Fenrir fixes 2026 08 26 - #25

Merged

Frauschi merged 42 commits into

wolfSSL:masterfrom

danielinux:fenrir-fixes-2026-08-26

Aug 31, 2026

Commits on Aug 27, 2026

F-11575: report wrong-length raw ECDSA signatures as INVALID_SIGNATURE
danielinux
committed
631038a
F-10435: gate secp256k1 and Brainpool curve ids on capability flags
danielinux
committed
c3b579a
F-8722: pin ECC curve on public-key import in verify
danielinux
committed
51327bb
F-8724: pin peer point to the local key's curve in ECDH
danielinux
committed
ba163e5
F-10427: dispatch DeterministicHashML-DSA to the seeded signer
danielinux
committed
c87ee73
F-10428: keep the HashML-DSA ANY_HASH wildcard within one family
danielinux
committed
0c6fc5c
F-9418: correct the hedged/deterministic claim in verify comment
danielinux
committed
c52ad3e
F-11569: define the XOF API when no SHAKE backend is built
danielinux
committed
672d467
F-8713: size the XOF input buffer in size_t
danielinux
committed
493d6bd
F-8728: keep the XOF output accounting in size_t
danielinux
committed
2da7bc4
F-11578: abort the operation when set_context rejects a context
danielinux
committed
882af02
F-8719: use 128-bit passwords directly in PBKDF2-AES-CMAC-PRF-128
danielinux
committed
5d54d24
F-8721: accept compatible MAC keys as SP800-108 input secrets
danielinux
committed
ff9c177
F-8729: reject SP800-108 label/context lengths above UINT32_MAX
danielinux
committed
77abece
F-11567: dispatch standalone EdDSA and Montgomery key generation outside HAVE_ECC
danielinux
committed
ebfa783
F-11568: dispatch standalone EdDSA and Montgomery public-key export outside HAVE_ECC
danielinux
committed
149afd1
F-8727: reject unstructured key imports whose inferred bits overflow
danielinux
committed
0c9b7a4
F-8717: validate declared bits against data length for byte-string keys
danielinux
committed
3f0acf0
F-11590: validate stored seed length before ML-DSA/ML-KEM public export
danielinux
committed
fe749ae
F-10429: reject overlapping input/output in one-shot cipher encrypt
danielinux
committed
686407d
F-10430: reject overlapping input/output in multipart cipher update
danielinux
committed
79549bc
F-8741: zero the cipher partial-block buffer on every exit
danielinux
committed
c43c15b
F-8736: validate output_length in one-shot cipher functions
danielinux
committed
1aac578
F-10433: admit CBC_PKCS7 for DES keys in cipher setup
danielinux
committed
82e8414
F-8738: check the PKCS7 partial-length invariant instead of dead fallback
danielinux
committed
87345b4
test: build and run the regression tests in CI
danielinux
committed
884cf39
Address Fenrir review comments on the regression tests and ECDH RNG
danielinux
committed
8ec2048
Scope the update overlap guard to block modes; gate GiB tests on memory
danielinux
committed
de8e09c

Commits on Aug 28, 2026

cipher: reject overlapping input/output in one-shot decrypt
danielinux
committed
027ab39
cipher: zero the PKCS7 partial-block buffer on decrypt exits
danielinux
committed
2567f1f
xof: hold the input-length bound where size_t is 32 bits
danielinux
committed
cf1d163
ecc: pin the exported public key to the key's curve
danielinux
committed
cb512fb
ecc: gate the Brainpool family on HAVE_ECC_BRAINPOOL
danielinux
committed
56ee43d
test: give the ECC curve tests real coverage
danielinux
committed
acabe21
mldsa: admit the other HashML-DSA family for verify usages
danielinux
committed
c73cdc9
ecc: report Weierstrass ECDH as unsupported without an RNG
danielinux
committed
89a5628
test: include unistd.h for mkdtemp in the declared-bits test
danielinux
committed
762ec8a

Commits on Aug 31, 2026