Add SLH-DSA Support

[aidangarske]

• Add FIPS 205 SLH-DSA support for all 12 parameter sets.
• Implement key management, signatures, encoders, and decoders.
• Support pure and external message encodings.
• Support deterministic and seeded test operations.
• Serialize operations that share mutable wolfSSL key state.
• Support signing builds and verify-only wolfSSL builds.
• Add OpenSSL KAT, interoperability, version-matrix, and unit coverage.
• Pass all 20 SLH-DSA unit tests and 497 OpenSSL KAT vectors.
• fixes the docker confusion and merges to main docker
• Adds more osp intgration tests for mldsa, mlkem, slh-dsa
• Adds simple example for PQC
• Stack this change on the PKCS8 encryption fix in PR Encrypt PKCS#8 keys when a cipher is set on the PrivateKeyInfo encoder #453 which needs merged first
• depends on Add libacvp PQC test coverage osp#351
• Docs Document the wolfProvider post-quantum build options and defines documentation#274
• revert osp patch to point to osp master

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[Frauschi]

🐺 Skoll Code Review

Overall recommendation: REQUEST_CHANGES
Findings: 26 total — 15 posted, 11 skipped

Posted findings

• [High] Examples are check_PROGRAMS so every build configuration runs them via make check, and CI's example steps silently depend on that — examples/include.am:22-32
• [High] pqc_openssl_example hard-codes SLH-DSA-SHA2-128f, which is absent whenever WOLFPROV_HAVE_SLHDSA is set but SHA2 sets are not built — examples/pqc_openssl_example.c:210-218
• [Medium] wp_encrypt_key_pkcs8: reports the output buffer size as the encrypted length, and ignores the RNG lock result its sibling now checks — src/wp_internal.c:1110-1133
• [Medium] Deterministic seed handling: seedLen survives gen_set_params failure paths, and validator and consumer compute the expected length differently — src/wp_slhdsa_kmgmt.c:1159-1174
• [Medium] wp_slhdsa_import flag handling: asserts hasPub instead of verifying it, and wipes hasPub/hasPriv on failure — src/wp_slhdsa_kmgmt.c:690-702
• [Medium] Signature context state (context string, deterministic, entropy, encoding) persists across re-init — src/wp_slhdsa_sig.c:284-291
• [Medium] Uninitialized locals may break the build under the project's own -Werror hardening — src/wp_slhdsa_sig.c:338
• [Medium] SLH-DSA key mutex covers only sign/verify and the refcount: keymgmt readers, import writers, and lock scope are all unguarded — src/wp_slhdsa_kmgmt.c:432
• [Medium] wp_dh_sync_priv_to_key mutates the shared inner DhKey unlocked, and wp_dh_encode_epki depends on the size function having run first — src/wp_dh_kmgmt.c:2789-2837
• [Low] OSSL_SIGNATURE_PARAM_DETERMINISTIC is sent as unsigned int but advertised and read as int — test/test_slhdsa.c:1139
• [Low] wp_slhdsa_free refcount handling: unsynchronized read, permanent leak when wc_LockMutex fails, and up_ref/free test the mutex result differently — src/wp_slhdsa_kmgmt.c:363-391
• [Low] SLH-DSA export and get_params report the wrong outcome when a key component is absent — src/wp_slhdsa_kmgmt.c:805-875
• [Low] wp_slhdsa_gen_init_base calls wc_FreeRng on an RNG that wc_InitRng may never have initialized — src/wp_slhdsa_kmgmt.c:1067-1091
• [Low] Encoder dispatch binds OSSL_FUNC_ENCODER_IMPORT_OBJECT to a function with a mismatched signature — src/wp_slhdsa_kmgmt.c:1978
• [Info] Preprocessor hygiene in the new SLH-DSA files: dead version guards, a redundant #ifndef, a dropped WP_HAVE_PKCS8_ENC guard, and a stale #endif — src/wp_slhdsa_kmgmt.c:1985-1996

Skipped findings

• [Medium] Encrypted-PKCS#8 PEM decode without WOLFSSL_ENCRYPTED_KEYS is unverified in the FIPS config it targets
• [Medium] SLH-DSA test gating: verify-only builds, the decoder parameter-set mismatch, and the per-parameter-set macros are all untested
• [Medium] New encrypted-PKCS#8 tests are guarded out of the exact configurations they were written for
• [Medium] libacvp-pqc workflow pinned to a personal OSP fork branch
• [Low] test_pki_cipher_encrypts stub comment contradicts the new fail-closed behaviour
• [Low] test_slhdsa.c helper robustness: slhdsa_get_raw reads *out on its failure path, and pubonly_sign_fails passes silently on allocation failure
• [Low] wp_cipher_from_params keeps a previously set cipher when the param has the wrong data type
• [Low] wp_dh_fix_pki_len: doc block misattached and no bounds check
• [Low] SLH-DSA key state is read from wolfSSL struct internals, with no has_private accessor of the kind ML-DSA exposes
• [Info] PEM buffer is cleansed with the written length rather than the allocated length
• [Info] openssl_example prints "self-test passed" although the provider registers no self-test callback

Review generated by Skoll via Claude/Codex