mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-08-11 07:51:20 +02:00
Daniele Lacamera
7d4fa66173
- wc_falcon.c: replace the lazily-initialised, mutable NTT twiddle-table cache with precomputed read-only const tables (falcon_zetas/izetas_l1/l5). This removes the data race on the shared cache (a reader could see the init flag set before all table entries were visible) and also drops the now-unused falcon_brv / falcon_build_tables helpers. Verify stays fast (const reads, no per-call rebuild); KAT confirms the values. - falcon.c: correct the wc_falcon_sign_msg doc comment (signing needs the *private* key; required buffer size is the active level's signature size, not always FALCON_LEVEL1_SIG_SIZE) and validate rng != NULL in the software path so the error is reported at the API boundary. - wc_falcon_sign.c / wc_falcon_sign.h: route key->heap into falcon_complete_private and falcon_expand_privkey (their large fpr scratch allocations previously used a NULL heap hint, bypassing custom heap routing); and fail fast in falcon_do_sign_tree on the sampler's sticky PRNG error (passed in as samplerErr) instead of running to the restart bound. - wc_falcon_codec.h: use the project-standard WOLF_CRYPT_WC_FALCON_CODEC_H include guard instead of the collision-prone generic FALCON_CODEC_H. - doc/dox_comments (ssl.h + -ja): drop the stale "or HAVE_LIBOQS" from the ML-KEM hybrid group requirements; liboqs is no longer supported.
The wolfSSL manual is available at: http://www.wolfssl.com/documentation/wolfSSL-Manual.pdf The wolfSSL API guide is available at: https://www.wolfssl.com/doxygen/wolfssl_API.html The wolfCrypt API guide is available at: https://www.wolfssl.com/doxygen/wolfcrypt_API.html