WolfSSL
/
wolfcrypt-jni
mirror of https://github.com/wolfSSL/wolfcrypt-jni.git
1
0
Fork 0
Code Issues Releases Wiki Activity
994 Commits
2 Branches
12 Tags
18 MiB
Commit Graph

355 Commits (c19e3f0fa12f5f4bcefc4dbe9c439aaaefcbbeba)

Author SHA1 Message Date
Chris Conlon c19e3f0fa1 F-5033: grow update() buffer by doubling in WolfCryptCipher 2026-07-30 17:17:53 -06:00
Chris Conlon 0cf08c9d15 F-5032: accumulate AES-GCM/CCM AAD with amortized growth in engineUpdateAAD 2026-07-29 15:06:09 -06:00
Chris Conlon 00d55d66cc F-4858: fail-fast validate DH public key in publicKeyDecodeX509 JNI import 2026-07-29 15:06:09 -06:00
Chris Conlon c5d0402877 F-4857: enforce BasicConstraints pathLenConstraint in Java fallback chain builder 2026-07-29 15:06:09 -06:00
Chris Conlon 399dd8719b F-4856: reject oversized and out-of-range DER lengths in getDERLength 2026-07-29 15:06:09 -06:00
Chris Conlon 9d2080d6cf F-4369 / F-4859 / F-4860: zero UTF-8 password copies at wolfJCE PBKDF2 call sites 2026-07-29 15:06:09 -06:00
Ruby Martin 4aca27554a
Merge pull request #248 from cconlon/fenrirJuly24 
Fenrir static analysis fixes
 2026-07-28 13:24:50 -05:00
Chris Conlon de7d9136f5 F-5803: close Ed25519 release split-lock race by freeing under one lock 2026-07-24 15:52:25 -06:00
Chris Conlon 1466e4f5aa F-5801 / F-5802: bound PEM input size in JNI PEM to DER conversion functions 2026-07-24 15:52:25 -06:00
Chris Conlon fc218ab9e5 F-5800: bound DER field lengths in WolfCryptDHPublicKey X.509 parsing 2026-07-24 15:52:25 -06:00
Chris Conlon 17ed413a29 F-5799: preserve caller-supplied RSASSA-PSS parameters across digest init 2026-07-24 15:52:25 -06:00
Chris Conlon 97842c5087 F-5798: reject non-byte-aligned AES-GCM/CCM tag lengths at Cipher init 2026-07-24 15:52:25 -06:00
Chris Conlon f1a011956e F-5797: bound DER field lengths in WolfCryptDHPrivateKey PKCS#8 parsing 2026-07-24 15:17:51 -06:00
Chris Conlon e314b928b5 F-5224 / F-5796: enforce 512-bit minimum DH prime in KeyPairGenerator spec init 2026-07-24 15:17:51 -06:00
Chris Conlon fc45f9ec30 F-5223: enforce PKIX maxPathLength as a per-iteration depth budget 2026-07-24 10:01:17 -06:00
Chris Conlon bda97d6618 F-5067: reject out-of-range DER lengths in decodeDERLengthWithOffset 2026-07-24 10:01:17 -06:00
Chris Conlon 98fbe75412 License: change license from GPLv2 to GPLv3 to match native wolfSSL 2026-07-22 13:43:57 -06:00
Chris Conlon 81082dbc47 WolfSSLCertManager: extend WolfObject to guarantee native library load 2026-07-21 14:34:23 -06:00
Chris Conlon 64a4214531 JCE: match SunJCE certpath disabledAlgorithms and AES-GCM IV reuse behavior, add PQ/DH key constraints 2026-07-16 10:35:03 -06:00
Chris Conlon a208384e23 JCE: only register PQC parameter sets compiled into native wolfSSL 2026-07-15 17:05:38 -06:00
Chris Conlon da22841006 JNI: load native library and run FIPS CASTs in WolfSSLCertManager static initializer 2026-07-15 16:20:20 -06:00
Ruby Martin da7139e415
Merge pull request #238 from cconlon/fenrirJuly26AiAudit2 
Fenrir fixes - WolfSSLKeyStore, WolfCryptPKIXCertPathValidator
 2026-07-09 12:00:00 -06:00
Ruby Martin 907d850afc
Merge pull request #237 from cconlon/fenrirJuly26AiAudit 
Fenrir fixes
 2026-07-09 10:41:16 -06:00
Chris Conlon 118af16df6 F-4363: use value equality for FIPS sigProvider check in engineValidate 2026-07-08 14:43:38 -06:00
