All pull requests

Pull requests

• Fix SM4 IV copy direction in EVP IV helpers

  #11684·padelsbach opened Oct 7, 2026Contributor·1 of 4 tasks·

  ·
  6

• Replace void* with WOLFSSL_CERT_MANAGER* in ASN/CA Lookups

  #11683·dgarske opened Oct 7, 2026Member·

  ·
  1

  3

  

• Compat layer: escape control characters in X509 print output

  #11682·padelsbach opened Oct 7, 2026Contributor·1 of 4 tasks·

  ·
  6

• CI: Zephyr: remove unneeded apt install

  #11681·padelsbach opened Oct 7, 2026Contributor·4 tasks·

  ·
  2

• Ed25519/Ed448: support device private keys by id or label

  #11680·Frauschi opened Oct 7, 2026Member·

  ·
  8

  

• Accept zero-length ciphertext in TSIP AES-GCM decrypt

  #11679·miyazakh opened Oct 7, 2026Contributor·1 of 4 tasks·

  ·
  3

  

• Check PKCS#8 publicKey against the private key for ML-DSA and Falcon

  #11676·MarkAtwood opened Oct 6, 2026Contributor·

  ·
  2

• Skip PKCS#8 [0] attributes in DecodeAsymKey (RFC 5958)

  #11675·MarkAtwood opened Oct 6, 2026Contributor·

  ·
  1

  1

• Fix BIT STRING unused-bits byte in PKCS#8 v2 publicKey (RFC 5958)

  #11674·MarkAtwood opened Oct 6, 2026Contributor·

  ·
  1

  3

• additional hardening check on ECC key import with CAAM port

  #11672·JacobBarthelmeh opened Oct 6, 2026Contributor·

  ·
  3

  

• sp_prime_is_prime[_ex] tightening logic

  #11669·kaleb-himes opened Oct 6, 2026Contributor·1 of 4 tasks·

  ·
  16

  

• 3x compliance items (CBC, ECDH, DSA)

  For FIPS v7 Module
  #11668·kaleb-himes opened Oct 6, 2026Contributor·2 of 4 tasks·

  ·
  12

  

• Fix AES and GCM state after a crypto callback claims the key

  #11666·Frauschi opened Oct 6, 2026Member·

  ·
  8

  

• dtls: peer address fixes

  #11663·gasbytes opened Oct 6, 2026Contributor·1 of 4 tasks·

  ·
  6

  

• Add SSL_[CTX_]set_max_send_fragment()

  #11661·julek-wolfssl opened Oct 6, 2026Member·

  ·
  3

  

• Falcon: less memory and faster MCU signing, constant-time fpr emulation on every core

  #11656·Frauschi opened Oct 6, 2026Member·

  ·
  9

  

• PKCS#7: refuse oversized certificates-only bundles, fix reusing a wc_PKCS7 across verifies

  #11655·Frauschi opened Oct 6, 2026Member·

  ·
  10

  

• Fix two problems with ML-DSA small-memory builds

  #11654·dgarske opened Oct 6, 2026Member·

  ·
  10

  

• Fix/fenrir9929

  #11653·ageprocpp opened Oct 6, 2026·1 of 4 tasks·

  ·
  6

  

• ML-KEM Cortex-M3: Don't use non-constant time UMULL

  #11652·SparkiDev opened Oct 6, 2026Contributor·

  ·
  6

  

• Fix EVP AEAD nonce handling and KCAPI DH agreement

  #11649·aidangarske opened Oct 5, 2026Member·

  ·
  12

  

• Reject trailing data in TLS 1.3 ClientHello pre_shared_key extension

  #11646·ducanhmit opened Oct 5, 2026·1 of 4 tasks·

  ·
  1

  2

  

• Fix entropy_mutex ownership tracking, re-init race, and whitebox coverage

  #11645·stenslae opened Oct 5, 2026Member·1 of 4 tasks·

  ·
  29

  

• Stricter mldsa contract for no public keys

  #11644·stenslae opened Oct 5, 2026Member·3 of 4 tasks·

  ·
  6

  

• CI: minor robustness improvements in workflow scripts

  #11643·padelsbach opened Oct 5, 2026Contributor·4 tasks·

  ·
  2