Commit Graph

  • 46293a4917
    Merge cf09f02f0d into 4d247047d2 Mark Atwood 2026-11-04 17:44:03 +0000
  • cf09f02f0d fix: validate DH/ECDH peers, RSA CRT, OAEP params Mark Atwood 2026-10-01 12:22:42 -0700
  • 9daaf45d59
    Merge b08f30867c into 4d247047d2 Mark Atwood 2026-11-03 00:39:14 +0000
  • b08f30867c feat: streaming AES-GCM encrypt in wolfJCE Mark Atwood 2026-10-01 12:22:42 -0700
  • 4d247047d2
    Merge pull request #303 from cconlon/v1.12 master v1.12.0-stable Ruby Martin 2026-10-29 13:12:50 -0500
  • b533e51b42 Update ChangeLog.md for 1.12 release Chris Conlon 2026-10-28 12:38:31 -0600
  • 9528033978 JNI/JCE: bump version to 1.12 Chris Conlon 2026-10-28 12:38:00 -0600
  • 18f40ccac6 JCE: Mark assumption-skipped tests as skipped in test timing output Chris Conlon 2026-10-28 16:54:18 -0600
  • 1c45da40fe
    Merge pull request #298 from cconlon/fenrirOct14 Ruby Martin 2026-10-26 15:56:03 -0500
  • b7a013b4d8
    Merge pull request #301 from cconlon/fenrirOct16_2 Ruby Martin 2026-10-26 11:41:49 -0500
  • f8f320184d
    Merge pull request #302 from cconlon/fenrirOct16_3 Ruby Martin 2026-10-26 11:37:24 -0500
  • c00dc5d043 F-15082: document that Fips.DhAgree() agree must hold the full DH shared secret Chris Conlon 2026-10-16 12:17:50 -0600
  • 4cd464faac F-15083: document the block-aligned AES-CBC update() length requirement in Aes Javadoc Chris Conlon 2026-10-16 12:13:19 -0600
  • 0b27a2f342 F-15070: correct LMS verify comment to say which returns map to false and which throw Chris Conlon 2026-10-16 11:57:01 -0600
  • 052e15e9be F-15069: correct SlhDsa class Javadoc to describe deferred and DER-detected parameter sets Chris Conlon 2026-10-16 11:45:19 -0600
  • 90f5d26a79 F-15068: document the length-prefixed encodedEntry wrapper in the WolfSSLKeyStore WKS format Javadoc Chris Conlon 2026-10-16 11:37:51 -0600
  • 26132ef22f F-15033: stop PBKDF2 JNI wrapper on GetByteArrayElements failure and keep the pending exception Chris Conlon 2026-10-14 16:28:14 -0600
  • 517e77fb1c F-15032: verify default-salt RSA-PSS through wc_RsaPSS_VerifyCheck() so the modulus bits set the salt length Chris Conlon 2026-10-14 16:22:52 -0600
  • b502e60b83 F-15031: reset AesCmac with the stored key after doFinal() frees the native context Chris Conlon 2026-10-14 16:07:20 -0600
  • 552d44e5d6 F-15030: free native digest contexts on re-init and release via MessageDigest.native_free() Chris Conlon 2026-10-14 15:53:53 -0600
  • c4f15cd8e6 F-15081: size DH shared secret buffer to fit p in wc_DhAgree JNI wrapper Chris Conlon 2026-10-14 15:30:26 -0600
  • bc8f091593
    Merge pull request #299 from cconlon/fenrirOct15 Ruby Martin 2026-10-23 17:01:00 -0500
  • 1967cc8c53
    Merge pull request #300 from cconlon/fenrirOct16 Ruby Martin 2026-10-23 16:13:13 -0500
  • acfa6061bd
    Merge pull request #297 from cconlon/rsaVerifySigLength Ruby Martin 2026-10-21 18:27:00 -0500
  • 237395526c
    Merge pull request #296 from cconlon/sigSignWrapNativeErrors Ruby Martin 2026-10-21 18:17:36 -0500
  • 2bda11366b
    Merge pull request #295 from cconlon/rsaKeyGenSpecChecks Ruby Martin 2026-10-19 12:37:14 -0500
