Correct reassembly logic in sniffer. Fix handshake message size in BuildCertificateStatus. Ensure MTU is set properly when using SCTP with DTLS. Improve SCTP examples.
fe_448.c: small code corner case in reductions
eccsi.c: don't modify ssk field of key on verify
wc_mlkem_poly.c: When compiled for Intel assembly but not AVX2 - no assembly code used - the initialization of the SHAKE is needed in derive secret. Always initialize as it doesn't cost much.
sp_c32.c/sp_c64.c: corner case of div - when r1 is negative is really is going meant to be 0
sp_c32.c: Fix TOOM-3 mul and sqr to handle over large inputs.
ed448.c: check non-canonical keys better
Add Enable/DisableNormalMasterSecret APIs to enforce EMS requirement at runtime. Disable server EMS when DisableExtendedMasterSecret is called, not just client EMS.
Fix max MTU logic in added test
Fix client and server SCTP argument. They should not be setting UDP. This was causing ./configure --enable-sctp --enable-dtls-mtu to fail on master.
A new API test registers a finder and checks that a context with no device id is routed to the device by the finder and not routed once the finder is gone, and the os-check matrix gains an ECIES entry with the finder on so the test runs.
A context starts in software and only wc_ecc_ctx_set_dev_id() sends the ECIES callback and the KDF, AES and HMAC steps to a device; tests, benchmark, docs and the os-check matrix are updated to match.
The compat macro cast the caller's callback to WOLFSSL_TLSEXT_DEBUG_CB.
Calling a function through an incompatible pointer type is undefined
(C17 6.3.2.3 p8), and the cast silenced the diagnostic that would have
caught a mismatch.
WOLFSSL_TLSEXT_DEBUG_CB already matches OpenSSL's callback, which takes
const unsigned char *data, so the macro can be a plain alias. A callback
spelled the OpenSSL way now compiles unchanged and a mismatched one is a
compile error instead of undefined behaviour at run time.
Test a callback declared with OpenSSL's spelling through the macro.
Disable peerAuthGood when rejecting ticket due to EMS being disabled
Ensure that if EMS is disabled, sessions with EMS are not used
Add client resumption test and extend server resumption test to optionally use session tickets
Check as early in the connection as possible
Abort resumption rather than fully aborting connection when EMS is disabled
Make version check around haveEMS consistent
Clear premaster secret when EMS check fails
Update documentation
JacobBarthelmeh
Kareem
jordan
Sean Parkinson
night1rider
Eric Blankenhorn
Juliusz Sosinowicz