Fenrir fixes 2026 09 23 - #31

Open

danielinux wants to merge 31 commits into

wolfSSL:masterfrom

danielinux:fenrir-fixes-2026-09-23

Commits on Sep 23, 2026

F-13860: clear the copy_key target id on failure
danielinux
committed
0318faf
F-13861: accept a zero-byte generation request
danielinux
committed
be2612c
F-13862: accept NULL zero-capacity export buffers
danielinux
committed
c18851e
F-13863: report BUFFER_TOO_SMALL for a zero-capacity finish
danielinux
committed
ecd9744
F-13864: report INVALID_SIGNATURE for an empty reference digest
danielinux
committed
f35028b
F-13865: report BUFFER_TOO_SMALL for a zero-capacity finish
danielinux
committed
9032c9e
F-13866: accept a zero-capacity ciphertext in encapsulate
danielinux
committed
3938516
F-13867: map RSA_PAD_E to INVALID_SIGNATURE
danielinux
committed
cfa0aea
F-13858: size the digest buffers for SHAKE output
danielinux
committed
7ea9366
F-13868: accept NULL zero-capacity output buffers
danielinux
committed
fe23dd1
F-13869: report INVALID_SIGNATURE for an empty signature
danielinux
committed
d2da172
F-13870: accept NULL zero-capacity nonce and tag buffers
danielinux
committed
6066f58
F-13871: report INVALID_SIGNATURE for an empty tag
danielinux
committed
289b4fa
F-13872: accept a zero-capacity generate_iv buffer
danielinux
committed
e1f4a64
F-13857: honor the devId in X25519/X448 export
danielinux
committed
286bf05
F-13873: drop HMAC from the sign_hash worker comment
danielinux
committed
33824fb
F-13874: correct the suspend buffer size comment
danielinux
committed
14c6fc0
F-13880: fix the CCM counter carry re-arm
danielinux
committed
07d3e95
F-13890: negative usage-policy coverage for XChaCha20 and Ascon
danielinux
committed
185cf5e
F-13911: accept NULL zero-length one-shot buffers
danielinux
committed
b655273
F-13912: validate the finish output pointer
danielinux
committed
21020d6
F-13913: make the interruptible max-ops counter atomic
danielinux
committed
8e35163
F-13914: zeroize the computed tag in multipart verify
danielinux
committed
2437e05
F-13920: zeroize the CCM init stack state
danielinux
committed
d13e2cf
F-13921: zeroize the CCM update stack state
danielinux
committed
c39be3d
F-13922: zeroize the CCM finish stack state
danielinux
committed
fa1aed4
asymmetric: reject NULL hash and input pointers in the sign workers
danielinux
committed
6e5ecde
rsa: size the decrypt output buffer by the actual plaintext
danielinux
committed
166cf99
rsa: report INVALID_PADDING for a failed decrypt unpad
danielinux
committed
c36b857
montgomery: accept NULL zero-capacity export buffers
danielinux
committed
76df833
test: skip the decrypt-only AEAD policy cases when unsupported
danielinux
committed
473e270

Navigation Menu

Fenrir fixes 2026 09 23 - #31

Fenrir fixes 2026 09 23#31
danielinux wants to merge 31 commits into
wolfSSL:masterfrom
danielinux:fenrir-fixes-2026-09-23

Commits on Sep 23, 2026

F-13860: clear the copy_key target id on failure

F-13861: accept a zero-byte generation request

F-13862: accept NULL zero-capacity export buffers

F-13863: report BUFFER_TOO_SMALL for a zero-capacity finish

F-13864: report INVALID_SIGNATURE for an empty reference digest

F-13865: report BUFFER_TOO_SMALL for a zero-capacity finish

F-13866: accept a zero-capacity ciphertext in encapsulate

F-13867: map RSA_PAD_E to INVALID_SIGNATURE

F-13858: size the digest buffers for SHAKE output

F-13868: accept NULL zero-capacity output buffers

F-13869: report INVALID_SIGNATURE for an empty signature

F-13870: accept NULL zero-capacity nonce and tag buffers

F-13871: report INVALID_SIGNATURE for an empty tag

F-13872: accept a zero-capacity generate_iv buffer

F-13857: honor the devId in X25519/X448 export

F-13873: drop HMAC from the sign_hash worker comment

F-13874: correct the suspend buffer size comment

F-13880: fix the CCM counter carry re-arm

F-13890: negative usage-policy coverage for XChaCha20 and Ascon

F-13911: accept NULL zero-length one-shot buffers

F-13912: validate the finish output pointer

F-13913: make the interruptible max-ops counter atomic

F-13914: zeroize the computed tag in multipart verify

F-13920: zeroize the CCM init stack state

F-13921: zeroize the CCM update stack state

F-13922: zeroize the CCM finish stack state

asymmetric: reject NULL hash and input pointers in the sign workers

rsa: size the decrypt output buffer by the actual plaintext

rsa: report INVALID_PADDING for a failed decrypt unpad

montgomery: accept NULL zero-capacity export buffers

test: skip the decrypt-only AEAD policy cases when unsupported