Commit Graph

1102 Commits (1909401fd9a3e56244cef46eb672bd417f136fef)

Author SHA1 Message Date
Chris Conlon 1909401fd9 F-3763: fail closed when no SHA-256 tool is available in CryptoBenchmark.sh 2026-09-11 17:09:39 -06:00
Chris Conlon 399e3f4b6f F-6154: zeroize native ML-DSA seed and private key copies before JNI release 2026-09-11 17:09:39 -06:00
Chris Conlon 3b1f9031fa F-6153: zeroize full RSA decrypt output buffer before free 2026-09-11 17:09:39 -06:00
Chris Conlon 4382551949 F-5992: throw AEADBadTagException on AES-CCM tag failure 2026-09-11 17:09:39 -06:00
Chris Conlon d3d9bdf218 F-5893: zeroize previous HMAC key on re-key in setKey 2026-09-11 17:09:39 -06:00
Chris Conlon fae783ff7d F-5892: enforce minimum DH prime size on KeyFactory import 2026-09-11 17:09:39 -06:00
Chris Conlon 67bad31ced F-5396: validate 3DES key and IV length in native setKey wrapper 2026-09-11 17:09:39 -06:00
Chris Conlon 69d6555bda F-5395: validate AES IV length in native setKey wrappers 2026-09-11 17:08:56 -06:00
Chris Conlon 36dd5f1664 F-5226: zeroize native ChaCha key copy before JNI release 2026-09-11 17:07:35 -06:00
Chris Conlon 39974a4f62 F-5225: validate ChaCha IV length before native SetIV read 2026-09-11 17:07:35 -06:00
Ruby Martin b8392ced50
Merge pull request #265 from cconlon/fenrirAug24
Fenrir fixes across AES, ECC, RSA, SLH-DSA, DH, and PKIX revocation
2026-09-11 17:11:37 -05:00
Chris Conlon 416a321fc2 Skip WKS-as-PKCS12 file test on Android 2026-09-10 16:44:19 -06:00
Chris Conlon 05b0d9c62f JNI: Report no long PSS salt support on FIPS v7 and later 2026-09-10 15:01:50 -06:00
Chris Conlon 5d4a9ce24d JNI: Use SHA-384 as the 192F mismatched pre-hash in SlhDsaTest 2026-09-10 15:01:50 -06:00
Chris Conlon 56d2f5f1f6 F-11213: evaluate all keySize disabled-algorithm operators 2026-09-10 15:01:50 -06:00
Chris Conlon 2808beda3b F-11206: return early on failed JNI array acquisition in CertManager buffer wrappers 2026-09-10 15:01:50 -06:00
Chris Conlon ee2c2eeed6 F-11204: encode RSA DER key before the PKCS#8 size query 2026-09-10 15:01:50 -06:00
Chris Conlon 2d4e0a8c97 F-11203: guard SLH-DSA private buffer zeroization with ForceZero fallback macro 2026-09-10 15:01:50 -06:00
Chris Conlon 96d9a23324 F-11202: report ECC make_key_ex argument errors distinctly from curve errors 2026-09-10 15:01:50 -06:00
Chris Conlon a3da1774cc F-11212: fail closed when PREFER_CRLS with NO_FALLBACK has no CRL source 2026-09-10 15:01:50 -06:00
Chris Conlon ec8d69466c F-11205: free embedded AES in AesGmac native release 2026-09-10 15:01:50 -06:00
Chris Conlon 33ae375f02 F-11215: stop logging DH shared secret and private key in debug output 2026-09-10 15:01:50 -06:00
Chris Conlon a0e320685d F-11201: always use AES encryption schedule for AES-OFB key setup 2026-09-10 15:01:50 -06:00
Ruby Martin 44be422765
Merge pull request #278 from cconlon/certUpdate2026
Update expired example certs, keys, and keystores
2026-09-10 11:52:12 -05:00
Chris Conlon e9fa6c4b29 Testing: skip the whole certs tree in the GitHub workflow line length check 2026-09-09 17:42:51 -06:00
