PQC enforce modulus and eta range checks in DecodePrivateKey#10603

Merged

SparkiDev merged 3 commits into

wolfSSL:masterfrom

aidangarske:pqc-decode-validation

Jun 11, 2026

Commits on Jun 11, 2026

ML-KEM: FIPS 203 modulus check - reject non-reduced private key vector on decode
aidangarske
committed
ML-DSA: reject private key with out-of-range s1/s2 coefficients on decode
aidangarske
committed
test: wrap PUBLIC_KEY_E comparisons in WC_NO_ERR_TRACE for ML-KEM/ML-DSA decode tests
aidangarske
committed