Security hardening, input validation, memory-safety, and key zeroization fixes#438

Merged

padelsbach merged 43 commits into

wolfSSL:masterfrom

aidangarske:fenrir-medium-batch

Jul 13, 2026

Commits on Jul 10, 2026

Commits on Jul 13, 2026

F-5184 - Fail closed when ECC private-scalar range check cannot run
aidangarske
committed
F-5925 - Assert split-record TLS CBC decrypt succeeds in test
aidangarske
committed
F-5198 - Zero DES3 TLS decrypt outLen when padding is invalid
aidangarske
committed
F-5198 - Add positive DES3 TLS CBC decrypt test
aidangarske
committed
F-5184 - Shorten ECC private-scalar range-check comment
aidangarske
committed
F-5185 - Set DH composite-modulus test LSB for little-endian parse
aidangarske
committed
F-4292 - Assert HKDF ctx dup is unsupported
aidangarske
committed
F-5198 - Split DES3 TLS CBC decrypt test to exercise record-base path
aidangarske
committed
F-4384 - Cast AES key-wrap length guard operands to uint64
aidangarske
committed