Fix: WolfCrypt Fenrir - 6145, 5384, 4432, 5392

[aidankeefe2022]

Description

https://fenrir.wolfssl.com/finding/6145 -

wc_DsaVerify/wc_DsaVerify_ex leave *answer uninitialized on all error paths, unlike sibling ECC/ECCSI verify APIs that default to "not verified"

• Initialized value for answer parameter to zero so on early exit the out parameter is defined to false.

https://fenrir.wolfssl.com/finding/5384 -

CAAM secure-memory addresses are truncated to 32 bits in ECC keys

• Changed the ecc_key fields to be CAAM_ADDRESS if it is defined this will allow for expansion with platform so addresses are not truncated.

https://fenrir.wolfssl.com/finding/4432 -

wc_DrbgState_MutexInit Unsafe Lazy Mutex Initialization Without WOLFSSL_MUTEX_INITIALIZER

• Instead of check on plain int we use atomic operations if they are present to init the mutex. This means no two threads can init the same mutex.

https://fenrir.wolfssl.com/finding/5392 -

DES key schedule branches on secret key bits

• instead of if statement we use a mask to set bits in ks.