 Daniel Pouzzner
|
fc73c6dbea
linuxkm: fix Makefile to properly pivot module signature on CONFIG_MODULE_SIG==y; remove not-yet-kernel-compatible asm files from the ASFLAGS_FPU_DISABLE_SIMD_ENABLE list, matching the OBJECT_FILES_NON_STANDARD list, for clarity.
|
2 tahun lalu |
 John Safranek
|
40e3cac695
Use correct value for pSz when setting the dhKeySize in the session.
|
2 tahun lalu |
|
John Safranek
|
f2c4567164
Like the public key, zero pad the front of the private key.
|
2 tahun lalu |
|
Daniel Pouzzner
|
bc91187063
tls.c:TLSX_KeyShare_GenDhKey(): fix typo.
|
2 tahun lalu |
|
Daniel Pouzzner
|
aca43cfe52
linuxkm/Kbuild: include -fno-omit-frame-pointer in HOST_EXTRACFLAGS, in case the target kernel has profiling enabled; remove the "always := $(hostprogs)" rule, as it doesn't work and causes warnings on kernel 5.10.
|
2 tahun lalu |
|
Daniel Pouzzner
|
8bdae98a93
fips-check.sh: temporarily arrange for "linuxv5" to be an alias of "linuxv5-ready", to arrange for Jenkins testing of wolfcrypt code in the PR in FIPS mode.
|
2 tahun lalu |
|
Daniel Pouzzner
|
a3435ca062
fips-check.sh: exit (fatal error) if git fails.
|
2 tahun lalu |
|
John Safranek
|
f1d43f6891
Add error code for the private key read lockout.
|
2 tahun lalu |
|
Daniel Pouzzner
|
31f13a7f41
wolfcrypt/test/test.c: when HAVE_FIPS, wrap wc_MakeRsaKey() calls in infinite iteration while ret == PRIME_GEN_E, to inhibit nondeterministic failure mode from FIPS-limited _CheckProbablePrime() iteration.
|
2 tahun lalu |
|
Daniel Pouzzner
|
490a1238a8
configure.ac: refactor AC_CHECK_FILES brought in by rebase, to fix warning.
|
2 tahun lalu |
|
Daniel Pouzzner
|
b577984574
rsa.c: fix whitespace.
|
2 tahun lalu |
 David Garske
|
3fcdcbc1f9
Fix for RSA `_ifc_pairwise_consistency_test` to make the async blocking.
|
2 tahun lalu |
|
Daniel Pouzzner
|
e61d88657d
WOLFSSL_ASYNC_CRYPT: in EccSharedSecret(), don't try to wolfSSL_AsyncInit() if there's no priv_key to supply an asyncDev; in RSA _ifc_pairwise_consistency_test(), disable async to force blocking crypto.
|
2 tahun lalu |
|
David Garske
|
303aa312a8
Fix the TLS v1.3 async key share support. Added `WOLFSSL_NO_PUBLIC_FFDHE` option to test without public FFDHE API's.
|
2 tahun lalu |
|
Daniel Pouzzner
|
75e4c0869e
DH: move declaration of wc_DhPublicKeyDecode() from dh.h to asn.h (it is defined in asn.c).
|
2 tahun lalu |
|
Daniel Pouzzner
|
10304c9143
linuxkm: portability fix in aes.c for SAVE_VECTOR_REGISTERS() call ("embedding a directive within macro arguments is not portable").
|
2 tahun lalu |
|
Daniel Pouzzner
|
c0778e5ad9
gate access to wc_Sha512.devId on !NO_SHA2_CRYPTO_CB.
|
2 tahun lalu |
|
Daniel Pouzzner
|
5d796ba06c
settings.h: add WOLFSSL_MAKE_FIPS_VERSION(), WOLFSSL_FIPS_VERSION_CODE, and FIPS_VERSION_{LT,LE,EQ,GE,GT} macros; define NO_SHA2_CRYPTO_CB macro if HAVE_FIPS && FIPS_VERSION_LT(5,1); refactor other FIPS version dependencies in settings.h to use new macros.
|
2 tahun lalu |
|
Daniel Pouzzner
|
0f05a71bfb
linuxkm: refactor SAVE_VECTOR_REGISTERS() macro to take a fail clause as an argument, to allow the preprocessor to completely eliminate it in non-kernel builds, and for backward compat with WCv5.0-RC8.
|
2 tahun lalu |
|
Daniel Pouzzner
|
6160da243d
linuxkm: use EXPORT_SYMBOL_NS_GPL() for exports.
|
2 tahun lalu |
|
Daniel Pouzzner
|
c2c2e5b4f5
tests/api.c: post_auth_version_cb(): add missing gating on !NO_ERROR_QUEUE for wolfSSL_ERR_get_error() test.
|
2 tahun lalu |
|
Daniel Pouzzner
|
e4d075de20
src/internal.c: FreeX509(): remove redundant free of x509->CRLInfo.
|
2 tahun lalu |
|
Daniel Pouzzner
|
61df408d70
configure.ac: fix handling of ENABLED_FIPS->REPRODUCIBLE_BUILD_DEFAULT=yes; take JNI back out of from enable-all feature set because it adds -DNO_ERROR_QUEUE to flags; fix typo in FIPS test for --with-max-rsa-bits setup.
|
2 tahun lalu |
|
Daniel Pouzzner
|
32349749a6
internal.c: SendServerKeyExchange(): check retval from wc_DhGetNamedKeyParamSize().
|
2 tahun lalu |
|
Daniel Pouzzner
|
361559ca30
settings.h: set HAVE_PUBLIC_FFDHE as in configure.ac (FIPS v2 and SELFTEST) if it isn't already set.
|
2 tahun lalu |
|
Daniel Pouzzner
|
342e319870
dsa.c: fix up comment spelling/typography in wc_MakeDsaKey().
|
2 tahun lalu |
|
Daniel Pouzzner
|
a5c03f65e3
tests/api.c: fix test_CryptoCb_Func() to not attempt signing op on ephemeral ECC keys.
|
2 tahun lalu |
|
Daniel Pouzzner
|
1f6eb4648e
configure.ac: remove WOLFSSL_VALIDATE_ECC_IMPORT and WOLFSSL_VALIDATE_ECC_KEYGEN from enable-all and enable-all-crypto feature sets.
|
2 tahun lalu |
|
Daniel Pouzzner
|
7a4ec22953
pkcs7.c: further smallstack refactor of PKCS7_EncodeSigned().
|
2 tahun lalu |
|
Daniel Pouzzner
|
fb49d814c5
configure.ac and autogen.sh: fix warnings in configure.ac, and enable WARNINGS=all,error in autogen.sh. also, remove --verbose to avoid obscuring warning output.
|
2 tahun lalu |
