Security and correctness fixes, plus a DTLS 1.3 scheduled work API - #11018

Merged

dgarske merged 12 commits into

wolfSSL:masterfrom

Frauschi:fenrir_3

Aug 3, 2026

Commits on Aug 1, 2026

Clamp CBC pad length before deriving the MAC input length
Frauschi
committed
2298598
Take the write lock when setting the pending DTLS peer
Frauschi
committed
6e4a242
Use the stored entry length when printing a directoryName
Frauschi
committed
2788d9d
Honour chklen when matching an IP in X509_check_host
Frauschi
committed
96fb284
Zeroize the saved HMAC pads on cleanup
Frauschi
committed
cb73424
Zeroize key material when clearing a WOLFSSL for reuse
Frauschi
committed
e2cce03
Keep the ECIES context heap hint across a reset
Frauschi
committed
f4fbf8d
Restore the caller's key RNG after an HPKE operation
Frauschi
committed
428bfe9
Use the instance address as the RNG bank DRBG nonce
Frauschi
committed
622d0bc
Only zeroize the SRP temporaries once they are initialized
Frauschi
committed
8e61a11
Let a DTLS 1.3 reader send the work it schedules
Frauschi
committed
18414d7
Cover the DTLS 1.3 scheduled work API in the tests
Frauschi
committed
9b4f00d