ISO 19790 Zeroization for v7 - #11434

Open

jackctj117 wants to merge 9 commits into

wolfSSL:masterfrom

jackctj117:ISO-19790-FIPS-PQ

Commits on Sep 15, 2026

Zeroize EdDSA scalars and KDF blocks; reject non-canonical Ed448 keys
jackctj117
committed
0157ea9
Zeroize temporary SSPs in the FIPS v7 boundary
jackctj117
committed
eb7221a
SP: zero-free scalar copies, ECDH points and modexp buffers
jackctj117
committed
c765ace
Zeroize remaining temporaries and failure paths
jackctj117
committed
b52eefc
SHA Free: release msg and W before the callback-path wipe
jackctj117
committed
498fb16
Address review: keep destructors off caller-owned contexts, fix entropy include
jackctj117
committed
657b313
Use ForceZero where XMEMSET wiped sensitive data
jackctj117
committed
917ce0c
NoiseSrc: ForceZero the health-test state on free
jackctj117
committed
55a2e50
SHA-3 Free: wipe state only; RSA even-mod test expects the wiped buffer
jackctj117
committed
0ad5d42