Skip to content

Harden COSE parsing, key handling, and cryptographic operations - #67

Open
aidangarske wants to merge 48 commits into
wolfSSL:mainfrom
aidangarske:fenrir-fixes
Open

Harden COSE parsing, key handling, and cryptographic operations#67
aidangarske wants to merge 48 commits into
wolfSSL:mainfrom
aidangarske:fenrir-fixes

Conversation

@aidangarske

@aidangarske aidangarske commented Aug 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Member 
F-6422, F-6424, F-6610, F-8084, F-8085, F-8086, F-8087, F-8090, F-8108, 
F-8109, F-8110, F-8111, F-8112, F-8113, F-8114, F-8115, F-8116, F-8117, 
F-8118, F-8119, F-8120, F-8126, F-8127, F-8130, F-8131, F-8132, F-8138, 
F-9297, F-9298, F-9870, F-9871, F-9872, F-9873, F-9874, F-9876, F-9880,
F-9886, F-9887, F-9888, F-9889, F-9894, F-9895, F-9896, F-9897, F-9898,
F-9899, F-9900, F-9903

@aidangarske aidangarske self-assigned this Aug 18, 2026
Copilot AI lite review requested due to automatic review settings August 18, 2026 19:27
Copilot AI reviewed Aug 18, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

@aidangarske
F-6422 - Use compatible pointer types for CBOR float copies
a3dd3b7
@aidangarske
F-6424 - Pin CBOR minimal-length decoding thresholds
e82cbe5
@aidangarske
F-9297 - Document COSE Encrypt recipient modes
4a4cc8e
@aidangarske
F-9298 - Correct ECDH KDF context documentation
f5ae403
@aidangarske
F-9880 - Document delegated Sign1 requirements
b5c0e05
@aidangarske
F-9888 - Reject floating-point recipient ciphertext
3253c2c
@aidangarske
F-8117 - Validate metadata-only AKP algorithms
d18c0f0
@aidangarske
F-8112 - Validate unselected COSE headers
30a29ed
@aidangarske
F-8084 - Reject oversized HMAC keys
609ce81
@aidangarske
F-8118 - Require AKP public key material
6c09027
@aidangarske
F-8087 - Reject nonempty direct MAC ciphertext
115049e
@aidangarske
F-8119 - Validate metadata-only ML-DSA seed length
0c4e5fb
@aidangarske
F-8113 - Reject mixed direct recipient modes
570e4db
@aidangarske
F-8120 - Validate attached ML-DSA public keys
9734a82
@aidangarske
F-8086 - Validate direct recipient transported key
9272de1
@aidangarske
F-9873 - Decode unprotected content types
a841d1d
@aidangarske
F-8114 - Require empty direct recipient ciphertext
0cd6b5e
@aidangarske
F-9874 - Use decrypt scratch for ECDH KDF context
097e325
@aidangarske
aidangarske force-pushed the fenrir-fixes branch 2 times, most recently from 3723123 to b9d78df Compare August 19, 2026 01:54
@aidangarske
aidangarske marked this pull request as ready for review August 19, 2026 16:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@mattia-moffa mattia-moffa Awaiting requested review from mattia-moffa

Assignees

@mattia-moffa mattia-moffa

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@aidangarske @mattia-moffa