Skip to content

Serialization mismatches break DSA_PrivateToPublic and KDF_SRTP/SRTCP structured inputs #12

@Kr0emer

Description

@Kr0emer

DSA_PrivateToPublic::Serialize only writes priv, but the generator emits p/g/priv and the wolfCrypt module expects p/g. Structured mutator also parses p/g/priv, so the fields get lost and the module receives empty/invalid p/g.
KDF_SRTP/KDF_SRTCP::Serialize do not write index, yet the generator fills it and the wolfCrypt implementations consume it. Structured mutator previously read the field, but it’s missing in the payload, causing misalignment and fallback to byte-level mutation.
Impact:

Structured mutations for these operations mostly fail or degrade to byte-level mutation.
Backends cannot use full parameters; coverage drops and OutOfData may occur.
Suggested fixes:

In DSA_PrivateToPublic::Serialize, serialize g, p, and priv in the same order as the generator/mutator.
In KDF_SRTP and KDF_SRTCP::Serialize, serialize index along with key/salt/kdr/key1-3Size.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions