Testing: AES GCM opps with IV < 96-bits now returns WC_FIPS_NOT_APPROVED with FIPS

[lealem47]

Description

Accounts for the new functionality in https://github.com/wolfSSL/fips/pull/405 and needs the fixes in https://github.com/wolfSSL/fips/pull/407

Testing

./fips-check.sh ready keep

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

Pull request overview

Updates the AES-GCM API test expectations to match new FIPS-module behavior where using an IV/nonce shorter than 96 bits is no longer an approved operation and returns WC_FIPS_NOT_APPROVED.

Changes:

• Adjusted wc_AesGcmSetIV() test expectation for GCM_NONCE_MIN_SZ to return WC_FIPS_NOT_APPROVED under specific FIPS version conditions.
• Preserved existing non-FIPS expectation (0) for the same call.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

MemBrowse Memory Report

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• linuxkm-pie
• linuxkm-standard
• stm32-sim-stm32h753

[kaleb-himes]

Merging after quick retest now that FIPS change is merged.

[lealem47]

FIPS-Ready PRB failures will require https://github.com/wolfSSL/fips/pull/408

[SparkiDev]

Jenkins: retest this please

Update FIPS testing

[SparkiDev]

./vectors-v2/KAS/req/KASValidityTest_FFCEphem_NOKC_ZZOnly_init.req
Detected KAS FFC test, but DH not compiled in
RESULT of test harness was: 0
fips harness failed

[lealem47]

./vectors-v2/KAS/req/KASValidityTest_FFCEphem_NOKC_ZZOnly_init.req Detected KAS FFC test, but DH not compiled in RESULT of test harness was: 0 fips harness failed

@SparkiDev Looks like this was caused by disabling DH in the FIPS Ready build in b4a9326. It appears a fix will need another fips repo PR. Will link here if necessary

[lealem47]

Prerequisite for failing DH test: https://github.com/wolfSSL/fips/pull/409