wolfSSL / wolfssl Public

Implement FIPS_mode and FIPS_mode_set in the compat layer.

wolfSSL_get_error may return SSL_ERROR_NONE on ret <= 0

Fix docs mismatch reported in #4854

fixes for clang -Os on clang >= 12.0.0

…m.S,aes_asm.asm}; for linuxv5 add wolfcrypt/src/aes_gcm_asm.S to COPY_DIRECT; fix whitespace.

…IPS_VERSION_GE(5,3).

in scripts/ocsp.test, don't call ping.test when $AM_BWRAPPED = yes (ping is setuid, so fails under bwrap);

in scripts/unit.test.in, don't bwrap if $AM_BWRAPPED = yes (double-bwrapping always fails);

in testsuite/testsuite.c testsuite_test(), build tempName using tempDir, and try to assign tempDir from XGETENV("TMPDIR"), fallback to hardcoded "/tmp".

SP int, cortex, thumb div_word: fix to work

ECIES: add support for more encryption algorithms

Cortex builds needed # before number. Arm32 works with or without.
Thumb div_word needed to shift up if divisor too small (like other ARM
implementations).

Add support to ECIES for AES-256-CBC, AES-128-CTR, AES-256-CTR.
Added new API wc_ecc_ctx_set_algo() that sets the encryption, KDF and
MAC algorithms.
Cleanup formatting of ECIES code.

…ace.

ARMASM, SHA-3: fixup when not using crypto instructions

SP C: when sp_c32.c ad sp_c64.c are included in build changed

20220208 clang-tidy-15 fixes etc.

When compiling with the CFLAG -m32, sp_c32.c is used and not sp_c64.c.
The build system cannot detect that this is a 32-bit platform and to use
sp_c32.c.

The SP code detects which implementaiton to use and sets defines that
enable the code in sp_c32.c or sp_c64.c.

ENABLED_64BIT, 64-bit platform, was on by default, which is not always
true.
By making ENABLED_64BIT not default then the decision of which SP C
files to include in the build had to change to not being the other.
That is, sp_c64.c is not included when the configuration line explicitly
enables 32bit and sp_c32.c is not include when the configuration line
explicitly enables 64bit.

Remove deprecated VS solution

Improve the client certificate checking logic

…rps:

* whitespace in src/ssl.c, tests/api.c, wolfssl/openssl/fips_rand.h.

* clang-analyzer-core.StackAddressEscape from llvm-15 clang-tidy, in tests/suites.c:execute_test_case().

* bugprone-suspicious-memory-comparison from llvm-15 clang-tidy, in src/internal.c:DoSessionTicket() and src/ssl.c:wolfSSL_sk_push().

SHA-3, ARM64: add assembly support for crypto instructions

Rework functions to avoid warning with g++

Fixes for building without HMAC

Add ability to compile ARM assembly from inline C code.