openssl/crypto/ml_dsa
Łukasz 'sil2100' Zemczak dac3ed3e03 ML-DSA: Validate signature length before decoding
Page 27 of https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.204.pdf mentions
the Input: Signature length depending on the parameters, so the signature
length should be checked before we proceed with decode.

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/28093)
2025-10-14 16:52:41 +02:00
..
build.info MLDSA: Fix no-ml-dsa configure option. 2025-02-14 10:46:04 +01:00
ml_dsa_encoders.c Separate public and private ML-KEM allocations 2025-07-07 15:40:47 +02:00
ml_dsa_hash.h Copyright year updates 2025-03-12 13:35:59 +00:00
ml_dsa_key.c crypto/ml_dsa: fix public_from_private() error path to return failure 2025-09-18 09:03:48 +10:00
ml_dsa_key.h Copyright year updates 2025-03-12 13:35:59 +00:00
ml_dsa_key_compress.c Copyright year updates 2025-03-12 13:35:59 +00:00
ml_dsa_local.h Add ml_dsa msg_update functions to provider code 2025-04-23 13:35:03 +02:00
ml_dsa_matrix.c Copyright year updates 2025-03-12 13:35:59 +00:00
ml_dsa_matrix.h Copyright year updates 2025-03-12 13:35:59 +00:00
ml_dsa_ntt.c Copyright year updates 2025-03-12 13:35:59 +00:00
ml_dsa_params.c Copyright year updates 2025-03-12 13:35:59 +00:00
ml_dsa_poly.h Copyright year updates 2025-03-12 13:35:59 +00:00
ml_dsa_sample.c Copyright year updates 2025-03-12 13:35:59 +00:00
ml_dsa_sign.c ML-DSA: Validate signature length before decoding 2025-10-14 16:52:41 +02:00
ml_dsa_sign.h Copyright year updates 2025-03-12 13:35:59 +00:00
ml_dsa_vector.h crypto: use array memory (re)allocation routines 2025-08-08 12:22:10 -04:00