Tobias Frauenschläger 266e07e58d SLH-DSA: zeroize secret WOTS+/FORS material and fix alloc-failure paths ...

Zeroization:
- Add missing ForceZero on the PRF outputs and WOTS+ chain state that hold
  secret key material.
- Route the WOTS sign leaf through a temp so secret chain values never touch
  the public signature buffer.
- Add SLHDSA_SHAKE_X4_STATE_W so buffer and wipe sizes stay in sync.

Leak / alloc-failure fixes:
- Fix chain_idx_x4 returning on SAVE_VECTOR_REGISTERS2 failure without freeing
  state/fixed (memory leak, and the secret was left unzeroized); break to the
  cleanup path instead.
- Guard all function-scope wipes with WC_VAR_OK to avoid a NULL deref when an
  allocation fails under WOLFSSL_SMALL_STACK.

2026-06-16 15:48:39 +02:00

..

benchmark

Merge pull request #10571 from Frauschi/mlkem_rename

2026-06-05 11:00:44 -05:00

src

SLH-DSA: zeroize secret WOTS+/FORS material and fix alloc-failure paths

2026-06-16 15:48:39 +02:00

test

Merge pull request #10668 from holtrop-wolfssl/f-5394

2026-06-12 16:35:31 -07:00