Tags give the ability to mark specific points in history as being important
-
WCv5.2.4-KRNL-CHKIN-r5
836be9d8 · ·backport random.c and random.h from #9545 "20251211-DRBG-SHA2-smallstackcache-prealloc", full replacement. backport changes to random.c from 20251229-linuxkm-rng-wolfentropy (WC_VERBOSE_RNG). backport changes to random.[ch] from #9616 "20251230-persistent-drbg" (3c15be6610, c1d2828daf, 0059f1647e, 1e0351a69b) backport 6f95a9c58e and a944575e4b, and fix in 20251226-fixes, to wolfcrypt/src/random.c. backport 401868908a (smallstack refactor of wc_ecc_mulmod_ex2()). wolfcrypt/src/ecc.c: smallstack refactor of variable t in wc_ecc_mulmod_ex2() backport f771181e1a to wolfcrypt/src/ecc.c (smallstack refactor of ecc_mul2add()). backport HmacKeyCopyHash() from bfd52decb6 and wc_HmacCopy() from 50b51adc93. backport 2b28931855 "wolfcrypt/src/sha256.c and wolfcrypt/src/sha512.c: in WOLFSSL_SMALL_STACK_CACHE builds, allocate shafoo->W at init or context copy time, rather than in the transform function. for the SHA512 family, allocate additional space in W for "buffer" in wc_Sha512Transform()." fix out-of-order ForceZero()s in wc_HKDF_Extract(), wc_HKDF_Expand(), and wc_SSH_KDF() (fixes 844e961ff5) wolfcrypt/src/hmac.c: fix FIPS version gate on wc_HmacFree() in wc_HmacSetKey(). wolfcrypt/src/sha512.c: in wc_Sha512Transform(), fix sequence of check added by 3b768bcb5e, fix WOLFSSL_SMALL_STACK double-declaration of buffer, and fix gate on XFREE(buffer, ...). backport 5030484bcf to wolfcrypt/src/random.c and wolfssl/wolfcrypt/random.h: * add WC_DRBG_{NOT_INIT,OK,FAILED,CONT_FAILED} in public header file, and * move setup for RNG_SECURITY_STRENGTH, ENTROPY_SCALE_FACTOR, SEED_BLOCK_SZ, SEED_SZ, MAX_SEED_SZ, and RNG_HEALTH_TEST_CHECK_SIZE from random.c to random.h, with public WC_DRBG_SEED_SZ and WC_DRBG_MAX_SEED_SZ. backport b2ef89b2db, cd88a8ae88, and b66f1b78a7 to wolfcrypt/src/rsa.c and wolfssl/wolfcrypt/rsa.h: make RsaKey.rng and wc_RsaSetRNG() available unconditionally, rather than only if WC_RSA_BLINDING, for use by wc_CheckRsaKey(). copy in asm files from WCv6.0.0-RC5 to match v5.2.4 WOLFCRYPT_FILES per fips-check-PILOT.sh. -
WCv6.0.0-linuxkm-UPDT-RC2
b7220aeb · ·backport random.c and random.h from #9545 "20251211-DRBG-SHA2-smallstackcache-prealloc", full replacement. backport 6f95a9c58e and a944575e4b, and fix in 20251226-fixes, to wolfcrypt/src/random.c: * in _InitRng(), remove "drbg_instantiated" conditional cleanup logic (Coverity true-benign-positive: DEADCODE because drbg_instantiated is always false when ret != DRBG_SUCCESS); * fix clang-diagnostic-unreachable-code in wc_GenerateSeed(); * in wc_GenerateSeed(), move the gate closures for !FORCE_FAILURE_RDSEED and !ENTROPY_MEMUSE_FORCE_FAILURE to follow the /dev/urandom fallback method. wolfcrypt/src/random.c: backport changes to random.[ch] from #9595 "20251229-linuxkm-rng-wolfentropy" (450b0b46c6, 299ca1cfef, 0621615b15) and #9616 "20251230-persistent-drbg" (3c15be6610, c1d2828daf, 0059f1647e, 1e0351a69b). backport HmacKeyCopyHash() from bfd52decb6 and wc_HmacCopy() from 50b51adc93. backport 2b28931855 "wolfcrypt/src/sha256.c and wolfcrypt/src/sha512.c: in WOLFSSL_SMALL_STACK_CACHE builds, allocate shafoo->W at init or context copy time, rather than in the transform function. for the SHA512 family, allocate additional space in W for "buffer" in wc_Sha512Transform()." wolfcrypt/src/hmac.c: fix FIPS version gate on wc_HmacFree() in wc_HmacSetKey(). backport missed prototype for wc_HmacCopy() from 50b51adc93. backport 5030484bcf to wolfcrypt/src/random.c and wolfssl/wolfcrypt/random.h: * add WC_DRBG_{NOT_INIT,OK,FAILED,CONT_FAILED} in public header file, and * move setup for RNG_SECURITY_STRENGTH, ENTROPY_SCALE_FACTOR, SEED_BLOCK_SZ, SEED_SZ, MAX_SEED_SZ, and RNG_HEALTH_TEST_CHECK_SIZE from random.c to random.h, with public WC_DRBG_SEED_SZ and WC_DRBG_MAX_SEED_SZ. backport b2ef89b2db, cd88a8ae88, and b66f1b78a7 to wolfcrypt/src/rsa.c and wolfssl/wolfcrypt/rsa.h: make RsaKey.rng and wc_RsaSetRNG() available unconditionally, rather than only if WC_RSA_BLINDING, for use by wc_CheckRsaKey(). -
WCv6.0.0-linuxkm-UPDT-RC1
116388ad · ·backport smallstackcache fix in wc_ecc_mulmod_ex2() from 401868908a (#8779) backport WC_FLAG_DONT_USE_AESNI fixes from 8705d28d48 (from #8614) backport wc_DhGeneratePublic() from f6f3b0a1ee (#8707) backport WC_SHA3_NO_ASM implementation from 245042a342 (#8817) backport linuxkm-focused tweaks to random.c & random.h in b25d484a4e and dc05c4c01b (from #8943) backport macro renames (generic gates replacing WOLFSSL_LINUXKM etc) from 7ea66aeffe (#9254) backport WolfEntropy migration from random.c in dc6fa0ad4e (#9451)
-
-
-
-
-
WCv5.2.4-KRNL-CHKIN
9951e960 · ·cherry pick WCv5.2.3-RSA-SWITCH and WCv5.2.3-ARMv8-PAA-r2 into WCv5.2.3-DHGENPUB-r2
-
-
-
-
-
-
-
-
-
-
-
-