David Garske
7fadd4ed9f
Merge pull request #7595 from JacobBarthelmeh/static
...
Pull in some staticmemory features
2024-05-30 16:31:54 -07:00
David Garske
bb57c1de94
Merge pull request #7603 from lealem47/detect_cut
...
Fix cut detection in configure.ac
2024-05-30 15:42:55 -07:00
Lealem Amedie
ecef3c214c
Fix cut detection in configure.ac
2024-05-30 16:09:04 -06:00
JacobBarthelmeh
ebdc8b9a32
rename of macros, add descriptions, minor fixes
2024-05-30 14:48:52 -06:00
JacobBarthelmeh
511c403631
account for yes/no options
2024-05-29 15:59:51 -06:00
JacobBarthelmeh
6cca3a0d92
tie in static memory debug callback
2024-05-29 15:50:14 -06:00
JacobBarthelmeh
288fe430f5
tying in lean staticmemory build with --enable-staticmemory=small
2024-05-29 15:50:11 -06:00
Chris Conlon
8f1029f86d
Update --enable-jni to define SESSION_CERTS for wolfJSSE
2024-05-17 15:08:37 -06:00
David Garske
15af87af8f
Merge pull request #7555 from lealem47/forceSHA3
...
Force SHA3 on with FIPS V5
2024-05-17 12:30:20 -07:00
David Garske
391431c7d8
Merge pull request #7539 from bandi13/fixConversionPart2
...
Fix conversion part2
2024-05-17 12:29:46 -07:00
Lealem Amedie
54bf7fd5d9
Force SHA3 on with FIPS V5
2024-05-17 11:03:18 -06:00
Andras Fekete
412447ac41
Enable OPTION_CHECKING by default
...
This should halt `./configure` when an option is passed that is not recognized.
2024-05-15 16:54:55 -04:00
Andras Fekete
0eb11ff466
Standard way to set defaults
2024-05-15 15:19:42 -04:00
Andras Fekete
b83d8f0cf6
Make sure MAX_ECC_BITS >= MIN_ECC_BITS
2024-05-15 15:19:13 -04:00
Andras Fekete
35ef7f4093
There is no default defined. Expected to be unset
2024-05-15 15:16:24 -04:00
Daniel Pouzzner
4331bc092b
configure.ac: on armasm, disable ENABLED_AESXTS_STREAM by default (not implemented).
2024-05-14 19:24:27 -05:00
Daniel Pouzzner
3ad5ec4e0a
make --enable-linuxkm-lkcapi-register require --enable-experimental, except for the known-good --enable-linuxkm-lkcapi-register="xts(aes)".
2024-05-14 19:11:39 -05:00
Daniel Pouzzner
70d7b6e48b
add WOLFSSL_AESXTS_STREAM, --enable-aesxts-stream, wc_AesXtsEncryptStart(), wc_AesXtsDecryptStart(), wc_AesXtsEncryptUpdate(), wc_AesXtsDecryptUpdate(), and implement fixes in linuxkm/lkcapi_glue.c to use the streaming API when needed. also added support for 2*192 bit AES-XTS, needed for Linux kernel.
2024-05-14 19:11:38 -05:00
Sean Parkinson
e47f1d4190
LMS, XMSS: move code into wolfCrypt
...
Move implementations of LMS and XMSS into wolfCrypt and use by default.
2024-05-03 15:43:22 +10:00
Sean Parkinson
72d49964b9
Merge pull request #7379 from mrdeep1/enable-rpk
...
configure.ac: Add in --enable-rpk option
2024-05-01 08:44:08 +10:00
Daniel Pouzzner
0566584191
implement full support for --enable-intelasm --enable-linuxkm. also add --enable-curve25519=noasm to allow use of the existing NO_CURVED25519_X64 code path by the linuxkm build (fe_x25519_asm.S is not kernel-compatible).
2024-04-27 12:35:23 -05:00
Daniel Pouzzner
4cc27fa58b
rename WC_AES_C_DYNAMIC_FALLBACK to WC_C_DYNAMIC_FALLBACK.
2024-04-27 12:35:23 -05:00
Daniel Pouzzner
185f35287e
configure.ac: fix copyright year.
2024-04-25 22:44:28 -05:00
Colton Willey
7485e9935d
Update benchmark to only parse rsa size if keygen is enabled, update keygen option help in configure.ac
2024-04-25 11:46:18 -07:00
Jon Shallow
4a1df83b6f
configure.ac: Add in --enable-rpk option
...
By default RPK (RFC7250) support is not enabled, but is enabled when
--enable-rpk, --enable-all or --enable-dist is used.
Makes use of the HAVE_RPK compile time option.
Fix clang issue reported in tests/api.c during test suites
2024-04-23 21:30:21 +01:00
András Fekete
a75c2befb5
Add CUDA support ( #7436 )
...
