8c7a9721d2
Merge pull request #211 from cconlon/v1.10
...
Prep for 1.10 release
2026-04-15 14:14:07 -06:00
4a0a1edbac
JCE: skip SHA1withECDSA registration for FIPS 186-5 (v7+)
...
FIPS 186-5 no longer allows SHA-1 for ECDSA signatures. Only register
SHA1withECDSA when not using FIPS or when using FIPS versions prior
to v7 which follow FIPS 186-4.
2026-04-15 10:03:16 -06:00
590b719212
JNI: sync WolfCryptError enum with latest wolfSSL error-crypt.h
2026-04-15 10:03:16 -06:00
7179d9cf7b
Update ChangeLog.md for 1.10 release
2026-04-15 10:03:13 -06:00
3017aca968
JNI/JCE: bump version to 1.10
2026-04-14 17:50:09 -06:00
43c6c8d201
Windows: add missing FFDHE defines to README, skip DH tests when unavailable
2026-04-14 17:50:06 -06:00
9515b27d61
Merge pull request #210 from cconlon/fenrir46
...
Fenrir fixes: buffer frees, struct resets, Gradle distribution SHA-256
2026-04-06 14:57:21 -06:00
45b3dfc2f8
Android: add Gradle wrapper distribution distributionSha256Sum (F-1947)
2026-04-06 11:21:36 -06:00
6c25b9ad03
JNI: zero tmp output buffer used with wc_CmacFinal() and wc_AesCmacGenerate() (F-1958, F-1959)
2026-04-06 11:21:36 -06:00
4963d3e2ba
JNI: zero der output buffer from wc_KeyPemToDer() before free (F-1957)
2026-04-06 11:21:36 -06:00
971a02bf3c
JNI: free internal Aes struct in Gmac use after done (F-1956)
2026-04-06 11:21:34 -06:00
db2c811c67
JNI: zero tmp HMAC output buffer from wc_HmacFinal() before return (F-1955)
2026-04-06 11:19:47 -06:00
db6f4f53c3
JNI: zero intermediate output buffer used with wc_Chacha_Process() before free (F-1954)
2026-04-06 11:19:45 -06:00
cf27deb97e
JNI: zero intermediate output buffer used with wc_curve25519_export_private_raw() and wc_curve25519_shared_secret() before free (F-1952, F-1953)
2026-04-06 11:16:13 -06:00
436f5064bd
JNI: zero intermediate output buffer used with wc_ed25519_export_private() and wc_ed25519_export_private_only() before free (F-1950, F-1951)
2026-04-06 11:16:13 -06:00
0c1b8b1c14
JNI: zero intermediate output buffer used with wc_RsaPrivateDecrypt() and wc_RsaPrivateDecrypt_ex() before free (F-1948, F-1949)
2026-04-06 11:16:11 -06:00
3fd84d3b86
JNI: reset ret back to 0 in success case of wc_DhPubKeyToDer(), prevents throwing extraneous exception (F-1934)
2026-04-06 09:43:56 -06:00
d0d655c728
JNI: reset ret back to 0 in success case of wc_DhPrivKeyToDer(), prevents throwing extraneous exception (F-1933)
2026-04-06 09:41:03 -06:00
bf703b93c4
Merge pull request #209 from cconlon/v1.10-android
...