Chris Conlon 49c51fbc6f F-4357 / F-4358 / F-4360 / F-4361: bound variable-length allocations in WKS entry decoders 2026-07-08 14:43:38 -06:00
Chris Conlon 801e0eed1a F-4356: commit WKS entries only after HMAC verification in engineLoad 2026-07-08 11:56:51 -06:00
Chris Conlon 865c769427 F-4354 / F-4355: bound encoded entry and HMAC sizes in WolfSSLKeyStore.engineLoad 2026-07-08 11:28:52 -06:00
Chris Conlon fee50d8b4f F-5906: enforce 1 < Y < p-1 range on DH public key in X.509 import 2026-07-07 15:59:54 -06:00
Chris Conlon 9094a1f274 F-5905: enforce 1 < Y < p-1 range on DH public key in KeyFactory import 2026-07-07 15:59:54 -06:00
Chris Conlon ac82b660c4 F-5888: hard-fail OCSP revoked status regardless of SOFT_FAIL 2026-07-07 15:59:54 -06:00
Chris Conlon 21cfcc0bae F-5887: close Curve25519 release split-lock race by freeing under one lock 2026-07-07 15:59:54 -06:00
Chris Conlon 866cca671f F-5795: match qualified jdk.certpath.disabledAlgorithms entries by algorithm name 2026-07-07 15:59:54 -06:00
Chris Conlon 8c7abe133c F-5222: reject AES-GMAC key and IV reuse in WolfCryptMac 2026-07-07 15:59:54 -06:00
Chris Conlon d6a4e0d9a2 F-5066: use a uniform exception for RSA PKCS#1 v1.5 unwrap failures 2026-07-07 15:59:54 -06:00
Chris Conlon 1e6bcb17cc F-5030: use constant-time PKCS#7 unpadding and uniform BadPaddingException 2026-07-07 15:59:53 -06:00
Chris Conlon abb9ae8071 F-5029: reject AES-GCM key and IV reuse for encryption in WolfCryptCipher 2026-07-07 15:59:53 -06:00
Chris Conlon 10e50c18e6 F-4855: validate peer ECC public key in WolfCryptKeyAgreement.engineDoPhase() 2026-07-07 14:24:18 -06:00
Chris Conlon 3e4f6aa1e2 F-4359: validate peer DH public key in WolfCryptKeyAgreement.engineDoPhase() 2026-07-07 13:02:54 -06:00
Chris Conlon 504b4e5970 JNI/JCE: add SLH-DSA (FIPS 205) to wolfCrypt JNI and wolfJCE 2026-07-06 10:43:24 -06:00
Chris Conlon ffa383becf JNI/JCE: add LMS (verify only) support to wolfCrypt JNI and wolfJCE 2026-07-01 14:15:13 -06:00
Chris Conlon c3eb060161 JNI/JCE: add XMSS/XMSS^MT (verify only) support to wolfCrypt JNI and wolfJCE 2026-07-01 09:24:07 -06:00
Chris Conlon 3dfd2420b6 JNI/JCE: add ML-KEM (FIPS 203) support to wolfCrypt JNI and wolfJCE 2026-06-25 11:37:07 -06:00
Ruby Martin 5f04f6ed21
Merge pull request #231 from cconlon/legacyRsaOidKeyFactory 
Accept legacy RSA OID (1.3.14.3.2.15) in RSA KeyFactory X.509 public key decode
 2026-06-17 14:33:22 -06:00
Ruby Martin 0470dae077
Merge pull request #230 from cconlon/keyFactoryEcOid 
Add OID alias for EC KeyFactory
 2026-06-16 09:23:52 -06:00
Ruby Martin f43914224c
Merge pull request #229 from cconlon/dhParamFixFips 
Validate DH parameter generation sizes in AlgorithmParameterGenerator engineInit()
 2026-06-15 16:59:38 -06:00
Chris Conlon 2f30d4cc7c JCE: accept legacy RSA OID (1.3.14.3.2.15) in RSA KeyFactory X.509 public key decode 2026-06-12 16:40:16 -06:00
Chris Conlon 88bc548392 JCE: add OID alias for EC KeyFactory 2026-06-12 16:23:23 -06:00
Chris Conlon 018712d5d9 JCE: validate DH parameter generation sizes in engineInit(), restrict to FFDHE sizes in FIPS mode 2026-06-12 16:13:54 -06:00
Chris Conlon a96d2ea401 JNI/JCE: add ML-DSA (FIPS 204) signature support to wolfCrypt JNI and wolfJCE 2026-06-11 14:49:29 -06:00
Ruby Martin 56fee0b8da
Merge pull request #216 from cconlon/rsaPkcs1BadPadding 
Throw BadPaddingException on RSA decrypt failures
 2026-05-14 15:48:28 -06:00