Chris Conlon
|
1909401fd9
|
F-3763: fail closed when no SHA-256 tool is available in CryptoBenchmark.sh
|
2026-09-11 17:09:39 -06:00 |
Chris Conlon
|
399e3f4b6f
|
F-6154: zeroize native ML-DSA seed and private key copies before JNI release
|
2026-09-11 17:09:39 -06:00 |
Chris Conlon
|
3b1f9031fa
|
F-6153: zeroize full RSA decrypt output buffer before free
|
2026-09-11 17:09:39 -06:00 |
Chris Conlon
|
4382551949
|
F-5992: throw AEADBadTagException on AES-CCM tag failure
|
2026-09-11 17:09:39 -06:00 |
Chris Conlon
|
d3d9bdf218
|
F-5893: zeroize previous HMAC key on re-key in setKey
|
2026-09-11 17:09:39 -06:00 |
Chris Conlon
|
fae783ff7d
|
F-5892: enforce minimum DH prime size on KeyFactory import
|
2026-09-11 17:09:39 -06:00 |
Chris Conlon
|
67bad31ced
|
F-5396: validate 3DES key and IV length in native setKey wrapper
|
2026-09-11 17:09:39 -06:00 |
Chris Conlon
|
69d6555bda
|
F-5395: validate AES IV length in native setKey wrappers
|
2026-09-11 17:08:56 -06:00 |
Chris Conlon
|
36dd5f1664
|
F-5226: zeroize native ChaCha key copy before JNI release
|
2026-09-11 17:07:35 -06:00 |
Chris Conlon
|
39974a4f62
|
F-5225: validate ChaCha IV length before native SetIV read
|
2026-09-11 17:07:35 -06:00 |
Ruby Martin
|
b8392ced50
|
Merge pull request #265 from cconlon/fenrirAug24
Fenrir fixes across AES, ECC, RSA, SLH-DSA, DH, and PKIX revocation
|
2026-09-11 17:11:37 -05:00 |
Chris Conlon
|
416a321fc2
|
Skip WKS-as-PKCS12 file test on Android
|
2026-09-10 16:44:19 -06:00 |
Chris Conlon
|
05b0d9c62f
|
JNI: Report no long PSS salt support on FIPS v7 and later
|
2026-09-10 15:01:50 -06:00 |
Chris Conlon
|
5d4a9ce24d
|
JNI: Use SHA-384 as the 192F mismatched pre-hash in SlhDsaTest
|
2026-09-10 15:01:50 -06:00 |
Chris Conlon
|
56d2f5f1f6
|
F-11213: evaluate all keySize disabled-algorithm operators
|
2026-09-10 15:01:50 -06:00 |
Chris Conlon
|
2808beda3b
|
F-11206: return early on failed JNI array acquisition in CertManager buffer wrappers
|
2026-09-10 15:01:50 -06:00 |
Chris Conlon
|
ee2c2eeed6
|
F-11204: encode RSA DER key before the PKCS#8 size query
|
2026-09-10 15:01:50 -06:00 |
Chris Conlon
|
2d4e0a8c97
|
F-11203: guard SLH-DSA private buffer zeroization with ForceZero fallback macro
|
2026-09-10 15:01:50 -06:00 |
Chris Conlon
|
96d9a23324
|
F-11202: report ECC make_key_ex argument errors distinctly from curve errors
|
2026-09-10 15:01:50 -06:00 |
Chris Conlon
|
a3da1774cc
|
F-11212: fail closed when PREFER_CRLS with NO_FALLBACK has no CRL source
|
2026-09-10 15:01:50 -06:00 |
Chris Conlon
|
ec8d69466c
|
F-11205: free embedded AES in AesGmac native release
|
2026-09-10 15:01:50 -06:00 |
Chris Conlon
|
33ae375f02
|
F-11215: stop logging DH shared secret and private key in debug output
|
2026-09-10 15:01:50 -06:00 |
Chris Conlon
|
a0e320685d
|
F-11201: always use AES encryption schedule for AES-OFB key setup
|
2026-09-10 15:01:50 -06:00 |
Ruby Martin
|
44be422765
|
Merge pull request #278 from cconlon/certUpdate2026
Update expired example certs, keys, and keystores
|
2026-09-10 11:52:12 -05:00 |
Chris Conlon
|
e9fa6c4b29
|
Testing: skip the whole certs tree in the GitHub workflow line length check
|
2026-09-09 17:42:51 -06:00 |
Chris Conlon
|
086c8ef152
|
Update expired example certs, keys, and keystores