* Redirect the AesEncrypt_C call to device
* Fix function declarations
* Force CC=nvcc with CUDA
* Don't let C++ mangle function names
* Add larger parallelization
* Add in memory copy to device
* `nvcc` does not support '-Wall' nor '-Wno-unused'
* Add in README.md
* Clean up script to output color coded data
* Fix Asymmetric cipher comparisons
* Add in standard output parsing in addition to the CSV
* Add option to output results in a CSV
---------
Co-authored-by: Andras Fekete <andras@wolfssl.com>
2024-04-23 08:26:27 -07:00
David Garske
3a89c452b3
Merge pull request #7454 from lealem47/stm32AesCtr
...
Fix for AES CTR on STM32
2024-04-22 10:04:06 -07:00
Lealem Amedie
eafa425019
Engine doesn't need NO_OLD_RNG_NAME
2024-04-19 16:15:38 -06:00
JacobBarthelmeh
ef153101b7
Merge pull request #7433 from SparkiDev/eddsa_fips_checks
...
EdDSA FIPS checks on public key
2024-04-18 14:34:31 -06:00
kaleb-himes
0bd5967093
Adjust FIPS version and default configuration
2024-04-18 08:41:05 -06:00
Daniel Pouzzner
fac834c80a
configure.ac: in setup for enable-all and enable-all-crypto with enable-32bit, fix inconsistency whereby SHAKE was enabled but SHA512 and SHA3 weren't; remove unneeded+unwanted ENABLED_32BIT conditional force-off of SHA512, SHA384, SHA3, ED25519 (harmonizes with FIPS v6).
2024-04-17 00:43:41 -05:00
Daniel Pouzzner
b2f594e84b
fixes for --enable-32bit CFLAGS=-m32 --enable-fips=v6 (fixes "#error ED448 requires SHAKE256").
2024-04-17 00:43:41 -05:00
Daniel Pouzzner
6e0a90190f
fixes for v5 and v6+ FIPS builds, including linuxkm v6+ builds.
2024-04-15 14:11:21 -05:00
kaleb-himes
0d83d0d199
Make wolfEntropy optional and bring settings.h in sync w/ master
2024-04-09 10:44:17 -06:00
kaleb-himes
afeb3f5358
More peer feedback
2024-04-09 09:48:33 -06:00
kaleb-himes
d40700b93d
Fix offset (whitespace)
2024-04-09 09:48:33 -06:00
kaleb-himes
84e5ccece5
Implement peer review feedback
2024-04-09 09:48:33 -06:00
kaleb-himes
8485f88688
Bring fips-dev inline with fips-ready
2024-04-09 09:48:33 -06:00
kaleb-himes
829d028d98
Add configure for wolfEngine with new module
2024-04-09 09:48:33 -06:00
kaleb_himes
81f5ac7f6c
SRTP-KDF FS Preview
2024-04-09 09:48:33 -06:00
JacobBarthelmeh
c768f76d5a
Merge pull request #7315 from fabiankeil/disable-3des-ciphers
...
Allow to enable DES3 support without the DES3 ciphers
2024-04-02 17:48:01 -06:00
Marco Oliverio
91ab6cafe0
configure.ac: enable ticket_nonce_malloc when using enable-curl
...
To support new session ticket nonce longer than MAX_TICKET_NONCE_STATIC_SZ. If
`--disable-ticket-nonce-malloc` is explicitly specified, the feature is not
enabled even if `--enable-curl` is specified.
2024-03-22 11:46:22 +01:00
JacobBarthelmeh
85601311a2
rework library versioning
2024-03-21 04:02:28 +07:00
JacobBarthelmeh
e5914effab
prepare for release 5.7.0
2024-03-20 19:32:22 +07:00
Daniel Pouzzner
a14edf3614
configure.ac: for --enable-linuxkm-lkcapi-register, remap "yes" to "all"; in output config summary, add ENABLED_LINUXKM_LKCAPI_REGISTER, and move ENABLED_EXPERIMENTAL and ENABLED_LINUXKM_BENCHMARKS to the "Features" section.
2024-03-18 13:52:06 -05:00
Daniel Pouzzner
924887b468
configure.ac and wolfssl/wolfcrypt/settings.h: implement --enable-experimental and add a WOLFSSL_EXPERIMENTAL_SETTINGS gate, and refactor "EXPERIMENTAL" features (all pq) to note and enforce requirement for --enable-experimental and WOLFSSL_EXPERIMENTAL_SETTINGS.
2024-03-15 16:15:26 -05:00
David Garske
36eec68571
Cleanup DES3 TLS descriptions and macro names.
2024-03-14 10:34:38 -07:00
David Garske
8fd8548142
Merge pull request #7318 from SparkiDev/kyber_1
...
Kyber: Implementation in wolfSSL
2024-03-14 09:57:52 -07:00
Daniel Pouzzner
3fd6af0cd2
Merge pull request #7283 from SparkiDev/lms
...
LMS: initial implementation
2024-03-14 01:48:57 -04:00
Sean Parkinson
25b2c664f4
Kyber: Implementation in wolfSSL
...
Put Kyber implementation into wolfSSL.
2024-03-14 09:14:50 +10:00