Commit Graph

903 Commits

Author SHA1 Message Date
Zhi Guan
9bbf72fe2f Merge pull request #1888 from ImMike/fix-typo-comments
Fix typo in xmss.c comment: seperate -> separate
2026-05-27 13:33:19 +08:00
Zhi Guan
49a71076e2 Potential fix for code scanning alert no. 3: Workflow does not contain permissions
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-05-27 12:42:13 +08:00
Zhi Guan
9933b135ee Potential fix for code scanning alert no. 4: Workflow does not contain permissions
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-05-27 12:40:41 +08:00
Zhi Guan
b8d0a5b1ec Potential fix for code scanning alert no. 2: Workflow does not contain permissions
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-05-27 12:40:04 +08:00
Zhi Guan
9f3c469480 Potential fix for code scanning alert no. 1: Workflow does not contain permissions
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-05-27 12:39:29 +08:00
Zhi Guan
0df606b2b2 Potential fix for code scanning alert no. 5: Workflow does not contain permissions
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-05-27 12:37:38 +08:00
Zhi Guan
4cb2346bc5 Fix SPHINCS+
Size of tree nodes and root is decided by security parameter n, currently GmSSL only support SPHINCS+-128s, SPHINCS+-128f, so the size is 128 bits and type is sphincs_hash128_t.
2026-05-27 12:28:58 +08:00
Zhi Guan
46dae81f4c Merge branch 'master' of https://github.com/guanzhi/GmSSL 2026-05-27 12:25:43 +08:00
Zhi Guan
285b11b39c Add Microsoft C++ Code Analysis workflow 2026-05-27 11:08:20 +08:00
Zhi Guan
087690d892 Fix bugs reported from GitHub code-scanning 2026-05-27 10:56:37 +08:00
Zhi Guan
e18bc4212e Fix SPHINCS+ buffer overflow 2026-05-27 09:52:24 +08:00
Zhi Guan
70a1f998ae Fix SPHINCS+ buffer overflow 2026-05-27 09:48:46 +08:00
Zhi Guan
f08bedf9cd Update kyber.h 2026-05-27 09:23:55 +08:00
Zhi Guan
f7ebff6b5c Fix missing stdint.h 2026-05-27 08:52:11 +08:00
Zhi Guan
94c226d889 Fix kyber_poly_compress bug
kyber_poly_compress
2026-05-27 08:46:04 +08:00
Zhi Guan
2309ea6169 Update TLS 1.3 2026-05-27 08:43:37 +08:00
Zhi Guan
931c5e39e8 Update TLS 1.3 2026-05-26 21:50:13 +08:00
Zhi Guan
828a93e907 Update TLS 1.3 HelloRetryRequest, add CipherCipherSpec
Use same handshake type of ServerHello, add ChangeCipherSpec, compatible with OpeNSSL
2026-05-24 20:17:43 +08:00
Zhi Guan
020896dbd0 Update TLS 1.3
Cross-validation with openssl s_client.
HelloRetryReqeust not OK.
2026-05-21 15:21:41 +08:00
Zhi Guan
431a22e2e9 Update TLS 1.3
Cross-validation with OpenSSL
2026-05-21 14:23:35 +08:00
Zhi Guan
8e8819f27d Update TLS 1.3 2026-05-20 14:18:47 +08:00
Zhi Guan
0960694bab Update TLS 1.3 Key Schedule 2026-05-19 12:37:20 +08:00
Zhi Guan
290d699336 Update TLS 1.3
KeyUpdate passed.
2026-05-17 11:44:43 +08:00
ImMike
b13d9e0f51 Fix typo in comment: seperate -> separate 2026-05-12 14:23:30 -04:00
Zhi Guan
a423251fe8 Update README.md 2026-05-10 16:38:39 +08:00
Zhi Guan
bcb80f23d5 TLS 1.3 Update
CertificateRequest with empty client Certificate and no client CertificateVerify
2026-05-10 16:24:42 +08:00
Zhi Guan
bb94f96fcd Update TLS 1.3
CertificateVerify passed
2026-05-10 15:56:35 +08:00
Zhi Guan
2c72cf84b3 Update TLS 1.3
All tls13_server examples passed.
2026-05-09 13:17:36 +08:00
Zhi Guan
4c54385534 Update TLS 1.3 2026-05-07 20:57:46 +08:00
Zhi Guan
c23e117537 Update TLS 1.3
Full handshake is ok
2026-04-30 11:23:49 +08:00
Zhi Guan
b548e98d34 Update TLS 1.3 2026-04-28 11:50:15 +08:00
Zhi Guan
34698ddc6f Update TLS 1.3 2026-04-21 11:18:25 +08:00
Zhi Guan
0bcffd3734 Update TLS 1.3 2026-04-13 11:34:16 +08:00
Zhi Guan
2e550edc35 Update TLS 1.3 2026-04-12 11:48:15 +08:00
Zhi Guan
3d29d5066d Update TLS 1.3 PSK-only mode 2026-03-28 11:09:26 +08:00
Zhi Guan
e996e72537 Update TLS 1.3 0-RTT 2026-03-23 20:50:55 +08:00
Zhi Guan
5efe2005d4 Update TLS 1.3 PSK 1-RTT 2026-03-23 10:32:16 +08:00
Zhi Guan
0d1acec6df Update TLS 1.3 handshake
Working on HelloRetryRequest, NewSessionTicket
2026-03-21 18:41:46 +08:00
Zhi Guan
ead4caecb7 Update TLS 1.3 state machine 2026-03-17 16:51:12 +08:00
Zhi Guan
3322a5fc7b Update TLS 1.3 2026-02-27 11:02:22 +08:00
Zhi Guan
ee2fa409f2 Update TLCP to state machine 2026-02-27 09:11:49 +08:00
Zhi Guan
cac8f394a0 Update X509_KEY API to support SM9 2026-02-24 10:45:33 +08:00
Zhi Guan
b2cfb59da0 Update sm9setup.c 2026-02-21 15:00:50 +08:00
Zhi Guan
8eb0d3b572 x509_key all tests passed 2026-02-05 20:26:40 +08:00
Zhi Guan
e0f5ed85e3 Delete tmp.i 2026-02-01 20:41:45 +08:00
Zhi Guan
9c58806408 Rewrite TLS 1.2 as a state machine 2026-02-01 20:38:13 +08:00
Zhi Guan
a15e0f34c7 Add ECDSA with curve P-256
for TLS testing
2026-01-24 12:27:12 +08:00
Zhi Guan
05ba2f8e54 Support HSS/XMSS/XMSSMT certificate, CSR, and CRL
LMS and SPHINCS+ do not have official OID, so officially supported by X.509
2026-01-18 21:13:58 +08:00
Zhi Guan
e8eb873c47 Add x509_private_key_from_file 2026-01-18 17:31:00 +08:00
Zhi Guan
9db11c6d06 Update XMSS
Add key_update callback and private_key_from_file
2026-01-18 17:09:27 +08:00