SHA-3: fix wrong digest on refused vector claim, v7 gates, build fixes - #11441

Merged

JacobBarthelmeh merged 20 commits into

wolfSSL:masterfrom

kaleb-himes:PQ-FS-2026-Part3-SecurityReview-nofallback-P

Oct 2, 2026

Commits on Oct 1, 2026

sha3: bracket the block permute and gate non-approved services
kaleb-himes
committed
820885d
fips v7: build the ppc64 and riscv64 AES assembly
kaleb-himes
committed
9caeb26
sha3: claim the vector registers before the final absorb
kaleb-himes
committed
83233ee
sha3: refuse the Keccak-256 flag in a FIPS v7 build
kaleb-himes
committed
560ffb1
test: cover the retry after a refused vector-register claim
kaleb-himes
committed
c99ae8f
test: require the claim refusal before the SHA-3 retry
kaleb-himes
committed
b369889
sha3: only claim vector registers for the NEON arm32 block
kaleb-himes
committed
a18674c
settings: drop KMAC and cSHAKE from FIPS v7 module builds
kaleb-himes
committed
8d0f12d
sha3: no run-time C block switch in certifiable FIPS builds
kaleb-himes
committed
b30d11a
configure: refuse explicit kmac and cshake for a validated module
kaleb-himes
committed
758321f
sha3: address review findings in block selection and SetFlags
kaleb-himes
committed
311871c
test: use the vector-register debug macro, cover the NULL flag
kaleb-himes
committed
d6f734a
docs: refresh stale SHA-3 selection notes in mcdc and include.am
kaleb-himes
committed
25fbf63
sha3: gate the init-time C block switch for certifiable builds
kaleb-himes
committed
e4b8091
sha3: compile the trailing AVX2 arm only where it can run
kaleb-himes
committed
de5f111
configure: keep the kmac check from splitting the cshake comment
kaleb-himes
committed
0912ac6
fips v7: build the ppc32 AES assembly too
kaleb-himes
committed
1bbe9ec
sha3: keep Keccak-256 in dev builds, refuse it when certifiable
kaleb-himes
committed
9865399
sha3: name the C-block switch for what it does, not a claim
kaleb-himes
committed
c7c3f08
test: rename the refused-save test for what it checks
kaleb-himes
committed
baa31e3

Navigation Menu

SHA-3: fix wrong digest on refused vector claim, v7 gates, build fixes - #11441

SHA-3: fix wrong digest on refused vector claim, v7 gates, build fixes#11441
JacobBarthelmeh merged 20 commits into
wolfSSL:masterfrom
kaleb-himes:PQ-FS-2026-Part3-SecurityReview-nofallback-P

Commits on Oct 1, 2026

sha3: bracket the block permute and gate non-approved services

fips v7: build the ppc64 and riscv64 AES assembly

sha3: claim the vector registers before the final absorb

sha3: refuse the Keccak-256 flag in a FIPS v7 build

test: cover the retry after a refused vector-register claim

test: require the claim refusal before the SHA-3 retry

sha3: only claim vector registers for the NEON arm32 block

settings: drop KMAC and cSHAKE from FIPS v7 module builds

sha3: no run-time C block switch in certifiable FIPS builds

configure: refuse explicit kmac and cshake for a validated module

sha3: address review findings in block selection and SetFlags

test: use the vector-register debug macro, cover the NULL flag

docs: refresh stale SHA-3 selection notes in mcdc and include.am

sha3: gate the init-time C block switch for certifiable builds

sha3: compile the trailing AVX2 arm only where it can run

configure: keep the kmac check from splitting the cshake comment

fips v7: build the ppc32 AES assembly too

sha3: keep Keccak-256 in dev builds, refuse it when certifiable

sha3: name the C-block switch for what it does, not a claim

test: rename the refused-save test for what it checks