wolfCOSE test additions and hardening#40

Merged

dgarske merged 39 commits into

wolfSSL:mainfrom

aidangarske:cose-hardening

Jun 3, 2026

Commits on Jun 1, 2026

F-5213/F-5251 - Reject trailing data after top-level COSE objects
aidangarske
committed
F-5214/F-5282 - Reject oversized header and key integers before int32 narrowing
aidangarske
committed
F-5216/F-5283 - Harden CBOR encoder bounds and reject oversized container counts
aidangarske
committed
F-5304/F-5361 - Clear stale state and reject trailing data before COSE_Key import
aidangarske
committed
F-5215/F-5220/F-5366 - Require fixed-length EC2 coordinates per RFC 9053
aidangarske
committed
F-5218/F-5288/F-5365 - Validate recipient and signer unprotected headers
aidangarske
committed
F-5221 - Reject multi-recipient ECDH-ES direct messages on decrypt
aidangarske
committed
F-5285 - Use zero-length protected header for direct COSE_Encrypt recipients
aidangarske
committed
F-5367/F-5377 - Classify recipient key-management alg and enforce algId policy
aidangarske
committed
F-5284 - Decode kid in the protected header bucket
aidangarske
committed
F-5301 - Require ML-DSA key level to match the algorithm level
aidangarske
committed

Commits on Jun 2, 2026

Commits on Jun 3, 2026