[ohki-saito]

Description

Fix F-11150. wc_PBKDF1_ex() now rejects a NULL salt with a non-zero saltLen, matching wc_PBKDF2_ex().

Testing

Added NULL salt cases to test_wc_PBKDF1DecisionCoverage.

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[github-actions]

retest this please

[Copilot]

🟢 Approval recommended

No active review issues remain for the PBKDF1 salt-validation update.

No open issues 🎉

What changed in this PR

This PR addresses F-11150 by aligning wc_PBKDF1_ex() salt argument validation with wc_PBKDF2_ex().

Changes:

• Return BAD_FUNC_ARG when salt is NULL and saltLen is positive.
• Add tests for rejecting a NULL salt with a positive length and accepting it with zero length.

File	Description
wolfcrypt/​src/​pwdbased.c	Adds the NULL salt and positive-length argument check.
tests/​api/​test_pwdbased.c	Tests rejected and permitted NULL salt inputs.

_{Review effort: Balanced}

[github-actions]

MemBrowse Memory Report · Explore what changed →

zephyr-frdm_rw612

• FLASH: log_const_area -8 B, rodata -8 B, text +1,680 B (+0.6%, 284,128 B / 67,108,864 B, total: 0% used)

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• stm32-sim-stm32h753

---

_{Catch memory regressions in CI with MemBrowse. Free for open source.}