Commit Graph

1123 Commits (master)

Author SHA1 Message Date
Chris Conlon 270e16c3e7 F-5402: update Android gradlew scripts to newer version with security hardening 2026-07-06 10:26:15 -06:00
Chris Conlon 957c941fc4 F-4434: honor caller-provided saltLen in Rsa.wc_RsaPSS_VerifyCheck() JNI wrapper 2026-07-06 10:26:12 -06:00
Ruby Martin d686a437ea
Merge pull request #233 from cconlon/pqc-lms
Add LMS/HSS (verify only) to wolfCrypt JNI and wolfJCE
2026-07-02 09:25:07 -06:00
Chris Conlon ffa383becf JNI/JCE: add LMS (verify only) support to wolfCrypt JNI and wolfJCE 2026-07-01 14:15:13 -06:00
Ruby Martin 51648bac48
Merge pull request #234 from cconlon/pqc-xmss
Add XMSS/XMSS^MT (verify only) support to wolfCrypt JNI and wolfJCE
2026-07-01 13:55:57 -06:00
Chris Conlon c3eb060161 JNI/JCE: add XMSS/XMSS^MT (verify only) support to wolfCrypt JNI and wolfJCE 2026-07-01 09:24:07 -06:00
Ruby Martin e6a46285a4
Merge pull request #232 from cconlon/pqc-mlkem
JNI/JCE: add ML-KEM (FIPS 203) support to wolfCrypt JNI and wolfJCE
2026-06-25 13:06:21 -06:00
Chris Conlon 3dfd2420b6 JNI/JCE: add ML-KEM (FIPS 203) support to wolfCrypt JNI and wolfJCE 2026-06-25 11:37:07 -06:00
Ruby Martin 5f04f6ed21
Merge pull request #231 from cconlon/legacyRsaOidKeyFactory
Accept legacy RSA OID (1.3.14.3.2.15) in RSA KeyFactory X.509 public key decode
2026-06-17 14:33:22 -06:00
Ruby Martin 0470dae077
Merge pull request #230 from cconlon/keyFactoryEcOid
Add OID alias for EC KeyFactory
2026-06-16 09:23:52 -06:00
Ruby Martin f43914224c
Merge pull request #229 from cconlon/dhParamFixFips
Validate DH parameter generation sizes in AlgorithmParameterGenerator engineInit()
2026-06-15 16:59:38 -06:00
Ruby Martin 78ffc62e00
Merge pull request #228 from cconlon/pqc-mldsa
Add ML-DSA (FIPS 204) support to wolfCrypt JNI and wolfJCE
2026-06-15 16:42:28 -06:00
Chris Conlon 2f30d4cc7c JCE: accept legacy RSA OID (1.3.14.3.2.15) in RSA KeyFactory X.509 public key decode 2026-06-12 16:40:16 -06:00
Chris Conlon 88bc548392 JCE: add OID alias for EC KeyFactory 2026-06-12 16:23:23 -06:00
Chris Conlon 018712d5d9 JCE: validate DH parameter generation sizes in engineInit(), restrict to FFDHE sizes in FIPS mode 2026-06-12 16:13:54 -06:00
Chris Conlon a96d2ea401 JNI/JCE: add ML-DSA (FIPS 204) signature support to wolfCrypt JNI and wolfJCE 2026-06-11 14:49:29 -06:00
Ruby Martin 48f198d6c1
Merge pull request #226 from cconlon/filteredProviders
Add filtered SUN/SunEC/SunRsaSign providers with build support and tests
2026-06-10 16:19:51 -06:00
Chris Conlon 5cfc7cb124 Android: update CMakeLists.txt with new native wolfSSL source files to ignore 2026-06-10 10:09:47 -06:00
Chris Conlon da8a4d881a Add filtered SUN/SunEC/SunRsaSign providers with build support, tests, and CI 2026-06-09 16:46:19 -06:00
Ruby Martin 23662cb220
Merge pull request #227 from cconlon/antLatest
CI: resolve current Apache Ant version dynamically in windows-vs.yml
2026-06-09 16:43:31 -06:00
Chris Conlon 315f2859cc CI: resolve current Apache Ant version dynamically in windows-vs.yml 2026-06-09 15:33:12 -06:00
Ruby Martin 56fee0b8da
Merge pull request #216 from cconlon/rsaPkcs1BadPadding
Throw BadPaddingException on RSA decrypt failures
2026-05-14 15:48:28 -06:00
Ruby Martin 492855423f
Merge pull request #215 from cconlon/JceRsaCrtKeyPairFix
Pin JCE KeyFactory lookups to wolfJCE and accept opaque CRT-encoded RSA keys
