Skip to content

Cryptocb hooks rsapss ed448 cmac#10886

Open
night1rider wants to merge 1 commit into
wolfSSL:masterfrom
night1rider:cryptocb-hooks-rsapss-ed448-cmac
Open

Cryptocb hooks rsapss ed448 cmac#10886
night1rider wants to merge 1 commit into
wolfSSL:masterfrom
night1rider:cryptocb-hooks-rsapss-ed448-cmac

Conversation

@night1rider

@night1rider night1rider commented Jul 12, 2026

Copy link
Copy Markdown
Contributor

Adds WOLF_CRYPTO_CB crypto callback hooks so a device can service three more operations:
Ed448 sign and verify, mirroring the existing Ed25519 hooks.
CMAC context free on wc_CmacFree (WOLF_CRYPTO_CB_FREE), letting a device release offload state.
RSA-PSS verify with the digest (WOLF_CRYPTO_CB_RSA_PAD) so the device performs the full signature and padding check.
Includes testwolfcrypt and API unit test coverage for each hook.

@night1rider night1rider self-assigned this Jul 12, 2026
@night1rider
night1rider marked this pull request as ready for review July 12, 2026 03:51
@github-actions

Copy link
Copy Markdown

retest this please

@github-actions

github-actions Bot commented Jul 12, 2026

Copy link
Copy Markdown

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10886

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

Findings: 4
4 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

@night1rider
night1rider force-pushed the cryptocb-hooks-rsapss-ed448-cmac branch from 0108bd2 to 10370ac Compare July 12, 2026 04:45

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10886

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

Findings: 3
3 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

@night1rider
night1rider force-pushed the cryptocb-hooks-rsapss-ed448-cmac branch from 10370ac to 513619f Compare July 12, 2026 06:08

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10886

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

Findings: 2
2 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10886

Scan targets checked: wolfcrypt-bugs, wolfcrypt-port-bugs, wolfcrypt-rs-bugs, wolfcrypt-src, wolfssl-bugs, wolfssl-src

Findings: 1
1 finding(s) posted as inline comments (see file-level comments below)

This review was generated automatically by Fenrir. Findings are non-blocking.

Comment thread wolfcrypt/src/rsa.c
@night1rider
night1rider force-pushed the cryptocb-hooks-rsapss-ed448-cmac branch 2 times, most recently from b20a6df to dc84530 Compare July 20, 2026 22:42
@night1rider

Copy link
Copy Markdown
Contributor Author

jenkins retest this please

Add WOLF_CRYPTO_CB dispatch hooks so a device can service:
* Ed448 sign and verify, mirroring the existing Ed25519 hooks.
* CMAC context free on wc_CmacFree (WOLF_CRYPTO_CB_FREE), letting a device
  release offload state.
* RSA-PSS verify with the digest (WOLF_CRYPTO_CB_RSA_PAD) so the device does
  the full signature and padding check. On that path *out is set to NULL with a
  positive return, documented in rsa.h.

Includes testwolfcrypt and API unit test coverage for each hook.
@night1rider
night1rider force-pushed the cryptocb-hooks-rsapss-ed448-cmac branch from dc84530 to 54ed373 Compare July 23, 2026 06:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants