All pull requests

Pull requests

• Add cross-provider tests for ML-DSA and ML-KEM

  #493·padelsbach opened Sep 16, 2026Contributor·

  ·
  

• Ed25519: Allow signing of >64 byte buffers

  #492·padelsbach opened Sep 16, 2026Contributor·

  ·
  4

  

• AES-CTS: default to ciphertext stealing variant 1 to match OSSL

  ci:all
  #491·padelsbach opened Sep 14, 2026Contributor·

  ·
  

• Tests: fix compile issue with gcc-15

  #489·padelsbach opened Sep 11, 2026Contributor·

  ·
  

• Block key and nonce reuse in AES-CCM

  #488·padelsbach opened Sep 11, 2026Contributor·

  ·
  

• rsa: hold the key mutex on every shared-key wolfCrypt call

  ci:all
  #487·yosuke-wolfssl opened Sep 4, 2026Contributor·

  ·
  6

  

• dh: reject generation controls wolfSSL cannot apply

  #486·yosuke-wolfssl opened Sep 3, 2026Contributor·

  ·
  10

  

• wp_dh_kmgmt: pass the full generator length to wc_DhAgree

  #484·yosuke-wolfssl opened Sep 3, 2026Contributor·

  ·
  3

  

• rsa: keep RSA-PSS keys without parameters unrestricted

  ci:all
  #483·yosuke-wolfssl opened Sep 2, 2026Contributor·

  ·
  6

  

• dh: allow a zero-size export buffer

  #477·yosuke-wolfssl opened Aug 26, 2026Contributor·

  ·
  5

  

• kmgmt: add encoder import-object wrappers

  #475·yosuke-wolfssl opened Aug 26, 2026Contributor·

  ·
  11

  

• gmac: clear the cached message on init

  #474·yosuke-wolfssl opened Aug 26, 2026Contributor·

  ·
  1

  

• cmac: take a NULL key in init as a restart with the cached key

  #473·yosuke-wolfssl opened Aug 26, 2026Contributor·

  ·
  11

  

• wp_mlx_kmgmt: derive the classical public point when duplicating

  #472·yosuke-wolfssl opened Aug 26, 2026Contributor·

  ·
  1

  

• Supply the FIPS build settings for Windows

  #468·ColtonWilley opened Aug 14, 2026Contributor·

  ·

• Enforce minimum DH group size on validate and derive

  ci:all
  #462·yosuke-wolfssl opened Aug 7, 2026Contributor·

  ·
  6

  

• F-4287: check public point is on curve

  #461·padelsbach opened Aug 6, 2026Contributor·

  ·
  1

  

• Validate DH peer public key subgroup before key agreement

  ci:all
  #460·aidangarske opened Aug 6, 2026Member·

  ·
  8

  

• F-4936 - Take parent DRBG lock around raw dispatch calls

  ci:all
  #454·ColtonWilley opened Jul 28, 2026Contributor·

  ·
  1

• F-4935 - Guard word32 length overflow in wp_read_pem_bio

  #452·ColtonWilley opened Jul 27, 2026Contributor·

  ·

• debian: bump libssl3 dep floor to 3.0.8

  #449·MarkAtwood opened Jul 16, 2026·

  ·
  1

• Handle TLS CBC bad padding in DES3 without a padding oracle

  #448·yosuke-wolfssl opened Jul 16, 2026Contributor·

  ·
  17

  

• Free FP ECC cache in provider teardown

  #445·ColtonWilley opened Jul 14, 2026Contributor·

  ·
  1

• fix: constant-time Ed sig order check

  #437·MarkAtwood opened Jul 9, 2026·

  ·
  6

  

• fix: guard wp_kdf_free refCnt with mutex

  #436·MarkAtwood opened Jul 9, 2026·

  ·
  2