Issues

• Template validation: a 13-byte AES CKA_VALUE is accepted, an undefined CKA_CLASS gives CKR_TEMPLATE_INCOMPLETE, malformed CKA_EC_PARAMS gives CKR_FUNCTION_FAILED

  wolfSSL/wolfPKCS11#278 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• Operation state: C_Sign/C_Verify/C_Decrypt/C_VerifyRecover without their Init return CKR_MECHANISM_INVALID (and C_Sign/C_Verify abort the active operation); single-part calls after an Update are not refused

  wolfSSL/wolfPKCS11#277 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• C_GetAttributeValue with a buffer too small leaves ulValueLen unchanged instead of setting CK_UNAVAILABLE_INFORMATION

  wolfSSL/wolfPKCS11#276 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• CKM_AES_CBC_PAD C_Decrypt into a short buffer reports too small a length, and after some short buffers the retry returns CKR_OK with wrong plaintext

  wolfSSL/wolfPKCS11#275 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• Session objects are visible only to the session that created them, not to the application's other sessions

  wolfSSL/wolfPKCS11#274 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• Hash-and-sign mechanisms (CKM_SHA*_RSA_PKCS, CKM_SHA*_RSA_PKCS_PSS, CKM_ECDSA_SHA*) and CKM_AES_ECB are single-part only: C_SignUpdate/C_VerifyUpdate/C_EncryptUpdate return CKR_MECHANISM_INVALID

  wolfSSL/wolfPKCS11#273 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• Wrap/unwrap: CKA_WRAP_TEMPLATE/CKA_UNWRAP_TEMPLATE/CKA_DERIVE_TEMPLATE rejected as CKR_ATTRIBUTE_VALUE_INVALID; EC private key unwrap and partial-semiblock blobs answered with the wrong codes

  wolfSSL/wolfPKCS11#272 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• C_DeriveKey silently overrides the template's CKA_SENSITIVE and CKA_EXTRACTABLE with the base key's values

  wolfSSL/wolfPKCS11#271 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• RSA-OAEP cannot encrypt or decrypt an empty message (C_Encrypt: CKR_FUNCTION_FAILED, C_Decrypt: CKR_ENCRYPTED_DATA_INVALID)

  wolfSSL/wolfPKCS11#270 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• CKM_RSA_PKCS_KEY_PAIR_GEN advertises a 1024-bit minimum, but generating anything below 2048 bits fails with CKR_FUNCTION_FAILED

  wolfSSL/wolfPKCS11#269 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• Out-of-range lengths, exponents, peer points and the object limit are answered with CKR_FUNCTION_FAILED

  wolfSSL/wolfPKCS11#268 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• C_Verify returns CKR_FUNCTION_FAILED for invalid signatures (RSA PKCS#1 v1.5, RSA >= n, ECDSA P-521, ML-DSA hints) and for RSA signatures of the wrong length

  wolfSSL/wolfPKCS11#267 · Filter by author AlexLaroche opened on Oct 30, 2026
  

• Support secret-key concatenation for hybrid ECDH/ML-KEM derivation

  wolfSSL/wolfPKCS11#264 · Filter by author amnagmv opened on Oct 27, 2026