Repository navigation

ISO 19790 Zeroization for v7 - #11434

Open

jackctj117 wants to merge 16 commits into

wolfSSL:masterfrom

jackctj117:ISO-19790-FIPS-PQ

Commits on Oct 6, 2026

Zeroize EdDSA scalars and KDF blocks; reject non-canonical Ed448 keys
jackctj117
committed
28c168f
Zeroize temporary SSPs in the FIPS v7 boundary
jackctj117
committed
56bb3d4
SP: zero-free scalar copies, ECDH points and modexp buffers
jackctj117
committed
7792a10
Zeroize remaining temporaries and failure paths
jackctj117
committed
74df2a2
SHA Free: release msg and W before the callback-path wipe
jackctj117
committed
e2c919a
Address review: keep destructors off caller-owned contexts, fix entropy include
jackctj117
committed
d0a61fa
Use ForceZero where XMEMSET wiped sensitive data
jackctj117
committed
d48cf77
NoiseSrc: ForceZero the health-test state on free
jackctj117
committed
b5e4691
SHA-3 Free: wipe state only; RSA even-mod test expects the wiped buffer
jackctj117
committed
c3d493c
RSA even-mod test: only expect the wiped buffer from FIPS v7 or non-FIPS builds
jackctj117
committed
3c41a65
SHA-3: keep the C Keccak round scratch in the context
jackctj117
committed
3bc17cb
ML-KEM: add basemul products into r without staging them
jackctj117
committed
a895adf
ForceZero: use volatile stores where no data barrier backs the wipe
jackctj117
committed
85f45d7
SHA-1, SHA-256: keep the C transform message schedule in the context
jackctj117
committed
d487596
aarch64 Keccak base lane: zero the spilled column parities before return
jackctj117
committed
7c1bfa8
x86_64 SHA-2 asm: zero the message schedule frame before return
jackctj117
committed
3ea11cf