Skip to content

Fix RSA decode and empty Keygen OID with FIPS#196

Merged
ColtonWilley merged 2 commits into
wolfSSL:masterfrom
aidangarske:rsa_decode_fix
Jul 10, 2025
Merged

Fix RSA decode and empty Keygen OID with FIPS#196
ColtonWilley merged 2 commits into
wolfSSL:masterfrom
aidangarske:rsa_decode_fix

Conversation

@aidangarske
Copy link
Copy Markdown
Member

@aidangarske aidangarske commented Jun 27, 2025

Description

  • Adds WOLFSSL_OLD_OID_SUM which is needed with FIPS v5.2.1 which uses old OID logic. (Fixes errors with OID not being propagated with FIPS)
  • Always do wc_GetPkcs8TraditionalOffset with FIPS because keys are created and wrapped in PKCS8 encoding. This removes so we can decode correctly. (Fixes errors with decode in RSA FIPS)
  • Adds WOLFSSL_DEBUG_ASN_TEMPLATE=1 option to enable WOLFSSL_DEBUG_ASN_TEMPLATE to help developers debug. Useful for ASN.1 parsing debug
  • Adds WOLFPROV_DISABLE_ERR_TRACE options to remove error trace with debug.
  • Fixes out uninitialized value

@aidangarske aidangarske self-assigned this Jun 27, 2025
Comment thread scripts/utils-wolfssl.sh Outdated
Comment thread src/wp_internal.c Outdated
@aidangarske aidangarske marked this pull request as ready for review July 3, 2025 23:54
@aidangarske aidangarske requested a review from ColtonWilley July 3, 2025 23:54
Comment thread src/wp_dh_kmgmt.c Outdated
@aidangarske
Copy link
Copy Markdown
Member Author

Jenkins retest this please

@ColtonWilley ColtonWilley merged commit fe751dc into wolfSSL:master Jul 10, 2025
208 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants