfd370e104 F-3570: fix authTag native buffer leak in AesCcm.wc_AesCcmEncrypt() JNI wrapper 2026-07-06 10:26:15 -06:00
Chris Conlon d8a68e97c2 F-3569: fix authTag native buffer leak in AesGcm.wc_AesGcmEncrypt() JNI wrapper 2026-07-06 10:26:15 -06:00