Tobias Frauenschläger 09b288000c Size cert signature buffers from the key and check sig type vs key ...

MAX_ENCODED_SIG_SZ grows to ~50KB once SLH-DSA is enabled, yet it was
used to size PKCS#1/signature scratch and output buffers across the
library, wasting stack and heap even for classic RSA/ECC operations.

- Add MAX_ENCODED_CLASSIC_SIG_SZ for RSA/DSA/ECC DigestInfo buffers that
  can never hold a PQC signature.
- Size the certificate/CSR signing output buffer from the signing key at
  runtime instead of the worst-case macro.
- Add overridable WOLFSSL_MAX_SIG_SZ for the WOLFSSL_NO_MALLOC buffer.
- Reject a signature type that does not match the signing key.

2026-06-10 10:51:41 +02:00

..

benchmark

Merge pull request #10571 from Frauschi/mlkem_rename

2026-06-05 11:00:44 -05:00

src

Size cert signature buffers from the key and check sig type vs key

2026-06-10 10:51:41 +02:00

test

Merge pull request #10550 from rizlik/sha512_only

2026-06-08 15:20:08 -05:00