|
2026-09-09 13:22:32 -06:00 |
Ruby Martin
|
67072b3a46
|
Merge pull request #263 from cconlon/fenrirAug20
Zeroize native private key copies before JNI byte array release
|
2026-08-25 13:18:22 -05:00 |
Ruby Martin
|
986e391ec9
|
Merge pull request #262 from cconlon/fenrirAug19
Fixes for key material zeroization across JCE and JNI, PBKDF input validation
|
2026-08-21 17:13:22 -05:00 |
Ruby Martin
|
61968eb2ce
|
Merge pull request #261 from cconlon/fenrirAug18
Fixes for JNI error paths, key material zeroization, and JCE hardening
|
2026-08-21 15:29:11 -05:00 |
Chris Conlon
|
bd21987551
|
F-5053 / F-5054 / F-5055: zeroize native CMAC key copies before JNI release
|
2026-08-20 15:47:12 -06:00 |
Chris Conlon
|
e8c71b3934
|
F-5050 / F-5051 / F-5052: zeroize native GMAC key copies before JNI release
|
2026-08-20 15:47:12 -06:00 |
Chris Conlon
|
fbd259aac1
|
F-5049: zeroize native AES-CCM key copy before JNI release
|
2026-08-20 15:47:12 -06:00 |
Chris Conlon
|
7f333310cb
|
F-5048: zeroize native AES-GCM key copy before JNI release
|
2026-08-20 15:47:12 -06:00 |
Chris Conlon
|
0fae3bc840
|
F-5047: zeroize native 3DES key copy before JNI release
|
2026-08-20 15:47:12 -06:00 |
Chris Conlon
|
e166a6a633
|
F-5042 / F-5043 / F-5044 / F-5045 / F-5046: zeroize native DH and RSA private key copies before JNI release
|
2026-08-20 15:47:12 -06:00 |
Chris Conlon
|
5506469ed6
|
F-5041: zeroize native Ed25519 private key copies before JNI release
|
2026-08-20 15:43:51 -06:00 |
Chris Conlon
|
f3c6ba590a
|
F-5040: zeroize native Curve25519 private key copies before JNI release
|
2026-08-20 15:43:51 -06:00 |
Chris Conlon
|
3a1199be7a
|
F-5039 / F-5056: zeroize native ECC private key copies before JNI release
|
2026-08-20 15:43:51 -06:00 |
Chris Conlon
|
82503a3060
|
F-5037: reject negative key length in PKCS12 PBKDF JNI wrapper
|
2026-08-19 16:42:28 -06:00 |
Chris Conlon
|
de66edb920
|
F-5035: zeroize PKCS8 spec copy in RSA KeyFactory private key decode
|
2026-08-19 16:42:28 -06:00 |
Chris Conlon
|
8d4e14264a
|
F-4865: zeroize peer key copies in WolfCryptPBEKey equals
|
2026-08-19 16:42:28 -06:00 |
Chris Conlon
|
7ebdb0dbe4
|
F-4864: zeroize intermediate output copy in two-arg engineDoFinal
|
2026-08-19 15:26:27 -06:00 |
Chris Conlon
|
236fb1809a
|
F-4863: zeroize plaintext input buffer in Cipher wolfCryptFinal
|
2026-08-19 15:26:27 -06:00 |
Chris Conlon
|
96ce0644b7
|
F-4862: zeroize digest and recovered sig buffers in engineVerify
|
2026-08-19 15:05:22 -06:00 |
Chris Conlon
|
0ce50852c7
|
F-4861: zeroize PKCS8 spec copy in EC KeyFactory private key decode
|
2026-08-19 15:05:22 -06:00 |
Chris Conlon
|
77f4e65270
|
F-4439: zeroize generated key bytes in KeyGenerator engineGenerateKey
|
2026-08-19 15:05:22 -06:00 |
Chris Conlon
|
97e1229fa0
|
F-4370: zeroize native PKCS8 key copy in X509CheckPrivateKey
|
2026-08-19 15:05:22 -06:00 |
Chris Conlon
|
c4f94d1314
|
F-4365: zeroize digest buffers in Signature engineSign
|
2026-08-19 15:05:22 -06:00 |
Chris Conlon
|
2abd0fd33a
|
F-4364: override releaseNativeStruct in Hmac to serialize native free
|
2026-08-19 11:46:09 -06:00 |
Chris Conlon
|
25b4ceb8cf
|
F-4362: escape CR and LF in wolfJCE debug log messages
|
2026-08-19 11:46:09 -06:00 |