Update specs to PSA 1.4 + Low/Info fenrir fixes - #19

Merged

dgarske merged 24 commits into

wolfSSL:masterfrom

danielinux:PSA-1.4

Jun 10, 2026

Commits on Jun 10, 2026

F-3860: add direction-mismatch tests for psa_aead_finish and psa_aead_verify
danielinux
committed
4e35d84
F-3859: add test_hash_compare covering success, mismatch, wrong-length, and non-hash-alg paths
danielinux
committed
6c8db18
F-3660: fix algorithm confusion in psa_xchacha20_poly1305_encrypt/decrypt
danielinux
committed
046f3d0
F-3658: zeroize padded plaintext block in CBC-PKCS7 encrypt path
danielinux
committed
19b51ca
F-3653: check ciphertext buffer size before psa_aead_finish to avoid modifying output on BUFFER_TOO_SMALL
danielinux
committed
f8c4f11
F-4561: check output buffer size before psa_cipher_generate_iv in psa_cipher_encrypt
danielinux
committed
38d943f
F-4560: add wc_ecc_make_pub_ex to psa_asymmetric_export_public_key_ecc and wire it in
danielinux
committed
0f67845
F-4096: reject PSA_ALG_AEAD_WITH_AT_LEAST_THIS_LENGTH_TAG in wolfpsa_aead_setup
danielinux
committed
930f0b3
F-4090: use PSA_BITS_TO_BYTES instead of key_bits/8 in wc_ecc_make_key_ex call
danielinux
committed
6c7f12b
F-3862: add SHAKE256_512 to hash engine so psa_sign/verify_message works for Ed448PH
danielinux
committed
889910a
F-3656: remove dead psa_chacha20_poly1305_check_* helpers with no callers
danielinux
committed
e89506b
F-3655: remove dead psa_tls_prf helpers with no callers
danielinux
committed
bbc9206
F-3654: fix dead out_len guard in wolfpsa_aead_encrypt_final ChaCha branch
danielinux
committed
3ef39c4
build: enable ML-KEM, LMS/XMSS verify-only, Ascon, XChaCha, AES-KW, CMAC-KDF
danielinux
committed
8ac5c34
headers: complete PSA 1.4 + PQC extension macro/declaration surface
danielinux
committed
1ab901e
pqc: seed-based ML-DSA and ML-KEM backends per PSA 1.4 PQC extension
danielinux
committed
6390a47
psa: KEM front-end, XOF, AES-KW, LMS/XMSS verify, 1.4 stubs
danielinux
committed
8ef3aed
psa: wire PQC and 1.4 signature features into key storage and dispatch
danielinux
committed
73f0f54
crypto: Ascon, XChaCha20-Poly1305 and SP800-108 counter KDFs
danielinux
committed
aa470dd
tests/ci: PSA 1.4 coverage suite, CHANGELOG
danielinux
committed
956b9d4
build-matrix: survive feature-off builds and cover the new 1.4 features
danielinux
committed
c93281b
chacha: remove dormant XChaCha20-Poly1305 helpers
danielinux
committed
aab839e
Fix Skoll follow-ups and PSA test regression
danielinux
committed
6e6fb80
Address review follow-ups: dead AEAD check_key branches, SP800-108 L docs
danielinux
committed
ee99669

Navigation Menu

Uh oh!

Update specs to PSA 1.4 + Low/Info fenrir fixes - #19

Update specs to PSA 1.4 + Low/Info fenrir fixes#19
dgarske merged 24 commits into
wolfSSL:masterfrom
danielinux:PSA-1.4

Commits on Jun 10, 2026

F-3860: add direction-mismatch tests for psa_aead_finish and psa_aead_verify

F-3859: add test_hash_compare covering success, mismatch, wrong-length, and non-hash-alg paths

F-3660: fix algorithm confusion in psa_xchacha20_poly1305_encrypt/decrypt

F-3658: zeroize padded plaintext block in CBC-PKCS7 encrypt path

F-3653: check ciphertext buffer size before psa_aead_finish to avoid modifying output on BUFFER_TOO_SMALL

F-4561: check output buffer size before psa_cipher_generate_iv in psa_cipher_encrypt

F-4560: add wc_ecc_make_pub_ex to psa_asymmetric_export_public_key_ecc and wire it in

F-4096: reject PSA_ALG_AEAD_WITH_AT_LEAST_THIS_LENGTH_TAG in wolfpsa_aead_setup

F-4090: use PSA_BITS_TO_BYTES instead of key_bits/8 in wc_ecc_make_key_ex call

F-3862: add SHAKE256_512 to hash engine so psa_sign/verify_message works for Ed448PH

F-3656: remove dead psa_chacha20_poly1305_check_* helpers with no callers

F-3655: remove dead psa_tls_prf helpers with no callers

F-3654: fix dead out_len guard in wolfpsa_aead_encrypt_final ChaCha branch

build: enable ML-KEM, LMS/XMSS verify-only, Ascon, XChaCha, AES-KW, CMAC-KDF

headers: complete PSA 1.4 + PQC extension macro/declaration surface

pqc: seed-based ML-DSA and ML-KEM backends per PSA 1.4 PQC extension

psa: KEM front-end, XOF, AES-KW, LMS/XMSS verify, 1.4 stubs

psa: wire PQC and 1.4 signature features into key storage and dispatch

crypto: Ascon, XChaCha20-Poly1305 and SP800-108 counter KDFs

tests/ci: PSA 1.4 coverage suite, CHANGELOG

build-matrix: survive feature-off builds and cover the new 1.4 features

chacha: remove dormant XChaCha20-Poly1305 helpers

Fix Skoll follow-ups and PSA test regression

Address review follow-ups: dead AEAD check_key branches, SP800-108 L docs