Various hardening, fixes, and testing#56

Merged

mattia-moffa merged 8 commits into

wolfSSL:mainfrom

aidangarske:fenrir-fixes-6137-6144

Jun 23, 2026

Commits on Jun 22, 2026

F-6139 - Pin AES-CBC-MAC tag bytes with a known-answer test at the block boundary
aidangarske
committed
F-6137 - Require explicit WOLFCOSE_ALG_DIRECT in wc_CoseMac_Create
aidangarske
committed
F-6140 - Add HMAC-384 and HMAC-512 short-key rejection tests
aidangarske
committed
F-6141 - Const-qualify wc_CoseSign1_Verify key parameter
aidangarske
committed
F-6138 - Classify recipient alg and enforce algId policy in wc_CoseMac_Verify
aidangarske
committed
F-6142 - Extend Encrypt0 empty-payload roundtrip to AES-CCM and ChaCha20-Poly1305
aidangarske
committed
F-6143 - Cover 8-byte negint argument width and INT64_MIN in CBOR roundtrip
aidangarske
committed
F-6144 - Range-check ephemeral COSE_Key crv before narrowing cast
aidangarske
committed