Intel® Cryptography Primitives Library 2.2.0

Fixed issues:

• Fixed ML-DSA signature verification to strictly enforce hint vector weight bounds.
• Added strict output buffer size validation when input parameter is zero for GCD BN function.
• Strengthened quotient validation checks for BN division operation.
• Fixed stack out-of-bounds read in AES/SM4 CCM streaming modes when processing non-block-aligned data chunks.
• Eliminated potential out-of-bounds writes of the output tag in the ippsHashGetTag_rmf API.
• Fixed SM2 signature forgery vulnerability by adding missing input validation in ippsGFpECVerifySM2.

Known Issues and Limitations

• ippsXMSSSign() and ippsXMSSKeyGen() API were not validated with Constant-time execution tests due to a limitation of the testing methodology, so the resistance to side-channel attacks cannot be guaranteed for this API. This limitation will be eliminated in one of the next product releases by changing the testing methodology.
• ippsXMSSKeyGen(), ippsMLKEM_KeyGen() and ippsMLKEM_Encaps() API by default works with RDRAND-based Pseudo Random Number Generator (PRNG). If this instruction is not available on a target CPU, a third-party PRNG should be provided to this API, see more details in the functions documentation.