Harden COSE input and cleanup paths - #81

Merged

mattia-moffa merged 11 commits into

wolfSSL:mainfrom

aidangarske:fenrir-input-hardening-13016

Sep 14, 2026

Commits on Sep 9, 2026

F-13016 - Scrub AES state after callback cleanup
aidangarske
committed
a2ccec4
F-11108 - Remove unreachable recipient check
aidangarske
committed
d1ecd5f
F-12138 - Reject inconsistent detached length
aidangarske
committed
efa7727
F-12210 - Reject unprocessed critical content type
aidangarske
committed
678f670
F-12936 - Reject ECDSA signing without ASN
aidangarske
committed
c629cd6
F-12937 - Reject invalid protected header pointer
aidangarske
committed
a4d25ab
Preserve missing recipient algorithm error
aidangarske
committed
8536b1f

Commits on Sep 10, 2026

Cover critical text content type rejection
aidangarske
committed
3056fe2

Commits on Sep 14, 2026

F-11108 - Remove unreachable recipient check
aidangarske
committed
185b548
Merge current main into input hardening
aidangarske
committed
6e8d52f
Guard COSE label bit shift count
aidangarske
committed
334ff27