Anthony Hu c563f3932a Fix PKCS7 CBC padding oracle in EnvelopedData and EncryptedData (ZD 21422) ...

Replace single last-byte padding check with full PKCS#5/PKCS#7
validation: verify padLen is non-zero and within block size.
Both wc_PKCS7_DecodeEnvelopedData and wc_PKCS7_DecodeEncryptedData
paths are fixed.

2026-04-07 10:05:21 -06:00

..

benchmark

wolfssl/wolfcrypt/types.h: restore WC_ALLOC_DO_ON_FAILURE fallback definition from 760178c7dc -- reversion in part of 5f4d499df0. fixes optest build failures in all-crypto-only-intelasm-fips-v5-linuxkm-next-insmod-optest, all-crypto-only-intelasm-fips-v6-linuxkm-next-insmod-optest, and all-crypto-only-intelasm-fips-dev-linuxkm-next-insmod-optest.

2026-03-26 16:28:18 -05:00

src

Fix PKCS7 CBC padding oracle in EnvelopedData and EncryptedData (ZD 21422)

2026-04-07 10:05:21 -06:00

test

Merge pull request #10132 from douzzer/20260404-default_rng_bank

2026-04-06 22:54:20 -05:00