Gate FFI declarations and add key validation for optional wolfSSL build configurations - #144

Open

julek-wolfssl wants to merge 26 commits into

wolfSSL:masterfrom

julek-wolfssl:fenrir/20260924

Commits on Sep 24, 2026

Disarm ChaCha when set_iv() rejects the nonce length (F-10069)
julek-wolfssl
committed
2e03fa6

Commits on Sep 25, 2026

Validate ECC public keys with wc_ecc_check_key on import (F-8277)
julek-wolfssl
committed
ebd1f76
Size ECC private key DER buffer with wc_EccKeyDerSize (F-10070)
julek-wolfssl
committed
e0f0bc9
Detect AES-CTR support before declaring wc_AesCtrEncrypt (F-11250)
julek-wolfssl
committed
c9685f9
Declare AES-CBC functions only when wolfSSL provides them (F-12224)
julek-wolfssl
committed
e52e769
Gate streaming AES-GCM decryption on wolfSSL decrypt support (F-12225)
julek-wolfssl
committed
4a612c7
Declare SHA-3 functions only for sizes wolfSSL provides (F-12226)
julek-wolfssl
committed
af6c329
Detect HKDF only when wolfSSL also provides HMAC (F-13020)
julek-wolfssl
committed
c505da1
Declare wc_PBKDF2 only when wolfSSL builds PBKDF2 with HMAC (F-12232)
julek-wolfssl
committed
d121fb3
Detect PEM-to-DER and DER-to-PEM support separately (F-12233)
julek-wolfssl
committed
3480917
Declare wc_GetPkcs8TraditionalOffset only with PKCS#8 support (F-12234)
julek-wolfssl
committed
d3b631d
Declare RNG functions only when wolfSSL builds its RNG (F-13021)
julek-wolfssl
committed
78bf17e
Declare RSA operations only when wolfSSL builds them (F-12227)
julek-wolfssl
committed
6b5f504
Declare ECC operations only when wolfSSL builds them (F-12228)
julek-wolfssl
committed
f9345e9

Commits on Sep 28, 2026

Commits on Sep 29, 2026

Address review: create RSA RNG on first use
julek-wolfssl
committed
cccacb7