commit caaffc1e7ec1a120821dea1f00a441e7b271c63d
author Minos Galanakis <minos.galanakis@arm.com> Mon Jun 02 14:28:31 2025 +0100
committer Minos Galanakis <minos.galanakis@arm.com> Wed Jun 04 15:54:46 2025 +0100
tree 8c2b9368cfb2e46e71bff4d5ee944fbda8d06498
parent 548e2dbf6511cc004c647657e43e848b83a19d2b

Built-in lms/lmots driver: Harden public key import against enum truncation

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>

library/lmots.c

diff --git a/library/lmots.c b/library/lmots.c
index c51cb41..404aa80 100644
--- a/library/lmots.c
+++ b/library/lmots.c
@@ -401,8 +401,11 @@
         return MBEDTLS_ERR_LMS_BAD_INPUT_DATA;
     }
 
-    ctx->params.type = (mbedtls_lmots_algorithm_type_t)
-                       MBEDTLS_GET_UINT32_BE(key, MBEDTLS_LMOTS_SIG_TYPE_OFFSET);
+    uint32_t type = MBEDTLS_GET_UINT32_BE(key, MBEDTLS_LMOTS_SIG_TYPE_OFFSET);
+    if (type != (uint32_t) MBEDTLS_LMOTS_SHA256_N32_W8) {
+        return MBEDTLS_ERR_LMS_BAD_INPUT_DATA;
+    }
+    ctx->params.type = (mbedtls_lmots_algorithm_type_t) type;
 
     if (key_len != MBEDTLS_LMOTS_PUBLIC_KEY_LEN(ctx->params.type)) {
         return MBEDTLS_ERR_LMS_BAD_INPUT_DATA;