[cconlon]

This PR handles the FIPS 140-3 approved-service indicator (WC_FIPS_NOT_APPROVED, 1) that wolfCrypt FIPS v5.2.4 and v7+ return for AES-GCM/GMAC with IVs under 96 bits. Previously this was thrown at doFinal() as an unchecked WolfCryptException with an unmapped error code.

• Add AesGcm.shortIvAllowed() and AesGcm.GCM_NONCE_MID_SZ.
• wolfJCE AES-GCM Cipher and AES-GMAC Mac throw InvalidAlgorithmParameterException at init() for IVs under 96 bits on those modules.
• Add WolfCryptError.WC_FIPS_NOT_APPROVED
• Tests: testAesGcmShortIv, testAesGmacShortIv, testFipsNotApprovedError.

Fixes OpenJDK GCMParameterSpecTest and TestKATForGCM short-IV failures on wolfCrypt FIPS Ready (v7).

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #293

Scan targets checked: wolfcrypt-jni-src, wolfcrypt-jni-bugs
Coverage: 4 of 9 in-scope changed file(s) opened by the reviewer; not opened: jni/include/com_wolfssl_wolfcrypt_AesGcm.h, src/main/java/com/wolfssl/wolfcrypt/AesGcm.java, src/test/java/com/wolfssl/provider/jce/test/WolfCryptCipherTest.java, src/test/java/com/wolfssl/provider/jce/test/WolfCryptMacTest.java, src/test/java/com/wolfssl/wolfcrypt/test/WolfCryptTest.java

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

Review tier: Lite

[Copilot]

🟡 Changes recommended

The allowed AES-GMAC test path does not execute the MAC operation where the original failure occurred.

3 open findings

• Execute doFinal to verify allowed 8-byte IV works · New
• Split overlong native declaration to meet 80-character limit · New
• Document FIPS v5.2.4 in short-IV capability scope · New

What changed in this PR

Adds FIPS-aware short-IV validation for AES-GCM and AES-GMAC.

Changes:

• Detects FIPS modules where short IVs are not approved.
• Rejects affected IVs during JCE initialization.
• Maps WC_FIPS_NOT_APPROVED and adds regression tests.

File	Description
jni/​jni_aesgcm.c	Implements native FIPS-version detection.
jni/​include/​com_wolfssl_wolfcrypt_AesGcm.h	Declares the new JNI capability method.
src/​main/​java/​com/​wolfssl/​wolfcrypt/​AesGcm.java	Exposes nonce size and short-IV capability.
src/​main/​java/​com/​wolfssl/​wolfcrypt/​WolfCryptError.java	Maps the FIPS indicator error.
src/​main/​java/​com/​wolfssl/​provider/​jce/​WolfCryptCipher.java	Rejects unapproved AES-GCM IVs at initialization.
src/​main/​java/​com/​wolfssl/​provider/​jce/​WolfCryptMac.java	Rejects unapproved AES-GMAC IVs at initialization.
src/​test/​java/​com/​wolfssl/​wolfcrypt/​test/​WolfCryptTest.java	Tests error mapping.
src/​test/​java/​com/​wolfssl/​provider/​jce/​test/​WolfCryptCipherTest.java	Tests AES-GCM short-IV behavior.
src/​test/​java/​com/​wolfssl/​provider/​jce/​test/​WolfCryptMacTest.java	Tests AES-GMAC short-IV behavior.

Files not reviewed (1)

• jni/include/com_wolfssl_wolfcrypt_AesGcm.h: Generated file

🧠 Review effort: Balanced

---

Give feedback about Copilot approvals in this survey to enter a drawing for a $150 gift card.