WolfSSL
/
wolfcrypt-jni
mirror of https://github.com/wolfSSL/wolfcrypt-jni.git
1
0
Fork 0
Code Issues Releases Wiki Activity
1,011 Commits
2 Branches
12 Tags
17 MiB
Commit Graph

1011 Commits (v1.11.0-stable)

Author SHA1 Message Date
Ruby Martin 786e606703
Merge pull request #251 from cconlon/v1.11 
Prep for 1.11 release
 2026-08-10 17:18:06 -05:00
Chris Conlon 5783b15189 Update ChangeLog.md for 1.11 release 2026-08-10 14:17:13 -06:00
Chris Conlon 0d76df308e Windows: add ERROR_QUEUE_PER_THREAD and HAVE_THREAD_LS to user_settings.h defines 2026-08-07 12:55:23 -06:00
Chris Conlon b5ad4c9321 Testing: bound latch waits and shut down thread pools in JNI tests 2026-08-06 15:28:33 -06:00
Chris Conlon 9ca89c4210 Testing: capture expected malformed-entry warnings in FilteredProviderFunctionalTest 2026-08-06 14:42:13 -06:00
Chris Conlon 1bbacd440b JNI/JCE: bump version to 1.11 2026-08-06 12:37:27 -06:00
Ruby Martin 7d8188f9ff
Merge pull request #246 from cconlon/filteredProvidersDefaultName 
Filtered providers: add useOriginalNames and additionalServices properties
 2026-07-31 18:23:48 -05:00
Ruby Martin f520b03a7f
Merge pull request #250 from cconlon/fenrirJuly30 
Fenrir fixes for WolfCryptCipher update()
 2026-07-31 16:54:33 -05:00
Chris Conlon dd3220f710 Filtered providers: add wolfssl.filtered.*.additionalServices properties 2026-07-31 14:23:28 -06:00
Ruby Martin a9cccc1761
Merge pull request #249 from cconlon/fenrirJuly27 
Fenrir fixes for wolfJCE key equality, KeyStore conversion, and EC key validation
 2026-07-31 11:53:52 -05:00
Chris Conlon c19e3f0fa1 F-5033: grow update() buffer by doubling in WolfCryptCipher 2026-07-30 17:17:53 -06:00
Ruby Martin 90c50b850b
Merge pull request #245 from cconlon/fenrirJuly23 
Fenrir correctness and robustness fixes
 2026-07-29 17:50:57 -05:00
Chris Conlon 7a1e4d0229 Testing: cold boot Android emulator to avoid snapshot restore race 2026-07-29 15:06:09 -06:00
Chris Conlon 0cf08c9d15 F-5032: accumulate AES-GCM/CCM AAD with amortized growth in engineUpdateAAD 2026-07-29 15:06:09 -06:00
Chris Conlon 00d55d66cc F-4858: fail-fast validate DH public key in publicKeyDecodeX509 JNI import 2026-07-29 15:06:09 -06:00
Chris Conlon c5d0402877 F-4857: enforce BasicConstraints pathLenConstraint in Java fallback chain builder 2026-07-29 15:06:09 -06:00
Chris Conlon 399dd8719b F-4856: reject oversized and out-of-range DER lengths in getDERLength 2026-07-29 15:06:09 -06:00
Chris Conlon 9d2080d6cf F-4369 / F-4859 / F-4860: zero UTF-8 password copies at wolfJCE PBKDF2 call sites 2026-07-29 15:06:09 -06:00
Chris Conlon 4d2cb5edbb F-4368: zero native password copy before release in PBKDF2 and PKCS12 PBKDF JNI 2026-07-29 14:46:25 -06:00
Chris Conlon 4043b2eaf1 F-4367: look up CertManager verify callback by store->userCtx, not list head 2026-07-29 14:46:25 -06:00
Chris Conlon b683fbcdb8 Testing: cold boot Android emulator to avoid snapshot restore race 2026-07-29 10:32:43 -06:00
Chris Conlon c59e889487 F-5908: validate EC public key point in ECPublicKeySpec conversion 2026-07-29 10:32:43 -06:00
Chris Conlon fa6028da87 F-5907: reject negative offset and zeroize secrets on all paths in KeyAgreement 2026-07-29 10:32:43 -06:00
Chris Conlon a250fc879e F-5891: buffer KeyStore stream for type detection in convertKeyStoreToWKS 2026-07-29 10:32:43 -06:00
