20260720-linuxkm-CMAC-native - #10980

Merged

Frauschi merged 21 commits into

wolfSSL:masterfrom

douzzer:20260720-linuxkm-CMAC-native

Jul 27, 2026

Commits on Jul 24, 2026

linuxkm/lkcapi_aes_glue.c, linuxkm/lkcapi_glue.c, configure.ac: implement linuxkm cmac(aes) glue.
douzzer
committed
linuxkm/lkcapi_sha_glue.c: fix sha.W lifecycle management to prevent leaks:
douzzer
committed
linuxkm/linuxkm_wc_port.h, linuxkm/module_hooks.c: implement magic checks on kernel struct wolfSSL_Mutex in WOLFSSL_LINUXKM_VERBOSE_DEBUG builds.
douzzer
committed
linuxkm/lkcapi_sha_glue.c: refactor SHA-3 state around struct km_Sha3TfmCtx,
douzzer
committed
linuxkm/lkcapi_sha_glue.c: add struct km_sha3_export_state, and implement km_sha3_export() and per-alg _import() methods, and km_sha3_test_export_import().
douzzer
committed
linuxkm/lkcapi_sha_glue.c: fix export/import for HMAC:
douzzer
committed
test/:
douzzer
committed
linuxkm/: add defined(CONFIG_CRYPTO_FIPS) condition to a couple macro conjunctions to fix constant-folding-provoked compiler warnings around fips_enabled;
douzzer
committed
linuxkm/lkcapi_sha_glue.c: add struct km_sha3_state_by_pointer to tighten up SHA-3 allocations, avoiding frivolous struct km_sha_state (with inline wc_Sha512) for SHA-3.
douzzer
committed
linuxkm/lkcapi_sha_glue.c: refactor HMAC export/import mechanism:
douzzer
committed
wolfssl/wolfcrypt/types.h: add wc_static_assert_if_const().
douzzer
committed
wolfcrypt/src/sha{256,512}.c, wolfssl/wolfcrypt/sha{256,512}.h, wolfssl/wolfcrypt/settings.h:
douzzer
committed
configure.ac: enable SHA512 for fips=lean-aesgcm, to support SHA512 integrity check and DRBG.
douzzer
committed
tests/api/test_kdf.c: fix NO_SHA in test_wc_KdfFeatureCoverage().
douzzer
committed
wolfcrypt/src/cpuid.c: in cpuid_flag(), refactor out XMEMSET() to fix SEGV from gcc misoptimization.
douzzer
committed
wolfcrypt/src/aes.c: implement WC_C_DYNAMIC_FALLBACK for AES-NI in wc_AesGcmInit().
douzzer
committed
linuxkm/: rename enabled_fips to enabled_kernel_fips_enabled, and fix gating on its declaration (add dependency on defined(CONFIG_CRYPTO_FIPS)); use FIPS_NOT_ALLOWED_E rather than NOT_COMPILED_IN t…
douzzer
committed
.github/workflows/codespell.yml: add *.bin to skip list.
douzzer
committed
linuxkm/linuxkm_wc_port.h: fix raw_spinlock.magic poison strategy in wc_FreeMutex().
douzzer
committed
fixes from AI review:
douzzer
committed

Commits on Jul 27, 2026

Merge branch 'master' into 20260720-linuxkm-CMAC-native
douzzer
authored

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

20260720-linuxkm-CMAC-native - #10980

20260720-linuxkm-CMAC-native#10980
Frauschi merged 21 commits into
wolfSSL:masterfrom
douzzer:20260720-linuxkm-CMAC-native

Commits on Jul 24, 2026

linuxkm/lkcapi_aes_glue.c, linuxkm/lkcapi_glue.c, configure.ac: implement linuxkm cmac(aes) glue.

linuxkm/lkcapi_sha_glue.c: fix sha.W lifecycle management to prevent leaks:

linuxkm/linuxkm_wc_port.h, linuxkm/module_hooks.c: implement magic checks on kernel struct wolfSSL_Mutex in WOLFSSL_LINUXKM_VERBOSE_DEBUG builds.

linuxkm/lkcapi_sha_glue.c: refactor SHA-3 state around struct km_Sha3TfmCtx,

linuxkm/lkcapi_sha_glue.c: add struct km_sha3_export_state, and implement km_sha3_export() and per-alg _import() methods, and km_sha3_test_export_import().

linuxkm/lkcapi_sha_glue.c: fix export/import for HMAC:

test/:

linuxkm/: add defined(CONFIG_CRYPTO_FIPS) condition to a couple macro conjunctions to fix constant-folding-provoked compiler warnings around fips_enabled;

linuxkm/lkcapi_sha_glue.c: add struct km_sha3_state_by_pointer to tighten up SHA-3 allocations, avoiding frivolous struct km_sha_state (with inline wc_Sha512) for SHA-3.

linuxkm/lkcapi_sha_glue.c: refactor HMAC export/import mechanism:

wolfssl/wolfcrypt/types.h: add wc_static_assert_if_const().

wolfcrypt/src/sha{256,512}.c, wolfssl/wolfcrypt/sha{256,512}.h, wolfssl/wolfcrypt/settings.h:

configure.ac: enable SHA512 for fips=lean-aesgcm, to support SHA512 integrity check and DRBG.

tests/api/test_kdf.c: fix NO_SHA in test_wc_KdfFeatureCoverage().

wolfcrypt/src/cpuid.c: in cpuid_flag(), refactor out XMEMSET() to fix SEGV from gcc misoptimization.

wolfcrypt/src/aes.c: implement WC_C_DYNAMIC_FALLBACK for AES-NI in wc_AesGcmInit().

linuxkm/: rename enabled_fips to enabled_kernel_fips_enabled, and fix gating on its declaration (add dependency on defined(CONFIG_CRYPTO_FIPS)); use FIPS_NOT_ALLOWED_E rather than NOT_COMPILED_IN t…

.github/workflows/codespell.yml: add *.bin to skip list.

linuxkm/linuxkm_wc_port.h: fix raw_spinlock.magic poison strategy in wc_FreeMutex().

fixes from AI review:

Commits on Jul 27, 2026

Merge branch 'master' into 20260720-linuxkm-CMAC-native