Chris Conlon
270e16c3e7
F-5402: update Android gradlew scripts to newer version with security hardening
2026-07-06 10:26:15 -06:00
Chris Conlon
957c941fc4
F-4434: honor caller-provided saltLen in Rsa.wc_RsaPSS_VerifyCheck() JNI wrapper
2026-07-06 10:26:12 -06:00
Ruby Martin
d686a437ea
Merge pull request #233 from cconlon/pqc-lms
...
Add LMS/HSS (verify only) to wolfCrypt JNI and wolfJCE
2026-07-02 09:25:07 -06:00
Chris Conlon
ffa383becf
JNI/JCE: add LMS (verify only) support to wolfCrypt JNI and wolfJCE
2026-07-01 14:15:13 -06:00
Ruby Martin
51648bac48
Merge pull request #234 from cconlon/pqc-xmss
...
Add XMSS/XMSS^MT (verify only) support to wolfCrypt JNI and wolfJCE
2026-07-01 13:55:57 -06:00
Chris Conlon
c3eb060161
JNI/JCE: add XMSS/XMSS^MT (verify only) support to wolfCrypt JNI and wolfJCE
2026-07-01 09:24:07 -06:00
Ruby Martin
e6a46285a4
Merge pull request #232 from cconlon/pqc-mlkem
...
JNI/JCE: add ML-KEM (FIPS 203) support to wolfCrypt JNI and wolfJCE
2026-06-25 13:06:21 -06:00
Chris Conlon
3dfd2420b6
JNI/JCE: add ML-KEM (FIPS 203) support to wolfCrypt JNI and wolfJCE
2026-06-25 11:37:07 -06:00
Ruby Martin
5f04f6ed21
Merge pull request #231 from cconlon/legacyRsaOidKeyFactory
...
Accept legacy RSA OID (1.3.14.3.2.15) in RSA KeyFactory X.509 public key decode
2026-06-17 14:33:22 -06:00
Ruby Martin
0470dae077
Merge pull request #230 from cconlon/keyFactoryEcOid
...
Add OID alias for EC KeyFactory
2026-06-16 09:23:52 -06:00
Ruby Martin
f43914224c
Merge pull request #229 from cconlon/dhParamFixFips
...
Validate DH parameter generation sizes in AlgorithmParameterGenerator engineInit()
2026-06-15 16:59:38 -06:00
Ruby Martin
78ffc62e00
Merge pull request #228 from cconlon/pqc-mldsa
...
Add ML-DSA (FIPS 204) support to wolfCrypt JNI and wolfJCE
2026-06-15 16:42:28 -06:00
Chris Conlon
2f30d4cc7c
JCE: accept legacy RSA OID (1.3.14.3.2.15) in RSA KeyFactory X.509 public key decode
2026-06-12 16:40:16 -06:00
Chris Conlon
88bc548392
JCE: add OID alias for EC KeyFactory
2026-06-12 16:23:23 -06:00
Chris Conlon
018712d5d9
JCE: validate DH parameter generation sizes in engineInit(), restrict to FFDHE sizes in FIPS mode
2026-06-12 16:13:54 -06:00
Chris Conlon
a96d2ea401
JNI/JCE: add ML-DSA (FIPS 204) signature support to wolfCrypt JNI and wolfJCE
2026-06-11 14:49:29 -06:00
Ruby Martin
48f198d6c1
Merge pull request #226 from cconlon/filteredProviders
...
Add filtered SUN/SunEC/SunRsaSign providers with build support and tests
2026-06-10 16:19:51 -06:00
Chris Conlon
5cfc7cb124
Android: update CMakeLists.txt with new native wolfSSL source files to ignore
2026-06-10 10:09:47 -06:00
Chris Conlon
da8a4d881a
Add filtered SUN/SunEC/SunRsaSign providers with build support, tests, and CI
2026-06-09 16:46:19 -06:00
Ruby Martin
23662cb220
Merge pull request #227 from cconlon/antLatest
...
CI: resolve current Apache Ant version dynamically in windows-vs.yml
2026-06-09 16:43:31 -06:00
Chris Conlon
315f2859cc
CI: resolve current Apache Ant version dynamically in windows-vs.yml
2026-06-09 15:33:12 -06:00
Ruby Martin
56fee0b8da
Merge pull request #216 from cconlon/rsaPkcs1BadPadding
...
Throw BadPaddingException on RSA decrypt failures
2026-05-14 15:48:28 -06:00
Ruby Martin
492855423f
Merge pull request #215 from cconlon/JceRsaCrtKeyPairFix
...
Pin JCE KeyFactory lookups to wolfJCE and accept opaque CRT-encoded RSA keys
2026-05-12 17:08:41 -06:00
Chris Conlon
0da3d0846d
JCE: throw BadPaddingException on RSA/ECB/PKCS1Padding decrypt failure
2026-05-12 16:09:52 -06:00
Chris Conlon
582a009452
JCE: pin internal KeyFactory lookups to wolfJCE and accept non-CRT-typed RSA keys with CRT PKCS#8 encodings
2026-05-08 15:36:01 -06:00
Ruby Martin
b1935a7180
Merge pull request #213 from cconlon/jdk24Warnings
...
Suppress JDK 24 deprecation/removal warnings
2026-05-04 10:21:19 -06:00
Chris Conlon
ea9d616e6c
Suppress JDK 24 deprecation/removal warnings
2026-05-01 15:05:45 -06:00
Chris Conlon
685938c49e
Merge pull request #212 from rlm2002/fenrir
...
Fenrir fixes
2026-04-29 16:08:39 -06:00
Ruby Martin
7cd266be95
JCE: Zero copy of buffers before returning
2026-04-29 14:46:38 -06:00
Ruby Martin
ae161c7a1c
JCE: zero privKeyBytes buffer before leaking wolfCryptInitPrivateKey
2026-04-29 14:46:38 -06:00
Ruby Martin
aef00fa251
JCE: catch WolfCryptException, throw new UnrecoverableKeyException
2026-04-29 14:46:38 -06:00
Ruby Martin
90cc4ca513
JNI: throw Exception instead of error value when error encountered
2026-04-29 14:46:38 -06:00
Ruby Martin
a034cf797b
JNI: utilize outputOffset when writing data to output buffer
2026-04-29 14:46:38 -06:00
Ruby Martin
bbc9478f34
JNI: clarify exception thrown when privateKey handling fails in DhGenerateKeyPair()
...
add guards to check for pending exceptions
2026-04-29 14:46:33 -06:00
Ruby Martin
dae76c5f42
JCE: zero encodedKey buffer in DH/EC/RSA Key Factories before returning
2026-04-24 15:33:58 -06:00
Ruby Martin
dc3d7a6c83
JCE: zero WolfSSLKeyStore PKCS8 private key buffer after native check
2026-04-24 15:33:58 -06:00
Ruby Martin
570faa424e
JCE: zero WolfCryptSignature PKCS8 private key buffer after use
2026-04-24 15:33:58 -06:00
Ruby Martin
2e517487f7
JCE: zero WolfCryptMac.engineInit encodedKey buffer after use
2026-04-24 15:33:58 -06:00
Ruby Martin
596fa9f651
JCE: zero WolfCryptCipher encodedKey buffers after use
2026-04-24 15:33:58 -06:00
Ruby Martin
e10a7d8b29
JNI: release name string on error before returning NULL
2026-04-24 15:33:58 -06:00
Ruby Martin
504d499561
JNI: reference saltBuf rather than salt in #else (void) call
2026-04-24 15:33:58 -06:00
Ruby Martin
bfaa5eb320
JNI: zero with wc_ForceZero() when possible on sensitive heap buffers
2026-04-24 15:33:58 -06:00
Ruby Martin
8c7a9721d2
Merge pull request #211 from cconlon/v1.10
...
Prep for 1.10 release
2026-04-15 14:14:07 -06:00
Chris Conlon
4a0a1edbac
JCE: skip SHA1withECDSA registration for FIPS 186-5 (v7+)
...
FIPS 186-5 no longer allows SHA-1 for ECDSA signatures. Only register
SHA1withECDSA when not using FIPS or when using FIPS versions prior
to v7 which follow FIPS 186-4.
2026-04-15 10:03:16 -06:00
Chris Conlon
590b719212
JNI: sync WolfCryptError enum with latest wolfSSL error-crypt.h
2026-04-15 10:03:16 -06:00
Chris Conlon
7179d9cf7b
Update ChangeLog.md for 1.10 release
2026-04-15 10:03:13 -06:00
Chris Conlon
3017aca968
JNI/JCE: bump version to 1.10
2026-04-14 17:50:09 -06:00
Chris Conlon
43c6c8d201
Windows: add missing FFDHE defines to README, skip DH tests when unavailable
2026-04-14 17:50:06 -06:00
Ruby Martin
9515b27d61
Merge pull request #210 from cconlon/fenrir46
...
Fenrir fixes: buffer frees, struct resets, Gradle distribution SHA-256
2026-04-06 14:57:21 -06:00
Chris Conlon
45b3dfc2f8
Android: add Gradle wrapper distribution distributionSha256Sum (F-1947)
2026-04-06 11:21:36 -06:00