Chris Conlon 1feacd6c71 JCE: avoid cross-key lock nesting in WolfCryptSecretKey.equals() 2026-07-29 10:32:43 -06:00
Chris Conlon c1339977e8 F-5890: avoid cross-key lock nesting in WolfCryptPBEKey.equals() 2026-07-29 10:32:43 -06:00
Ruby Martin 4aca27554a
Merge pull request #248 from cconlon/fenrirJuly24 
Fenrir static analysis fixes
 2026-07-28 13:24:50 -05:00
Ruby Martin 795ec78d8e
Merge pull request #247 from cconlon/fenrirJuly23_2 
Robustness fixes across wolfJCE PKIX, ASN.1, and JNI HMAC
 2026-07-27 17:49:21 -05:00
Ruby Martin 2a6b50264d
Merge pull request #244 from cconlon/ci-workflow-optimizations 
Reduce PR workflow time and runner usage
 2026-07-27 16:57:55 -05:00
Chris Conlon 04b6d5a9ea F-5889: minimize and clear pinned password buffer in wcKeyPemToDer 2026-07-24 15:52:25 -06:00
Chris Conlon de7d9136f5 F-5803: close Ed25519 release split-lock race by freeing under one lock 2026-07-24 15:52:25 -06:00
Chris Conlon 1466e4f5aa F-5801 / F-5802: bound PEM input size in JNI PEM to DER conversion functions 2026-07-24 15:52:25 -06:00
Chris Conlon fc218ab9e5 F-5800: bound DER field lengths in WolfCryptDHPublicKey X.509 parsing 2026-07-24 15:52:25 -06:00
Chris Conlon 17ed413a29 F-5799: preserve caller-supplied RSASSA-PSS parameters across digest init 2026-07-24 15:52:25 -06:00
Chris Conlon 97842c5087 F-5798: reject non-byte-aligned AES-GCM/CCM tag lengths at Cipher init 2026-07-24 15:52:25 -06:00
Chris Conlon f1a011956e F-5797: bound DER field lengths in WolfCryptDHPrivateKey PKCS#8 parsing 2026-07-24 15:17:51 -06:00
Chris Conlon e314b928b5 F-5224 / F-5796: enforce 512-bit minimum DH prime in KeyPairGenerator spec init 2026-07-24 15:17:51 -06:00
Chris Conlon fc45f9ec30 F-5223: enforce PKIX maxPathLength as a per-iteration depth budget 2026-07-24 10:01:17 -06:00
Chris Conlon bda97d6618 F-5067: reject out-of-range DER lengths in decodeDERLengthWithOffset 2026-07-24 10:01:17 -06:00
Chris Conlon 073df509e0 F-5034: zero native HMAC key copy before release in wc_HmacSetKey 2026-07-24 10:01:17 -06:00
Chris Conlon 406f6b7ec0 Filtered providers: add wolfssl.filtered.useOriginalNames property 2026-07-23 17:06:10 -06:00
Chris Conlon 582ceca610 Testing: fix flaky Android emulator boot from cached AVD snapshot 2026-07-23 15:44:04 -06:00
Chris Conlon d11076ea75 Testing: cache wolfSSL builds, cancel superseded PR runs, trim redundant job steps 2026-07-23 15:32:32 -06:00
Ruby Martin a02707230d
Merge pull request #241 from cconlon/gplv3 
Change license from GPLv2 to GPLv3 to match native wolfSSL
 2026-07-22 15:54:40 -05:00
Chris Conlon fdda2f88b9 IDE/Android: exclude ssl_api_hs.c, ssl_api_rw.c and ssl_err.c from CMake build, included inline by ssl.c 2026-07-22 13:43:57 -06:00
Chris Conlon 98fbe75412 License: change license from GPLv2 to GPLv3 to match native wolfSSL 2026-07-22 13:43:57 -06:00
Ruby Martin 564348564d
Merge pull request #242 from cconlon/certManObj 
Fix wolfJCE compatibility with current wolfSSL FIPS Ready
 2026-07-22 13:24:05 -05:00
Chris Conlon 38a72ec2d5 Testing: restore jdk.mlkem.pkcs8.encoding to expandedKey, not empty/seed 2026-07-21 16:57:11 -06:00
Chris Conlon 287675b9c7 Testing: assert KEK cache contents instead of timing in cache tests 2026-07-21 16:57:11 -06:00
Chris Conlon 078aec9189 JNI: add missing PRIVATE_KEY_UNLOCK/LOCK around PBKDF2 and key exports 2026-07-21 16:33:35 -06:00