Skip to content

Add WOLFCOSE_LEAN_VERIFY and ML-DSA lean build profiles#43

Open
aidangarske wants to merge 4 commits into
wolfSSL:mainfrom
aidangarske:lean-verify-build
Open

Add WOLFCOSE_LEAN_VERIFY and ML-DSA lean build profiles#43
aidangarske wants to merge 4 commits into
wolfSSL:mainfrom
aidangarske:lean-verify-build

Conversation

@aidangarske
Copy link
Copy Markdown
Member

@aidangarske aidangarske commented Jun 2, 2026 •
edited
Loading

Description

  • WOLFCOSE_LEAN_VERIFY one macro for the smallest secure verify-only Sign1 build.
  • ECDSA uses the raw r‖s API. No DER round-trip. Drops wolfCrypt ASN.1 from ECDSA builds.
  • IV / Partial-IV parsing compiled out of non-encryption builds.
  • EccSignRaw / EccVerifyRaw / ConstantCompare gated to the configs that use them.
  • examples/sign1_verify_lean.c plus make lean-verify.
  • Lean Build CI: minimal ECC-only wolfSSL, runs the example, asserts no signing/RNG linked, -Werror on all lean configs.
  • Add License file which was missing
  • Update readme with correct accurate numbers of lib size totals
  • Update docs

Post-quantum ML-DSA (FIPS 204)

  • WOLFCOSE_LEAN_MLDSA (lean Sign1 sign+verify) and WOLFCOSE_LEAN_VERIFY_MLDSA (verify-only) profiles.
  • examples/sign1_mldsa.c and examples/sign1_verify_mldsa.c, plus make mldsa-demo / mldsa-verify.
  • Lean Build CI also builds wolfSSL with ML-DSA and runs both examples (asserts no signing in the verify-only build).
  • docs/Macros.md documents the new profiles.

Copilot AI review requested due to automatic review settings June 2, 2026 23:44

This comment was marked as resolved.

Sign in to view

@aidangarske aidangarske marked this pull request as draft June 2, 2026 23:54
@aidangarske aidangarske force-pushed the lean-verify-build branch 3 times, most recently from d5e2837 to 8c6209e Compare June 3, 2026 00:21
@aidangarske aidangarske self-assigned this Jun 3, 2026
@aidangarske aidangarske added enhancement New feature or request feature Feature addition labels Jun 3, 2026
wolfSSL-Fenrir-bot
wolfSSL-Fenrir-bot reviewed Jun 3, 2026
View reviewed changes
Copy link
Copy Markdown

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #43

Scan targets checked: wolfcose-bugs, wolfcose-src

No new issues found in the changed files. ✅

@aidangarske aidangarske marked this pull request as ready for review June 3, 2026 19:18
@aidangarske
Merge main; guard verify/MAC/encrypt helpers unused in lean and sign-…
2e615dd 
…only builds, keep cose-encoding-notes removed
@aidangarske aidangarske changed the title Add WOLFCOSE_LEAN_VERIFY and shrink the ECDSA/header verify paths Add WOLFCOSE_LEAN_VERIFY and ML-DSA lean build profiles Jun 3, 2026
@aidangarske
Add WOLFCOSE_LEAN_MLDSA (sign+verify) and WOLFCOSE_LEAN_VERIFY_MLDSA …
96d8532 
…(verify-only) profiles, ML-DSA examples, docs, and CI
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left review comments

Assignees

@aidangarske aidangarske

Labels

enhancement New feature or request feature Feature addition

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@aidangarske @wolfSSL-Fenrir-bot