From 5b888f809f0bd8b635bdd94cbf15ca6f9344009f Mon Sep 17 00:00:00 2001
From: Kareem <kareem@wolfssl.com>
Date: Fri, 25 Jul 2025 15:50:38 -0700
Subject: [PATCH 1/2] Fix size used by signature context struct.  This matches
 the size used by sigCpy/sigSz when building without WOLFSSL_NO_MALLOC.

---
 wolfssl/wolfcrypt/asn.h | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/wolfssl/wolfcrypt/asn.h b/wolfssl/wolfcrypt/asn.h
index 136735876..2657bbc06 100644
--- a/wolfssl/wolfcrypt/asn.h
+++ b/wolfssl/wolfcrypt/asn.h
@@ -1383,7 +1383,7 @@ struct SignatureCtx {
 #endif
 #if !defined(NO_RSA) || !defined(NO_DSA)
     #ifdef WOLFSSL_NO_MALLOC
-    byte  sigCpy[MAX_SIG_SZ];
+    byte  sigCpy[MAX_ENCODED_SIG_SZ];
     #else
     byte* sigCpy;
     #endif

From f130a9d44d5bdc5aef828d81fc987b66f5459d6c Mon Sep 17 00:00:00 2001
From: Kareem <kareem@wolfssl.com>
Date: Tue, 29 Jul 2025 13:58:35 -0700
Subject: [PATCH 2/2] Alias MAX_SIG_SZ to MAX_ENCODED_SIG_SZ for backwards
 compatibility.

---
 wolfssl/wolfcrypt/types.h | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/wolfssl/wolfcrypt/types.h b/wolfssl/wolfcrypt/types.h
index 01ca1b7fe..5898d135f 100644
--- a/wolfssl/wolfcrypt/types.h
+++ b/wolfssl/wolfcrypt/types.h
@@ -2046,7 +2046,6 @@ enum Max_ASN {
 #else
     MAX_ENCODED_SIG_SZ  =  64,
 #endif
-    MAX_SIG_SZ          = 256,
     MAX_ALGO_SZ         =  20,
     MAX_LENGTH_SZ       = WOLFSSL_ASN_MAX_LENGTH_SZ, /* Max length size for DER encoding */
     MAX_SHORT_SZ        = (1 + 1 + 5), /* asn int + byte len + 5 byte length */
@@ -2103,6 +2102,8 @@ enum Max_ASN {
 #define WC_MAX_BLOCK_SIZE  128
 #endif
 
+#define MAX_SIG_SZ MAX_ENCODED_SIG_SZ
+
 #ifdef WOLFSSL_CERT_GEN
     /* Used in asn.c MakeSignature for ECC and RSA non-blocking/async */
     enum CertSignState {