Skip to content

ECC sign hash: only allow up to max digest size#9422

Merged
dgarske merged 1 commit intowolfSSL:masterfrom
SparkiDev:ecc_sign_hash_inlen_check
Nov 13, 2025
Merged

ECC sign hash: only allow up to max digest size#9422
dgarske merged 1 commit intowolfSSL:masterfrom
SparkiDev:ecc_sign_hash_inlen_check

Conversation

@SparkiDev
Copy link
Copy Markdown
Contributor

@SparkiDev SparkiDev commented Nov 13, 2025

Description

Validate that the hash passed in is of an appropriate length - not greater than the maximum digest size.

Fixes #9417

Testing

Standard testing.

Checklist

  • added tests
  • updated/added doxygen
  • updated appropriate READMEs
  • Updated manual and documentation

@SparkiDev SparkiDev self-assigned this Nov 13, 2025
@SparkiDev SparkiDev force-pushed the ecc_sign_hash_inlen_check branch from 99e0458 to f7cc473 Compare November 13, 2025 01:40
Validate that the hash passed in is of an appropriate length - not
greater than the maximum digest size.
@SparkiDev SparkiDev force-pushed the ecc_sign_hash_inlen_check branch from f7cc473 to 6c30186 Compare November 13, 2025 01:53
@SparkiDev SparkiDev assigned wolfSSL-Bot and unassigned SparkiDev Nov 13, 2025
Copy link
Copy Markdown

@DrKatieL DrKatieL left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changes look to address the issue. Fix passed tests mentioned in the issue and wolfcrypt/test/test.c tests.

@dgarske dgarske merged commit 0829436 into wolfSSL:master Nov 13, 2025
268 of 269 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: wc_ecc_sign_hash silently truncates oversized inputs

4 participants