Update specs to PSA 1.4 + Low/Info fenrir fixes#19

Merged

dgarske merged 24 commits into

wolfSSL:masterfrom

danielinux:PSA-1.4

Jun 10, 2026

Commits on Jun 10, 2026

F-3860: add direction-mismatch tests for psa_aead_finish and psa_aead_verify
danielinux
committed
F-3859: add test_hash_compare covering success, mismatch, wrong-length, and non-hash-alg paths
danielinux
committed
F-3660: fix algorithm confusion in psa_xchacha20_poly1305_encrypt/decrypt
danielinux
committed
F-3658: zeroize padded plaintext block in CBC-PKCS7 encrypt path
danielinux
committed
F-3653: check ciphertext buffer size before psa_aead_finish to avoid modifying output on BUFFER_TOO_SMALL
danielinux
committed
F-4561: check output buffer size before psa_cipher_generate_iv in psa_cipher_encrypt
danielinux
committed
F-4560: add wc_ecc_make_pub_ex to psa_asymmetric_export_public_key_ecc and wire it in
danielinux
committed
F-4096: reject PSA_ALG_AEAD_WITH_AT_LEAST_THIS_LENGTH_TAG in wolfpsa_aead_setup
danielinux
committed
F-4090: use PSA_BITS_TO_BYTES instead of key_bits/8 in wc_ecc_make_key_ex call
danielinux
committed
F-3862: add SHAKE256_512 to hash engine so psa_sign/verify_message works for Ed448PH
danielinux
committed
F-3656: remove dead psa_chacha20_poly1305_check_* helpers with no callers
danielinux
committed
F-3655: remove dead psa_tls_prf helpers with no callers
danielinux
committed
F-3654: fix dead out_len guard in wolfpsa_aead_encrypt_final ChaCha branch
danielinux
committed
build: enable ML-KEM, LMS/XMSS verify-only, Ascon, XChaCha, AES-KW, CMAC-KDF
danielinux
committed
headers: complete PSA 1.4 + PQC extension macro/declaration surface
danielinux
committed
pqc: seed-based ML-DSA and ML-KEM backends per PSA 1.4 PQC extension
danielinux
committed
psa: KEM front-end, XOF, AES-KW, LMS/XMSS verify, 1.4 stubs
danielinux
committed
psa: wire PQC and 1.4 signature features into key storage and dispatch
danielinux
committed
crypto: Ascon, XChaCha20-Poly1305 and SP800-108 counter KDFs
danielinux
committed
tests/ci: PSA 1.4 coverage suite, CHANGELOG
danielinux
committed
build-matrix: survive feature-off builds and cover the new 1.4 features
danielinux
committed
chacha: remove dormant XChaCha20-Poly1305 helpers
danielinux
committed
Fix Skoll follow-ups and PSA test regression
danielinux
committed
Address review follow-ups: dead AEAD check_key branches, SP800-108 L docs
danielinux
committed