Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

wolfSSL / wolfBoot Public

Notifications You must be signed in to change notification settings
Fork 146
Star 480

Code
Issues
Pull requests 9
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights

Fixes 20260408#745

Merged

dgarske merged 75 commits intowolfSSL:masterwolfSSL/wolfBoot:masterfrom

danielinux:fixes-20260408danielinux/wolfBoot:fixes-20260408Copy head branch name to clipboard

Apr 13, 2026

Conversation Commits75 (75)Checks Files changed

Merged

Fixes 20260408#745
dgarske merged 75 commits intowolfSSL:masterfrom
danielinux:fixes-20260408

Commits

Commits on Apr 8, 2026

sign: scrub key buffers before free
danielinux
committed
Scrub RSA keygen private material
danielinux
committed
Zero ECC keygen private buffers
danielinux
committed
Zero EdDSA keygen private data
danielinux
committed
zero ML-DSA private key buffer
danielinux
committed
Add restricted key mask authenticity tests
danielinux
committed
Propagate encrypt key flash errors
danielinux
committed
Propagate erase encrypt key write failures
danielinux
committed
Fix policy_create PCR digest validation
danielinux
committed
Fix sign encrypted output open failure
danielinux
committed
Check image reopen failures in sign tool
danielinux
committed
Use constant-time RSA hash comparison
danielinux
committed
Protect bootloader before application boot
danielinux
committed
Add auth type coverage for unit-image
danielinux
committed
Add auth-only invalid update test
danielinux
committed
Add RAM_CODE self-update unit coverage
danielinux
committed
Strengthen same-version RAM update test
danielinux
committed
Fix sign header TLV overflow sizing
danielinux
committed
Reject oversized delta source offsets
danielinux
committed
fix memmove large-length backward copy
danielinux
committed
Use constant-time TPM secret checks
danielinux
committed
Use constant-time encryption key validation
danielinux
committed
Use fixed-length erased-key check
danielinux
committed
enforce skip-verify prerequisites
danielinux
committed
Add equal-version update-disk regression test
danielinux
committed
Reject valid zero-size delta images
danielinux
committed
Fix total size type in update flash
danielinux
committed
zeroize update key material
danielinux
committed
zero custom encrypt stack buffers
danielinux
committed
zeroize swap trailer key buffer
danielinux
committed
Scrub sign-tool encryption material
danielinux
committed
Use constant-time delta base hash compare
danielinux
committed
Warn when DISABLE_BACKUP is enabled
danielinux
committed
Add sign/parser roundtrip tests
danielinux
committed
Add delta roundtrip edge-case coverage
danielinux
committed
libwolfboot: fix encrypted test-app builds
danielinux
committed
tools/unit-tests: fix rebased sign test target
danielinux
committed
cmake: define bootloader protect macros
danielinux
committed
cmake: link default flash-protect hook
danielinux
committed
unit-tests: fix update_ram protect context
danielinux
committed
unit-tests: exclude keytools from coverage
danielinux
committed
nrf5340: match hal_flash_protect signature
danielinux
committed
unit-tests: avoid gcov memmove timeout
danielinux
committed

Commits on Apr 9, 2026

unit-tests: skip large memmove under coverage
danielinux
committed
options: normalize self-update monolithic flag
danielinux
committed
hal: document flash protect API contract
danielinux
committed
update: propagate encrypt key persist errors
danielinux
committed
docs: fix encrypt key erase return contract
danielinux
committed
boot: fail closed on flash protect errors
danielinux
committed
update: fix warning-only build regressions
danielinux
committed
string: fix unaligned backward word copies
danielinux
committed

Commits on Apr 10, 2026

encrypt: check custom key fetch in aes_init
danielinux
committed
Fix C89 decl-after-statement
danielinux
committed
sign: size policy tlv before header build
danielinux
committed
keygen: zero private material on all errors
danielinux
committed
sign: close output file on failure
danielinux
committed
update: propagate encrypt key read errors
danielinux
committed
string: gate memmove fast path
danielinux
committed
tpmtools: regenerate keystore in clean builds
danielinux
committed
update: always scrub final swap buffer
danielinux
committed
core: make constant compare common
danielinux
committed
keygen: fix double close on success
danielinux
committed
update: keep zeroize helper available
danielinux
committed
image: fix hardened hash compare sense
danielinux
committed
sign: normalize short read failures
danielinux
committed
footprint: fix mldsa keygen and ed448 limit
danielinux
committed
unit-tests: link common compare helper
danielinux
committed
tpm: localize constant compare again
danielinux
committed
image: restore ct compare contract
danielinux
committed
sign: size hybrid headers accurately
danielinux
committed
update: fix invalid size log
danielinux
committed
sign: use wc_ForceZero in cleanup
danielinux
committed
sign: clear stale file handles
danielinux
committed
image: use portable noinline macro
danielinux
committed
Updated .gitignore with new unit test binaries
danielinux
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.