PKCS11 conformance and robustness fixes#194

Merged

LinuxJedi merged 19 commits into

wolfSSL:masterfrom

julek-wolfssl:fenrir/20260617

Jun 19, 2026

Commits on Jun 17, 2026

Fix C_VerifyRecoverInit invalid-handle return code (F-3833)
julek-wolfssl
committed
Propagate CKR_PIN_LEN_RANGE from C_Login (F-3834)
julek-wolfssl
committed
Return CKR_KEY_TYPE_INCONSISTENT for wrong-class key in C_VerifyRecoverInit (F-4067)
julek-wolfssl
committed
Distinguish CKR_USER_ANOTHER_ALREADY_LOGGED_IN in C_Login (F-4527)
julek-wolfssl
committed
Return CKR_KEY_FUNCTION_NOT_PERMITTED for usage-denied keys (F-6052)
julek-wolfssl
committed
Enforce output buffer size in C_DecryptFinal CBC-PAD branch (F-6050)
julek-wolfssl
committed
Require CKA_CLASS in C_CreateObject templates (F-5513, F-5516)
julek-wolfssl
committed
Reject mismatched AAD pointer/length for AES-GCM and AES-CCM (F-5514)
julek-wolfssl
committed
Validate required public-key attributes in C_GenerateKeyPair (F-5518)
julek-wolfssl
committed
Reject changes to read-only attributes in C_SetAttributeValue (F-5517)
julek-wolfssl
committed
Validate base key type against derivation mechanism in C_DeriveKey (F-4065)
julek-wolfssl
committed
Enforce caller buffer size for NSS trust ULONG/BOOL attributes (F-4060)
julek-wolfssl
committed

Commits on Jun 18, 2026