  • b1091438ed F-15085: drop literal $JAVA_HOME and unset Windows DLL dirs from the ant test native library paths Chris Conlon 2026-10-16 12:32:24 -0600
  • d5598b7e7e F-15084: zeroize the JNI private key copy on the GetStringUTFChars() failure path in Ecc import Chris Conlon 2026-10-16 12:28:13 -0600
  • 92fa11de54 F-15067: document the wolfSSL 5.9.2 requirement in FeatureDetect.XmssEnabled() Javadoc Chris Conlon 2026-10-16 11:17:23 -0600
  • 658f990605 F-15066: document the wolfSSL 5.9.2 requirement in FeatureDetect.LmsEnabled() Javadoc Chris Conlon 2026-10-16 11:16:07 -0600
  • 022a1c6a59 F-15065: name WOLFSSL_HAVE_MLDSA alongside HAVE_DILITHIUM in FeatureDetect.MlDsaEnabled() Javadoc Chris Conlon 2026-10-16 11:14:25 -0600
  • 10234fd832 F-15064: correct AesGcm mallocNativeStruct() Javadoc to say allocation happens on first use Chris Conlon 2026-10-16 11:10:55 -0600
  • ec672f13ff F-15063: correct AesCcm mallocNativeStruct() Javadoc to say allocation happens on first use Chris Conlon 2026-10-16 11:07:39 -0600
  • 59721dd20c F-15062: reword PKCS12-to-WKS mapping comment in WolfCryptProvider to refer to PKCS12 instead of JKS Chris Conlon 2026-10-16 10:21:23 -0600
  • 2aafafd215 F-15061: correct padPKCS7() Javadoc for zero-length input and reject block sizes outside 1 to 255 Chris Conlon 2026-10-16 10:18:41 -0600
  • aaaef0423c F-15035: size DH key pair export buffers from p since wc_DhExportKeyPair() has no size query Chris Conlon 2026-10-16 10:13:04 -0600
  • e7751897a6 F-15036: pass qSz and a q buffer to wc_DhExportParamsRaw() in Dh.exportParams() so keys without q export p and g Chris Conlon 2026-10-15 16:58:03 -0600
  • e39642407e F-15034: pass a q buffer to wc_DhExportParamsRaw() in DH param generation so generateDhParams() returns p and g Chris Conlon 2026-10-15 16:52:54 -0600
  • 056ef7ff80
    Merge pull request #293 from cconlon/gcmShortIvFips Ruby Martin 2026-10-14 12:51:08 -0500
  • 81c25d523b JCE: reject RSA signatures not equal to modulus length in WolfCryptSignature.engineVerify() Chris Conlon 2026-10-13 16:49:44 -0600
  • 7ed69f7f66 JCE: throw SignatureException from WolfCryptSignature.engineSign() on native sign errors Chris Conlon 2026-10-13 16:12:12 -0600
  • 64d4d29015
    Merge pull request #294 from cconlon/kwDefaultIvJava17 Ruby Martin 2026-10-13 10:40:24 -0500
  • 8d1f6faadc JCE: reject RSA keygen sizes below RSA_MIN_SIZE and exponents below native minimum at initialize(), add Rsa.RSA_MIN_EXPONENT Chris Conlon 2026-10-08 16:22:10 -0600
  • a3aa98d71f JCE: match SunJCE AES Key Wrap default IV and null update() on Java 17+, add WolfCryptUtil.getJavaVersion() Chris Conlon 2026-10-08 15:12:48 -0600
  • 17ac9f28bf JNI/JCE: reject AES-GCM/GMAC IVs under 96 bits at init() on FIPS modules that mark them not approved, map WC_FIPS_NOT_APPROVED Chris Conlon 2026-10-07 16:00:41 -0600
  • 49f73bfc5f
    Merge pull request #292 from cconlon/rsaEncryptMaxLen Ruby Martin 2026-10-07 10:49:11 -0500
  • 9eed13fcd9
    Merge pull request #291 from cconlon/cipherParamDefaults Ruby Martin 2026-10-06 18:17:01 -0500
  • f905aed2b5
    Merge pull request #279 from cconlon/ed25519_448 Ruby Martin 2026-10-06 18:15:18 -0500