Android test fixes and add Android FIPS Ready workflow
2026-04-02 15:19:58 -06:00
18cbeedf99
CI: update Ant version to 1.10.16 (1.10.15 removed from Apache CDN)
2026-04-02 10:46:57 -06:00
f949f66804
Tests: relax KEK cache timing assertion to avoid flaky CI failures
2026-04-02 10:46:57 -06:00
e8b5ee2f20
Android: replace jcenter() with mavenCentral(), migrate to AndroidX (F-1804)
2026-04-02 10:46:57 -06:00
9f85f39168
Security: pin Bouncy Castle version and verify SHA-256 hashes on download (F-1803)
2026-04-02 10:46:56 -06:00
a8add7d718
Tests: retry RSA key gen once on transient PRIME_GEN_E in FIPS mode
2026-04-02 10:46:56 -06:00
38ee4ae3b0
CI: add Android FIPS Ready workflow with two-pass hash and BKS support
2026-04-02 10:46:56 -06:00
3458cdfe68
Android: add BKS KeyStore conversion script and update README
2026-04-02 09:52:22 -06:00
c67e53631a
Tests: use Rule for ChaCha/Des3 availability instead of BeforeClass Assume
2026-04-02 09:52:22 -06:00
e8c6eea43f
Tests: handle ECC curves unsupported by SP math in KeyPairGenerator tests
2026-04-02 09:52:22 -06:00
dc5fcfd515
JCE: replace non-wolfJCE SecureRandom in FIPS mode instead of throwing
2026-04-01 17:50:14 -06:00
4f89edab0a
Merge pull request #208 from cconlon/rngAllocationReduction
...
Reduce WC_RNG allocations in WolfCryptCipher and WolfCryptDhParameterGenerator
2026-04-01 12:22:37 -06:00
13e83ebb3e
Merge pull request #207 from cconlon/fipsCallback
...
Improve FIPS error diagnostics
2026-04-01 12:13:19 -06:00
3958625983
JCE: remove redundant RSA struct allocation from InitializeNativeStructs()
2026-03-31 17:51:50 -06:00
4b8767c8f3
JCE: register default FIPS error callback in WolfCryptProvider
2026-03-31 16:45:23 -06:00
c20fb78ab8
JCE: include FIPS module status in FIPS_NOT_ALLOWED_E exceptions
2026-03-31 16:45:23 -06:00
961ae05989
JCE: fix threaded digest tests hanging on FIPS error
...
Add latch.countDown() and return in catch block to prevent
thread from falling through to null MessageDigest reference.
2026-03-31 16:45:23 -06:00
b96e9925f9
JCE: hoist Rng out of DH param generation retry loop
2026-03-31 16:28:56 -06:00
b4099e142a
JCE: lazy-init Rng in WolfCryptCipher, only allocate for RSA
2026-03-31 16:25:34 -06:00
4967e8958f
Merge pull request #206 from cconlon/fenrir323
...
Fenrir fixes
2026-03-31 11:47:25 -06:00
426a8a1454
JNI: use JNI_ABORT in RsaFlattenPublicKey early-exit releaseByteArray calls
2026-03-30 16:55:38 -06:00
d355480eb3
Android: exclude asn_orig.c from CMake build, compiled inline by asn.c
2026-03-30 16:55:38 -06:00
e1a05fff61
JNI: add ByteBuffer bounds validation in SHA/MD5/RNG native functions (F-1522)
2026-03-30 16:40:02 -06:00
4b862aa8ad
JNI: cast offset/length to jlong before addition in bounds checks (F-1521 / F-1523)
2026-03-30 16:40:02 -06:00
2b2444baea
JNI: free PKCS8_PRIV_KEY_INFO in X509CheckPrivateKey cleanup (F-1518)
2026-03-30 16:40:02 -06:00
93fa4c7f86
JCE: add missing aesCtr/aesOfb cleanup in WolfCryptCipher.finalize() (F-1520)
2026-03-30 16:40:02 -06:00
7c7a85223e
JNI: use constant-time comparison for GMAC tag verification (F-1519)
2026-03-30 16:40:02 -06:00
509435febe
JNI: fix wrong variable names in X509CheckPrivateKey #else branch (F-1517)
2026-03-30 10:53:46 -06:00
000b6c27b8
JNI: add missing return after throw in MD5 copy NULL check (F-1123)
2026-03-30 10:50:19 -06:00
0455dd1a85
JNI: add missing return after throw in SHA copy NULL checks (F-1122)
2026-03-30 10:50:19 -06:00
d856a798ad
JCE: zeroize encoded key array in WolfCryptPBEKey.destroy() (F-1126)
2026-03-30 10:50:19 -06:00
1750bf0db0
JNI: pass curveId to wc_ecc_import_private_key_ex in importPrivateRaw, add test (F-1125)
2026-03-30 10:50:19 -06:00
Ruby Martin
Chris Conlon