Pq fips fenrir by jackctj117 · Pull Request #11359 · wolfSSL/wolfssl

Reject HMAC keys longer than 1024 bits in the FIPS v7 approved mode, since FIPS 198-1 Section 4 folds them to K0 = H(K) but they fall outside the module's CAVP-tested key range (Fenrir F-9546).

jackctj117

committed

f00c604

Refuse ECDSA key pair generation and signature generation on curves below 224 bits under FIPS v7 per SP 800-131A Rev. 2 Table 2, leaving signature verification with those curves available as legacy…

jackctj117

committed

f28137b

Restrict the FIPS v7 ECDH shared-secret service to the KAS-ECC-SSC validated curves P-256, P-384 and P-521 ahead of every crypto-callback and hardware dispatch (Fenrir F-9544).

jackctj117

committed

cd02bf6

Draw wc_RNG_DRBG_Reseed entropy from the module's seed source and mix the caller's bytes as additional_input under FIPS v7, because SP 800-90A Rev. 1 Section 9.2 forbids consuming-application entro…

jackctj117

committed

8b83dfa

Expect the FIPS v7 1024-bit HMAC key maximum from the long RFC 4231 style test vectors and keep them covered through the wc_HmacSetKey_ex allowFlag escape (Fenrir F-9546).

jackctj117

committed

45c4652

Accept the WC_FIPS_NOT_APPROVED indicator for the 8-byte-salt PBKDF2 vector under FIPS v7 per SP 800-132 Section 5.1 (Fenrir F-7779).

jackctj117

committed

136e915

Normalize the WC_FIPS_NOT_APPROVED indicator that FIPS v7 returns for wc_ecc_sign_set_k staging and for the signatures that consume the staged k per FIPS 186-5 Section 6.3 (Fenrir F-7778).

jackctj117

committed

e482ab0

Expect the FIPS v7 generic HKDF wrappers to refuse SHA-1 per SP 800-56C Rev. 2 Section 4 (Fenrir F-7758).

jackctj117

committed

b7af9ef

Assert the FIPS v7 refusal of key agreement on curves outside the validated KAS-ECC-SSC set and skip the composite flow for them like the existing key-size mismatch path (Fenrir F-9544).

jackctj117

committed

723ab21

Expect FIPS_WRONG_API_E from every RSAES-PKCS1-v1_5 key-transport path under FIPS v7 per SP 800-131A Rev. 2 Section 6 (Table 5) (Fenrir F-7361).

jackctj117

committed

d3de031

Compile the ECDH crypto-callback dispatch out of FIPS v7 builds, since the software-only module cannot offload to an implementation that has not been CAVP tested per FIPS 140-3 IG C.B, leaving a hy…

jackctj117

committed

7d95e29

Fail the staged-k ECDSA and 8-byte-salt PBKDF2 tests when the WC_FIPS_NOT_APPROVED indicator is not delivered to the caller, instead of absorbing it wherever it appears, so the tests prove the modu…

jackctj117

committed

393e229

Navigation Menu

Uh oh!

Pq fips fenrir - #11359

Pq fips fenrir#11359
jackctj117 wants to merge 12 commits into
wolfSSL:masterfrom
jackctj117:PQ-FIPS-Fenrir

Commits on Sep 2, 2026

Reject HMAC keys longer than 1024 bits in the FIPS v7 approved mode, since FIPS 198-1 Section 4 folds them to K0 = H(K) but they fall outside the module's CAVP-tested key range (Fenrir F-9546).

Refuse ECDSA key pair generation and signature generation on curves below 224 bits under FIPS v7 per SP 800-131A Rev. 2 Table 2, leaving signature verification with those curves available as legacy…

Restrict the FIPS v7 ECDH shared-secret service to the KAS-ECC-SSC validated curves P-256, P-384 and P-521 ahead of every crypto-callback and hardware dispatch (Fenrir F-9544).

Draw wc_RNG_DRBG_Reseed entropy from the module's seed source and mix the caller's bytes as additional_input under FIPS v7, because SP 800-90A Rev. 1 Section 9.2 forbids consuming-application entro…

Expect the FIPS v7 1024-bit HMAC key maximum from the long RFC 4231 style test vectors and keep them covered through the wc_HmacSetKey_ex allowFlag escape (Fenrir F-9546).

Accept the WC_FIPS_NOT_APPROVED indicator for the 8-byte-salt PBKDF2 vector under FIPS v7 per SP 800-132 Section 5.1 (Fenrir F-7779).

Normalize the WC_FIPS_NOT_APPROVED indicator that FIPS v7 returns for wc_ecc_sign_set_k staging and for the signatures that consume the staged k per FIPS 186-5 Section 6.3 (Fenrir F-7778).

Expect the FIPS v7 generic HKDF wrappers to refuse SHA-1 per SP 800-56C Rev. 2 Section 4 (Fenrir F-7758).

Assert the FIPS v7 refusal of key agreement on curves outside the validated KAS-ECC-SSC set and skip the composite flow for them like the existing key-size mismatch path (Fenrir F-9544).

Expect FIPS_WRONG_API_E from every RSAES-PKCS1-v1_5 key-transport path under FIPS v7 per SP 800-131A Rev. 2 Section 6 (Table 5) (Fenrir F-7361).

Compile the ECDH crypto-callback dispatch out of FIPS v7 builds, since the software-only module cannot offload to an implementation that has not been CAVP tested per FIPS 140-3 IG C.B, leaving a hy…

Fail the staged-k ECDSA and 8-byte-salt PBKDF2 tests when the WC_FIPS_NOT_APPROVED indicator is not delivered to the caller, instead of absorbing it wherever it appears, so the tests prove the modu…