Fenrir fixes#237

Merged

rlm2002 merged 13 commits into

wolfSSL:masterfrom

cconlon:fenrirJuly26AiAudit

Jul 9, 2026

Commits on Jul 7, 2026

F-4359: validate peer DH public key in WolfCryptKeyAgreement.engineDoPhase()
cconlon
committed
F-4366: fix use-after-free race in CertManager nativeVerifyCallback
cconlon
committed
F-4855: validate peer ECC public key in WolfCryptKeyAgreement.engineDoPhase()
cconlon
committed
F-5029: reject AES-GCM key and IV reuse for encryption in WolfCryptCipher
cconlon
committed
F-5030: use constant-time PKCS#7 unpadding and uniform BadPaddingException
cconlon
committed
F-5066: use a uniform exception for RSA PKCS#1 v1.5 unwrap failures
cconlon
committed
F-5222: reject AES-GMAC key and IV reuse in WolfCryptMac
cconlon
committed
F-5794: synchronize FIPS error callback access in jni_fips.c
cconlon
committed
F-5795: match qualified jdk.certpath.disabledAlgorithms entries by algorithm name
cconlon
committed
F-5887: close Curve25519 release split-lock race by freeing under one lock
cconlon
committed
F-5888: hard-fail OCSP revoked status regardless of SOFT_FAIL
cconlon
committed
F-5905: enforce 1 < Y < p-1 range on DH public key in KeyFactory import
cconlon
committed
F-5906: enforce 1 < Y < p-1 range on DH public key in X.509 import
cconlon
committed