Tobias Frauenschläger bec6c0fef2 SLH-DSA fixes ...

Follow up to PR #10450 with some minor fixes:

* FIPS 205 numbering: slh_sign is §10.2.1 Alg 22; slh_verify is Alg 24;
  hash_slh_verify is Alg 25 (impl comments and doxygen).
* Widen wc_SlhDsaKey_SignHashWithRandom's addRnd to const byte* to
  match wc_SlhDsaKey_SignWithRandom.
* Make the SLHDSA_PHMSG_MAX_LEN invariant explicit with a named
  SLHDSA_LARGEST_APPROVED_PHM_LEN constant and a wc_static_assert.
* SHAKE128/SHAKE256 round-trip and length-rejection coverage for both
  SignHash and VerifyHash.
* Doxygen: briefs for the five DER encode/decode APIs; accurate
  decoder failure-rollback wording; tighter return-code lists for
  Verify and VerifyMsg.
* ChangeLog: silent-failure caveat for raw messages whose length
  happens to equal the digest size of the chosen hashType.

2026-05-12 13:24:24 +02:00

..

benchmark

Merge pull request #10450 from Frauschi/slhdsa_pre_hash

2026-05-11 16:29:32 -05:00

src

SLH-DSA fixes

2026-05-12 13:24:24 +02:00

test

Merge pull request #10155 from aidangarske/fenrir-fixes-2

2026-05-11 21:07:53 -07:00