[rlm2002]

Description

wc_PKCS7_SignedDataVerifySignature()'s ML-DSA case verifies the complete message (RFC 9882 pure mode), not a digest. When a bundle has no signed attributes,hashBuf was never checked against anything wc_PKCS7_VerifySignedData_ex(), and would silently ignore. Reject hashBuf outright in that case instead.

Fixes F-16254

Testing

./configure --enable-pkcs7 --enable-mldsa && ./wolfcrypt/test/testwolfcrypt

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

🟡 Changes recommended

The regression test passes even without the fix in a supported hash configuration because it supplies the wrong digest length, triggering BAD_FUNC_ARG before reaching the new guard.

1 open issue

• Use the selected hash's digest size in the regression test · New

What changed in this PR

Addresses F-16254 in wolfCrypt’s PKCS#7 verification by rejecting caller-supplied hashes for pure-mode ML-DSA signatures without signed attributes, rather than silently ignoring them.

Changes:

• Return BAD_FUNC_ARG for unsupported hash input in the ML-DSA verification path.
• Add a negative regression test for SignedData without signed attributes.

File	Description
wolfcrypt/​test/​test.c	Adds a regression test expecting caller-supplied hash rejection.
wolfcrypt/​src/​pkcs7.c	Rejects hash input for ML-DSA verification without signed attributes.

_{Review effort: Balanced}

[github-actions]

MemBrowse Memory Report · Explore what changed →

zephyr-frdm_rw612

• FLASH: log_const_area -8 B, rodata -8 B, text +1,592 B (+0.6%, 284,040 B / 67,108,864 B, total: 0% used)

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• stm32-sim-stm32h753

---

_{Catch memory regressions in CI with MemBrowse. Free for open source.}