2026-05-12 17:08:41 -06:00
Chris Conlon 0da3d0846d JCE: throw BadPaddingException on RSA/ECB/PKCS1Padding decrypt failure 2026-05-12 16:09:52 -06:00
Chris Conlon 582a009452 JCE: pin internal KeyFactory lookups to wolfJCE and accept non-CRT-typed RSA keys with CRT PKCS#8 encodings 2026-05-08 15:36:01 -06:00
Ruby Martin b1935a7180
Merge pull request #213 from cconlon/jdk24Warnings
Suppress JDK 24 deprecation/removal warnings
2026-05-04 10:21:19 -06:00
Chris Conlon ea9d616e6c Suppress JDK 24 deprecation/removal warnings 2026-05-01 15:05:45 -06:00
Chris Conlon 685938c49e
Merge pull request #212 from rlm2002/fenrir
Fenrir fixes
2026-04-29 16:08:39 -06:00
Ruby Martin 7cd266be95 JCE: Zero copy of buffers before returning 2026-04-29 14:46:38 -06:00
Ruby Martin ae161c7a1c JCE: zero privKeyBytes buffer before leaking wolfCryptInitPrivateKey 2026-04-29 14:46:38 -06:00
Ruby Martin aef00fa251 JCE: catch WolfCryptException, throw new UnrecoverableKeyException 2026-04-29 14:46:38 -06:00
Ruby Martin 90cc4ca513 JNI: throw Exception instead of error value when error encountered 2026-04-29 14:46:38 -06:00
Ruby Martin a034cf797b JNI: utilize outputOffset when writing data to output buffer 2026-04-29 14:46:38 -06:00
Ruby Martin bbc9478f34 JNI: clarify exception thrown when privateKey handling fails in DhGenerateKeyPair()
add guards to check for pending exceptions
2026-04-29 14:46:33 -06:00
Ruby Martin dae76c5f42 JCE: zero encodedKey buffer in DH/EC/RSA Key Factories before returning 2026-04-24 15:33:58 -06:00
Ruby Martin dc3d7a6c83 JCE: zero WolfSSLKeyStore PKCS8 private key buffer after native check 2026-04-24 15:33:58 -06:00
Ruby Martin 570faa424e JCE: zero WolfCryptSignature PKCS8 private key buffer after use 2026-04-24 15:33:58 -06:00
Ruby Martin 2e517487f7 JCE: zero WolfCryptMac.engineInit encodedKey buffer after use 2026-04-24 15:33:58 -06:00
Ruby Martin 596fa9f651 JCE: zero WolfCryptCipher encodedKey buffers after use 2026-04-24 15:33:58 -06:00
Ruby Martin e10a7d8b29 JNI: release name string on error before returning NULL 2026-04-24 15:33:58 -06:00
Ruby Martin 504d499561 JNI: reference saltBuf rather than salt in #else (void) call 2026-04-24 15:33:58 -06:00
Ruby Martin bfaa5eb320 JNI: zero with wc_ForceZero() when possible on sensitive heap buffers 2026-04-24 15:33:58 -06:00
Ruby Martin 8c7a9721d2
Merge pull request #211 from cconlon/v1.10
Prep for 1.10 release
2026-04-15 14:14:07 -06:00
Chris Conlon 4a0a1edbac JCE: skip SHA1withECDSA registration for FIPS 186-5 (v7+)
FIPS 186-5 no longer allows SHA-1 for ECDSA signatures. Only register
SHA1withECDSA when not using FIPS or when using FIPS versions prior
to v7 which follow FIPS 186-4.
2026-04-15 10:03:16 -06:00
Chris Conlon 590b719212 JNI: sync WolfCryptError enum with latest wolfSSL error-crypt.h 2026-04-15 10:03:16 -06:00
Chris Conlon 7179d9cf7b Update ChangeLog.md for 1.10 release 2026-04-15 10:03:13 -06:00
Chris Conlon 3017aca968 JNI/JCE: bump version to 1.10 2026-04-14 17:50:09 -06:00
Chris Conlon 43c6c8d201 Windows: add missing FFDHE defines to README, skip DH tests when unavailable 2026-04-14 17:50:06 -06:00
Ruby Martin 9515b27d61
Merge pull request #210 from cconlon/fenrir46
Fenrir fixes: buffer frees, struct resets, Gradle distribution SHA-256
2026-04-06 14:57:21 -06:00
Chris Conlon 45b3dfc2f8 Android: add Gradle wrapper distribution distributionSha256Sum (F-1947) 2026-04-06 11:21:36 -06:00