Skip to content

Prep wolfProvider 1.2.1 release #451

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
aidangarske merged 1 commit into from
Jul 17, 2026
+40 −2
Merged

Prep wolfProvider 1.2.1 release #451

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 33 additions & 1 deletion ChangeLog.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,36 @@
# wolfProvider version 1.2.1 (July 16, 2026)

Release 1.2.1 has been developed according to wolfSSL's development and QA
process and successfully passed the quality criteria.

PR stands for Pull Request, and PR <NUMBER> references a GitHub pull request
number where the code change was added.

## New Feature Additions
Comment thread
aidangarske marked this conversation as resolved.
Comment thread
aidangarske marked this conversation as resolved.
* Add ML-KEM (FIPS 203) and ML-DSA (FIPS 204) post-quantum support via `--enable-pqc` (PR 399)

## Enhancements and Optimizations
Comment thread
aidangarske marked this conversation as resolved.
* Route KDF key-exchange and MAC-signature operations through wolfProvider directly (PR 429)
* Strengthen RSA key import and CRT validation (PR 339)
* Enforce DH minimum prime size on the parameters-only generation path
* Add bounds checks on OSSL_PARAMS for EC, DH, and RSA (PR 398)
* Add input validation, memory-safety, and key zeroization hardening (PR 420, PR 438, PR 441)
* Add nightly OpenSSL command performance regression testing (PR 411)

## Bug Fixes
Comment thread
aidangarske marked this conversation as resolved.
* Fix FIPS decode performance regression where decoders ran self-tests on non-matching keys before checking the key type, and serialize the RSA self-test to close a concurrent decode race (PR 413)
* Fix EncryptedPrivateKeyInfo (PBES2) encode and decode across all key types (PR 426)
* Fix AES-GCM TLS IV length check and AEAD tag length validation (PR 416)
* Fix integer overflow in DH derive (PR 439)
* Fix TLS1 PRF to reject unsupported digests instead of defaulting to SHA-384, and report FIPS module failures through the provider running check (PR 431)
* Fix ECX security-bits reporting for X25519 and X448 (PR 417)
* Constrain file store decoders to the caller's provider boundary (PR 430)
* Gate secp192r1/P-192 TLS group advertisement on curve availability (PR 432)
* Gate DRBG reseed on FIPS version (PR 408)
* Fix DH FFC_Q export for PKCS#3 keys for OpenSSL 3.6.3 interop (PR 406)
* Fix seed-src to read /dev/urandom via a raw fd, avoiding seccomp failures in restrictive sandboxes (PR 440)
* Fix macOS library path handling in build scripts (PR 443, PR 444)

# wolfProvider version 1.2.0 (June 08, 2026)

Release 1.2.0 has been developed according to wolfSSL's development and QA
Expand Down Expand Up @@ -44,7 +77,6 @@ PR stands for Pull Request, and PR <NUMBER> references a GitHub pull request
number where the code change was added.

## New Feature Additions
* Add ML-KEM (FIPS 203) and ML-DSA (FIPS 204) post-quantum algorithm support via `--enable-pqc` (PR 399)
* Add OpenSSL FIPS baseline process implementation (PR 357)
* Add seed-src handling for wolfProvider (PR 350)
* Add EC public key auto derivation from private key (PR 338)
Expand Down
2 changes: 1 addition & 1 deletion configure.ac
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@

AC_COPYRIGHT([Copyright (C) 2024 wolfSSL Inc.])
AC_PREREQ([2.69])
AC_INIT([wolfprov], [1.2.0])
AC_INIT([wolfprov], [1.2.1])
AC_CONFIG_AUX_DIR([build-aux])

AC_CONFIG_HEADERS([include/config.h])
Expand Down
6 changes: 6 additions & 0 deletions debian/changelog
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,9 @@
libwolfprov (1.2.1-1) unstable; urgency=medium

* Release version 1.2.1-1

-- WolfSSL Developer <support@wolfssl.com> Thu, 16 Jul 2026 12:54:10 -0700

libwolfprov (1.2.0-1) unstable; urgency=medium

* Release version 1.2.0-1
Expand Down
Loading