Harden COSE parsing, key handling, and cryptographic operations - #67

Open

aidangarske wants to merge 48 commits into

wolfSSL:mainfrom

aidangarske:fenrir-fixes

Commits on Aug 18, 2026

F-8109 - Honor unprotected recipient algorithms
aidangarske
committed
5b4c080
F-8110 - Require direct recipient algorithms
aidangarske
committed
a02c662
F-8111 - Validate unprotected content algorithm policy
aidangarske
committed
3f72a41
F-8115 - Reject unsupported COSE key operations
aidangarske
committed
ad4d440
F-8116 - Validate metadata-only EC2 key material
aidangarske
committed
0074743
F-9870 - Build COSE_Mac without COSE_Mac0
aidangarske
committed
6256981
F-9871 - Validate unprotected signer algorithm policy
aidangarske
committed
18ed304
F-9872 - Validate unprotected MAC algorithm policy
aidangarske
committed
45ca021
F-9887 - Reject floating-point MAC payloads
aidangarske
committed
237cab4

Commits on Aug 19, 2026

F-6422 - Use compatible pointer types for CBOR float copies
aidangarske
committed
a3dd3b7
F-6424 - Pin CBOR minimal-length decoding thresholds
aidangarske
committed
e82cbe5
F-9297 - Document COSE Encrypt recipient modes
aidangarske
committed
4a4cc8e
F-9298 - Correct ECDH KDF context documentation
aidangarske
committed
f5ae403
F-9880 - Document delegated Sign1 requirements
aidangarske
committed
b5c0e05
F-9888 - Reject floating-point recipient ciphertext
aidangarske
committed
3253c2c
F-8117 - Validate metadata-only AKP algorithms
aidangarske
committed
d18c0f0
F-8112 - Validate unselected COSE headers
aidangarske
committed
30a29ed
F-8084 - Reject oversized HMAC keys
aidangarske
committed
609ce81
F-8118 - Require AKP public key material
aidangarske
committed
6c09027
F-8087 - Reject nonempty direct MAC ciphertext
aidangarske
committed
115049e
F-8119 - Validate metadata-only ML-DSA seed length
aidangarske
committed
0c4e5fb
F-8113 - Reject mixed direct recipient modes
aidangarske
committed
570e4db
F-8120 - Validate attached ML-DSA public keys
aidangarske
committed
9734a82
F-8086 - Validate direct recipient transported key
aidangarske
committed
9272de1
F-9873 - Decode unprotected content types
aidangarske
committed
a841d1d
F-8114 - Require empty direct recipient ciphertext
aidangarske
committed
0cd6b5e
F-9874 - Use decrypt scratch for ECDH KDF context
aidangarske
committed
097e325
F-8085 - Validate COSE key import lengths
aidangarske
committed
3900aa6
F-9886 - Reject floating-point Encrypt ciphertext
aidangarske
committed
822d0ff
F-6610 - Cover MAC tag length validation
aidangarske
committed
84ef4a2
F-8130 - Validate ECDH ephemeral public keys
aidangarske
committed
bf36c46
F-8126 - Clear Ed25519 state after derivation failure
aidangarske
committed
9e6b9fa
F-8127 - Clear Ed448 state after derivation failure
aidangarske
committed
5182743
F-9900 - Clear ML-DSA state after seed expansion failure
aidangarske
committed
8d44e7e
F-9899 - Clear ECC state after private import failure
aidangarske
committed
89c5dcc
F-9889 - Add optional deterministic ECDSA signing
aidangarske
committed
bbdf722
F-8138 - Reject empty symmetric COSE keys
aidangarske
committed
88687a4
F-8108 - Require constant-time AES Key Wrap
aidangarske
committed
905821b
F-8090 - Reject mismatched ECC key coordinates
aidangarske
committed
c6ac7f4
F-8131 - Validate attached ECC curve metadata
aidangarske
committed
f5d6b96
F-8132 - Enforce minimum RSA-PSS key strength
aidangarske
committed
62c2f1f
F-9876 - Reject inconsistent external AAD
aidangarske
committed
8fe2598
F-9903 - Enforce AES-CCM payload limits
aidangarske
committed
8855e05
F-9894 - Guard HMAC-only algorithm classifier
aidangarske
committed
3c37b36
F-9895 - Use typed HMAC algorithm dispatch
aidangarske
committed
f2835ef
F-9896 - Use fixed-width CBOR label comparison
aidangarske
committed
515effd
F-9897 - Parenthesize CBOR label comparison
aidangarske
committed
140447b
F-9898 - Make example precedence explicit
aidangarske
committed
d637833