All pull requests

Pull requests

• X509_verify_cert: unload temp CAs before loading each candidate issuer

  #11834·sameehj opened Oct 21, 2026Contributor·

  ·
  4

• Rust wrapper: FIPS fixes and helpers for dependent crates

  #11833·gasbytes opened Oct 21, 2026Contributor·

  ·
  3

  

• 20261020-drbgStateMutex-refactor-out

  For FIPS v7 Module
  #11832·douzzer opened Oct 21, 2026Contributor·

  ·
  18

  

• Add V523_NONFIPS_SHAKE dev opt-in for FIPS v5 SHAKE128/256

  #11831·rlm2002 opened Oct 20, 2026Contributor·

  ·
  5

  

• Do not cache unsigned chain CAs after a verification override

  #11830·miyazakh opened Oct 20, 2026Contributor·4 tasks·

  ·
  9

  

• Define WOLFSSL_AES_DIRECT for AES-CTR and AES-OFB alongside CFB and XTS

  #11829·dgarske opened Oct 20, 2026Member·4 tasks·

  ·
  1

  

• fix for edge case sanity checks when converting internal PKCS12 struct to a DER

  #11828·JacobBarthelmeh opened Oct 20, 2026Contributor·

  ·
  3

  

• remove depriacted build option

  #11827·aidankeefe2022 opened Oct 20, 2026Member·

  ·
  4

  

• Fix WANT_WRITE propagation from SendTls13KeyUpdate. Enable HAVE_SERVER_RENEGOTIATION_INFO for CMake builds by default.

  #11826·kareem-wolfssl opened Oct 20, 2026Contributor·1 of 4 tasks·

  ·
  1

  7

  

• Fix X509 leaks from mismatched free guards

  #11825·ColtonWilley opened Oct 20, 2026Contributor·

  ·
  1

  3

  

• Rust crate: wolfssl-wolfcrypt 3.0.0

  #11823·holtrop-wolfssl opened Oct 20, 2026Contributor·4 tasks·

  ·
  2

  

• Fix -Wshorten-64-to-32 in the PKCS#11 ML-DSA callbacks

  #11819·LinuxJedi opened Oct 20, 2026Member·4 tasks·

  ·
  2

• Docs/fix decompressdynamic doc

  #11818·ohki-saito opened Oct 20, 2026·3 tasks·

  ·
  3

• tests: drop a freed key share and free an unpushed group

  #11817·sameehj opened Oct 20, 2026Contributor·1 of 4 tasks·

  ·
  2

• Fix: reject invalid maxSz in wc_DeCompressDynamic F-9926

  #11816·ohki-saito opened Oct 20, 2026·3 tasks·

  ·
  3

• wolfSSL AES Touch Lines Hardening & Stride Fixes

  #11814·dgarske opened Oct 19, 2026Member·

  ·
  3

  

• Reject DERs with BOOLEANs != 0x00 or 0xFF. Use RSA size for output buffer in wolfSSL_EVP_PKEY_decrypt RSA case. Truncate DSA digest length to q as per FIPS 186-4 4.2/4.6.

  #11813·kareem-wolfssl opened Oct 19, 2026Contributor·1 of 4 tasks·

  ·
  1

  3

  

• Null key aes

  #11811·night1rider opened Oct 19, 2026Contributor·

  ·
  2

  

• Client sigalgs cert

  #11810·AlexLanzano opened Oct 19, 2026Member·

  ·
  1

  8

• ForceZero: inline stores for short wipes on x86, XMEMSET elsewhere

  #11809·julek-wolfssl opened Oct 19, 2026Member·1 of 4 tasks·

  ·
  9

  

• Fix signed-overflow undefined behavior in ML-DSA Montgomery reduction and C SP arithmetic (builds without -fwrapv)

  #11808·armpribb opened Oct 19, 2026·1 of 4 tasks·

  ·
  6

  

• Reject wolfSSL_write() after close_notify sent

  #11806·deadcaf3 opened Oct 19, 2026Contributor·3 tasks done·

  ·
  1

  10

  

• F-9925: reset keySz on failed wc_CamelliaSetKey

  #11805·ohki-saito opened Oct 19, 2026·3 tasks·

  ·
  7

  

• Tests: add Falcon to swdev for crypto cb testing

  #11799·padelsbach opened Oct 16, 2026Contributor·1 of 4 tasks·

  ·
  3

• Remove Whitewood netRandom support

  #11798·aidangarske opened Oct 16, 2026Member·

  ·