  • 001dc8be70 JNI/JCE: add WolfCrypt.getDigestSize(), throw IllegalBlockSizeException for RSA PKCS#1 and OAEP encrypt input over the max length Chris Conlon 2026-10-06 10:24:31 -0600
  • eb73f08971 JCE: allow AES-GCM decrypt init with null params and return default IVs from getParameters() before init Chris Conlon 2026-10-02 15:57:25 -0600
  • 02de5def5c JNI/JCE: add Ed25519/Ed448 support (Signature, KeyPairGenerator, KeyFactory) Chris Conlon 2026-09-10 12:30:12 -0600
  • 891e130a6f
    Merge pull request #272 from cconlon/aescfb Ruby Martin 2026-10-02 11:44:34 -0500
  • 383c8ecb30 JNI/JCE: add AES-CFB (CFB1/CFB8/CFB128) support Chris Conlon 2026-08-31 16:28:25 -0600
  • a706da5f1d
    Merge pull request #281 from cconlon/aesGcmIVDrbg Ruby Martin 2026-10-01 12:25:16 -0500
  • d2ceab08fd
    Merge pull request #269 from cconlon/aesKw Ruby Martin 2026-10-01 11:37:03 -0500
  • 74475051b3
    Merge pull request #282 from cconlon/fenrirSept17 Ruby Martin 2026-10-01 11:34:51 -0500
  • 6bd34f3d72
    Merge pull request #276 from cconlon/fenrirSept4 Ruby Martin 2026-10-01 11:14:19 -0500
  • 838552f3f3
    Merge pull request #273 from cconlon/fenrirSept1 Ruby Martin 2026-10-01 11:13:07 -0500
  • 1d44083b70 F-12960: guard AES-CCM JNI array releases on the acquired pointers Chris Conlon 2026-09-17 16:51:32 -0600
  • 2805426353 F-12959: guard AES-GCM JNI array releases on the acquired pointers Chris Conlon 2026-09-17 16:47:37 -0600
  • 69e4bb6482 F-12953: include buffered bytes in the Cipher update() output size pre-check Chris Conlon 2026-09-17 16:43:08 -0600
  • 4a7608c875 F-13680: remove the environment dump from the rpm packaging target Chris Conlon 2026-09-17 16:37:05 -0600
  • bffea1911a F-12958: gate PKCS12 PBKDF on HAVE_PKCS12 to match wolfSSL and FeatureDetect Chris Conlon 2026-09-17 16:34:25 -0600
  • 7f86f5fa52 JNI/JCE: generate the AES-GCM IV inside wolfCrypt for encrypt init without parameters Chris Conlon 2026-09-17 14:06:29 -0600
  • c0788acc97 F-12193: validate PBKDF password and salt lengths against their arrays Chris Conlon 2026-09-04 15:23:46 -0600
  • eb1b385319 F-12192: read fixed-size WKS bodies with readFully in engineLoad Chris Conlon 2026-09-04 15:19:49 -0600
  • ef6fdcd4ce F-11219: zeroize copied private outputs in the RSA CRT export wrapper Chris Conlon 2026-09-04 15:12:46 -0600
  • 7d428314fc F-11218: zeroize the copied output array in the RNG byte-array wrapper Chris Conlon 2026-09-04 15:08:27 -0600
  • 1b60d87524 F-11217: zeroize copied sensitive arrays in FIPS byte-array wrappers Chris Conlon 2026-09-04 15:04:59 -0600
  • b61cdc1fb7 F-11216: zeroize copied key arrays in AES mode setters before release Chris Conlon 2026-09-04 14:50:20 -0600
  • c4627dd8dc F-11214: normalize NULL SPKI parameters in ML-DSA cert and key matching Chris Conlon 2026-09-04 14:45:34 -0600
  • 52237323f2 F-10002: detach native threads attached by the FIPS error callback Chris Conlon 2026-09-04 14:35:13 -0600
  • 9920c8d4ef F-10001: reject undersized hash arrays in MD5 byte-array native final Chris Conlon 2026-09-04 14:16:41 -0600
  • 8a9d393021 F-10007: regenerate Android Gradle wrapper jar with Gradle 8.4 Chris Conlon 2026-09-04 14:06:14 -0600
