 John Safranek
|
9b5f8c84b0
Change the WIN10 project files to build for FIPS v5.
|
3 years ago |
 Daniel Pouzzner
|
073bef579b
linuxkm: add missing #ifdef OPENSSL_EXTRA around openssl includes in module_exports.c.template, and add an assert to configure.ac disallowing linuxkm+opensslextra.
|
3 years ago |
|
Daniel Pouzzner
|
ac8fbe3fbd
ssl.c: fix a couple trivial rebase errors.
|
3 years ago |
|
John Safranek
|
6e9f9c8fe8
Update the Windows user_settings for recent updates.
|
3 years ago |
|
Daniel Pouzzner
|
7915f6acb0
linuxkm: add the remainder of known needed SAVE_VECTOR_REGISTERS() wrappers to PK algs, add DEBUG_VECTOR_REGISTERS_{EXIT,ABORT}_ON_FAIL options; add a slew of ASSERT_SAVED_VECTOR_REGISTERS() to sp_x86_64.c (autogenerated, separate scripts commit to follow).
|
3 years ago |
|
John Safranek
|
75df6508e6
Add a read enable for private keys when in FIPS mode.
|
3 years ago |
|
Daniel Pouzzner
|
1d07034fb9
linuxkm: fix line length in types.h, and add #ifdef _MSC_VER #pragma warning(disable: 4127) to work around MSC bug re "conditional expression is constant"; fix flub in ecc.c.
|
3 years ago |
|
Daniel Pouzzner
|
62c1bcae8a
linuxkm: {SAVE,RESTORE}_VECTOR_REGISTERS() wrappers around RSA, DH, and ECC routines that might use sp-asm.
|
3 years ago |
|
Daniel Pouzzner
|
0eb76bcfd8
linuxkm: add missing RESTORE_VECTOR_REGISTERS() in wolfcrypt/src/poly1305.c:wc_Poly1305Update().
|
3 years ago |
|
Daniel Pouzzner
|
85a8c06062
linuxkm: add DEBUG_VECTOR_REGISTER_ACCESS (debug feature switch), ASSERT_SAVED_VECTOR_REGISTERS, and ASSERT_RESTORED_VECTOR_REGISTERS macros, and move the fallback no-op definitions of the SAVE_VECTOR_REGISTERS and RESTORE_VECTOR_REGISTERS to types.h. also fixed several ASCII TAB characters in types.h.
|
3 years ago |
|
Daniel Pouzzner
|
e0395c6441
linuxkm: in wolfcrypt/src/sha{256,512}.c, remove {SAVE,RESTORE}_VECTOR_REGISTERS() wrappers around AVX implementations, as this needs to be refactored for efficiency and the underlying assembly is not yet kernel-compatible.
|
3 years ago |
|
Daniel Pouzzner
|
ad4c200cd2
linuxkm: wolfcrypt/src/memory.c: in {save,restore}_vector_registers_x86(), allow for recursive calls (some crypto calls are recursive).
|
3 years ago |
|
Daniel Pouzzner
|
fc73c6dbea
linuxkm: fix Makefile to properly pivot module signature on CONFIG_MODULE_SIG==y; remove not-yet-kernel-compatible asm files from the ASFLAGS_FPU_DISABLE_SIMD_ENABLE list, matching the OBJECT_FILES_NON_STANDARD list, for clarity.
|
3 years ago |
|
John Safranek
|
40e3cac695
Use correct value for pSz when setting the dhKeySize in the session.
|
3 years ago |
|
John Safranek
|
f2c4567164
Like the public key, zero pad the front of the private key.
|
3 years ago |
|
Daniel Pouzzner
|
bc91187063
tls.c:TLSX_KeyShare_GenDhKey(): fix typo.
|
3 years ago |
|
Daniel Pouzzner
|
aca43cfe52
linuxkm/Kbuild: include -fno-omit-frame-pointer in HOST_EXTRACFLAGS, in case the target kernel has profiling enabled; remove the "always := $(hostprogs)" rule, as it doesn't work and causes warnings on kernel 5.10.
|
3 years ago |
|
Daniel Pouzzner
|
8bdae98a93
fips-check.sh: temporarily arrange for "linuxv5" to be an alias of "linuxv5-ready", to arrange for Jenkins testing of wolfcrypt code in the PR in FIPS mode.
|
3 years ago |
|
Daniel Pouzzner
|
a3435ca062
fips-check.sh: exit (fatal error) if git fails.
|
3 years ago |
|
John Safranek
|
f1d43f6891
Add error code for the private key read lockout.
|
3 years ago |
|
Daniel Pouzzner
|
31f13a7f41
wolfcrypt/test/test.c: when HAVE_FIPS, wrap wc_MakeRsaKey() calls in infinite iteration while ret == PRIME_GEN_E, to inhibit nondeterministic failure mode from FIPS-limited _CheckProbablePrime() iteration.
|
3 years ago |
|
Daniel Pouzzner
|
490a1238a8
configure.ac: refactor AC_CHECK_FILES brought in by rebase, to fix warning.
|
3 years ago |
|
Daniel Pouzzner
|
b577984574
rsa.c: fix whitespace.
|
3 years ago |
 David Garske
|
3fcdcbc1f9
Fix for RSA `_ifc_pairwise_consistency_test` to make the async blocking.
|
3 years ago |
|
Daniel Pouzzner
|
e61d88657d
WOLFSSL_ASYNC_CRYPT: in EccSharedSecret(), don't try to wolfSSL_AsyncInit() if there's no priv_key to supply an asyncDev; in RSA _ifc_pairwise_consistency_test(), disable async to force blocking crypto.
|
3 years ago |
|
David Garske
|
303aa312a8
Fix the TLS v1.3 async key share support. Added `WOLFSSL_NO_PUBLIC_FFDHE` option to test without public FFDHE API's.
|
3 years ago |
|
Daniel Pouzzner
|
75e4c0869e
DH: move declaration of wc_DhPublicKeyDecode() from dh.h to asn.h (it is defined in asn.c).
|
3 years ago |
|
Daniel Pouzzner
|
10304c9143
linuxkm: portability fix in aes.c for SAVE_VECTOR_REGISTERS() call ("embedding a directive within macro arguments is not portable").
|
3 years ago |
|
Daniel Pouzzner
|
c0778e5ad9
gate access to wc_Sha512.devId on !NO_SHA2_CRYPTO_CB.
|
3 years ago |
|
Daniel Pouzzner
|
5d796ba06c
settings.h: add WOLFSSL_MAKE_FIPS_VERSION(), WOLFSSL_FIPS_VERSION_CODE, and FIPS_VERSION_{LT,LE,EQ,GE,GT} macros; define NO_SHA2_CRYPTO_CB macro if HAVE_FIPS && FIPS_VERSION_LT(5,1); refactor other FIPS version dependencies in settings.h to use new macros.
|
3 years ago |
