wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 16:42:01 +02:00
Code Issues Packages Projects Releases Wiki Activity

account for FIPS ready build and SE050 test

Browse Source
This commit is contained in:
JacobBarthelmeh
2026-05-01 16:00:19 -06:00
parent b3e9e51967
commit da440d19a8
2 changed files with 18 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wolfcrypt/src/port/nxp/se050_port.c
+13
View File
@@ -2113,6 +2113,10 @@ int se050_ecc_sign_hash_ex(const byte* in, word32 inLen, MATH_INT_T* r, MATH_INT
size_t sigSz = sizeof(sigBuf);
word32 rLen = 0;
word32 sLen = 0;
#ifndef WC_ALLOW_ECC_ZERO_HASH
byte hashIsZero = 0;
word32 zIdx;
#endif
#ifdef SE050_DEBUG
printf("se050_ecc_sign_hash_ex: key %p, in %p (%d), out %p (%d), "
@@ -2124,6 +2128,15 @@ int se050_ecc_sign_hash_ex(const byte* in, word32 inLen, MATH_INT_T* r, MATH_INT
return BAD_FUNC_ARG;
}
#ifndef WC_ALLOW_ECC_ZERO_HASH
/* SE050 hardware does not reject all-zero digests; mirror the
* software path's check so behavior is consistent. */
for (zIdx = 0; zIdx < inLen; zIdx++)
hashIsZero |= in[zIdx];
if (hashIsZero == 0)
return ECC_BAD_ARG_E;
#endif
if (cfg_se050_i2c_pi == NULL) {
return WC_HW_E;
}
wolfssl/wolfcrypt/settings.h
+5 -3
View File
@@ -3514,10 +3514,12 @@ extern void uITRON4_free(void *p) ;
#endif
#ifdef HAVE_ECC
/* defined for all ECC non FIPS builds and for FIPS v7+, unless the user
* explicitly opts in to allowing an all-zero digest with
/* defined for all ECC non FIPS builds and for FIPS v7+ (including
* fips-ready/fips-dev which track the latest in-development source),
* unless the user explicitly opts in to allowing an all-zero digest with
* WC_ALLOW_ECC_ZERO_HASH or is building with HAVE_SELFTEST */
#if (!defined(HAVE_FIPS) || FIPS_VERSION_GT(7,0)) && \
#if (!defined(HAVE_FIPS) || FIPS_VERSION_GT(7,0) || \
defined(WOLFSSL_FIPS_READY) || defined(WOLFSSL_FIPS_DEV)) && \
!defined(HAVE_SELFTEST) && !defined(WC_ALLOW_ECC_ZERO_HASH)
/* sign/verify of an all-zero digest in wolfCrypt rejected */
#define WC_TEST_NO_ECC_SIGN_VERIFY_ZERO_DIGEST