Chris Conlon 086c8ef152 Update expired example certs, keys, and keystores 2026-09-09 13:22:32 -06:00
Ruby Martin 67072b3a46
Merge pull request #263 from cconlon/fenrirAug20
Zeroize native private key copies before JNI byte array release
2026-08-25 13:18:22 -05:00
Ruby Martin 986e391ec9
Merge pull request #262 from cconlon/fenrirAug19
Fixes for key material zeroization across JCE and JNI, PBKDF input validation
2026-08-21 17:13:22 -05:00
Ruby Martin 61968eb2ce
Merge pull request #261 from cconlon/fenrirAug18
Fixes for JNI error paths, key material zeroization, and JCE hardening
2026-08-21 15:29:11 -05:00
Chris Conlon bd21987551 F-5053 / F-5054 / F-5055: zeroize native CMAC key copies before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon e8c71b3934 F-5050 / F-5051 / F-5052: zeroize native GMAC key copies before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon fbd259aac1 F-5049: zeroize native AES-CCM key copy before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon 7f333310cb F-5048: zeroize native AES-GCM key copy before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon 0fae3bc840 F-5047: zeroize native 3DES key copy before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon e166a6a633 F-5042 / F-5043 / F-5044 / F-5045 / F-5046: zeroize native DH and RSA private key copies before JNI release 2026-08-20 15:47:12 -06:00
Chris Conlon 5506469ed6 F-5041: zeroize native Ed25519 private key copies before JNI release 2026-08-20 15:43:51 -06:00
Chris Conlon f3c6ba590a F-5040: zeroize native Curve25519 private key copies before JNI release 2026-08-20 15:43:51 -06:00
Chris Conlon 3a1199be7a F-5039 / F-5056: zeroize native ECC private key copies before JNI release 2026-08-20 15:43:51 -06:00
Chris Conlon 82503a3060 F-5037: reject negative key length in PKCS12 PBKDF JNI wrapper 2026-08-19 16:42:28 -06:00
Chris Conlon de66edb920 F-5035: zeroize PKCS8 spec copy in RSA KeyFactory private key decode 2026-08-19 16:42:28 -06:00
Chris Conlon 8d4e14264a F-4865: zeroize peer key copies in WolfCryptPBEKey equals 2026-08-19 16:42:28 -06:00
Chris Conlon 7ebdb0dbe4 F-4864: zeroize intermediate output copy in two-arg engineDoFinal 2026-08-19 15:26:27 -06:00
Chris Conlon 236fb1809a F-4863: zeroize plaintext input buffer in Cipher wolfCryptFinal 2026-08-19 15:26:27 -06:00
Chris Conlon 96ce0644b7 F-4862: zeroize digest and recovered sig buffers in engineVerify 2026-08-19 15:05:22 -06:00
Chris Conlon 0ce50852c7 F-4861: zeroize PKCS8 spec copy in EC KeyFactory private key decode 2026-08-19 15:05:22 -06:00
Chris Conlon 77f4e65270 F-4439: zeroize generated key bytes in KeyGenerator engineGenerateKey 2026-08-19 15:05:22 -06:00
Chris Conlon 97e1229fa0 F-4370: zeroize native PKCS8 key copy in X509CheckPrivateKey 2026-08-19 15:05:22 -06:00
Chris Conlon c4f94d1314 F-4365: zeroize digest buffers in Signature engineSign 2026-08-19 15:05:22 -06:00
Chris Conlon 2abd0fd33a F-4364: override releaseNativeStruct in Hmac to serialize native free 2026-08-19 11:46:09 -06:00
Chris Conlon 25b4ceb8cf F-4362: escape CR and LF in wolfJCE debug log messages 2026-08-19 11:46:09 -06:00