  • 77422c71b9 F-12167: return false for invalid RSA-PSS signatures instead of throwing Chris Conlon 2026-09-01 10:44:18 -0600
  • d2a09d68c8 F-12166: preserve JNI exceptions and avoid unresolved field ID in getNativeStruct Chris Conlon 2026-09-01 10:25:38 -0600
  • 61d9e8370c F-12165: validate AES-GMAC tag length in WolfCryptMac init Chris Conlon 2026-09-01 10:19:53 -0600
  • c396f9cb79 F-12189: stop logging FIPS key material, secrets, and plaintext in debug builds Chris Conlon 2026-09-01 10:12:30 -0600
  • 6e3a764e10 F-12168: correct OCSP response success sentinel in doc comment Chris Conlon 2026-09-01 10:02:09 -0600
  • ed33516543 JNI/JCE: add AES key wrap Chris Conlon 2026-08-27 17:12:35 -0600
  • e66bd79d87
    Merge pull request #289 from cconlon/androidFipsReadyv7 Ruby Martin 2026-09-30 16:47:14 -0500
  • 8c6feb4006 JNI/JCE: add Dh.enable()/disable(), make FeatureDetect.DhEnabled() aware of FIPS v7 runtime DH state Chris Conlon 2026-09-30 11:21:23 -0600
  • a5898b3ddd Android: align native libs to 16 KB pages, update FIPS Ready core hashes to FIPS v7 HMAC-SHA-512 length Chris Conlon 2026-09-29 15:14:01 -0600
  • 8abc769080
    Merge pull request #288 from cconlon/fenrirSept24 Ruby Martin 2026-09-29 17:30:25 -0500
  • 79d54f4498
    Merge pull request #287 from cconlon/fenrirSept22 Ruby Martin 2026-09-29 17:27:24 -0500
  • 28295c0bf9
    Merge pull request #280 from cconlon/rsaEcbNoPadding Ruby Martin 2026-09-29 16:57:00 -0500
  • e43543bc16
    Merge pull request #285 from cconlon/fenrirSept18_3 Ruby Martin 2026-09-29 11:40:04 -0500
  • 3518c74964
    Merge pull request #284 from cconlon/fenrirSept18_2 Ruby Martin 2026-09-28 17:14:17 -0500
  • 71159d29a5
    Merge pull request #283 from cconlon/fenrirSept18 Ruby Martin 2026-09-25 17:15:43 -0500
  • 78644d20cf
    Merge pull request #271 from cconlon/fenrirAug31 Ruby Martin 2026-09-25 14:11:54 -0500
  • fd7fdb17de F-5062: decode translated RSA private keys without an unzeroizable PKCS8EncodedKeySpec copy Chris Conlon 2026-09-25 09:38:26 -0600
  • f383559da6 F-5059: decode translated EC private keys without an unzeroizable PKCS8EncodedKeySpec copy Chris Conlon 2026-09-25 09:13:39 -0600
  • 10a0d9de27 F-13006: anchor the keystore update script to its own directory and quote its keystore names Chris Conlon 2026-09-22 16:42:37 -0600
  • 709b6be791 F-13005: anchor the WKS keytool print script to its own directory and quote its arguments Chris Conlon 2026-09-22 16:37:02 -0600
  • c04c87939a
    Merge pull request #275 from cconlon/fenrirSept1_2 Ruby Martin 2026-09-23 17:36:35 -0500
  • 8e2a4144d9
    Merge pull request #286 from cconlon/fenrirSept18_4 Ruby Martin 2026-09-22 17:24:23 -0500
  • 4a8dfcf178 F-9999: validate backing buffer sizes in FIPS JNI wrappers Chris Conlon 2026-09-02 10:25:08 -0600
  • 356fffa85b F-12191: bound PBKDF2 iteration count when loading untrusted WKS streams Chris Conlon 2026-09-01 14:39:16 -0600
  • 21150830b3 F-12190: reject negative WKS certificate chain count before allocation Chris Conlon 2026-09-01 14:25:55 -0600
  • fba7e5a62e F-12170: correct public-DER size-query comment in RsaKeyToPublicDer Chris Conlon 2026-09-01 14:17:32 -0600