faster key length validation when setting configs

sebastian-carpenter · sebastian-carpenter · commit 1f5fca53fa2e · 2026-03-27T14:19:58.000-06:00
diff --git a/src/ssl_ech.c b/src/ssl_ech.c
@@ -548,7 +548,8 @@ int SetEchConfigsEx(WOLFSSL_EchConfig** outputConfigs, void* heap,
         echConfig += 2;
 
         /* hpke public_key */
-        if (hpkePubkeyLen > HPKE_Npk_MAX || hpkePubkeyLen == 0) {
+        if (hpkePubkeyLen > HPKE_Npk_MAX ||
+                hpkePubkeyLen != wc_HpkeKemGetEncLen(workingConfig->kemId)) {
             ret = BUFFER_E;
             break;
         }

Original file line number	Diff line number	Diff line change
`@@ -548,7 +548,8 @@ int SetEchConfigsEx(WOLFSSL_EchConfig** outputConfigs, void* heap,`
`548`	`548`	`echConfig += 2;`
`549`	`549`
`550`	`550`	`/* hpke public_key */`
`551`		`- if (hpkePubkeyLen > HPKE_Npk_MAX \|\| hpkePubkeyLen == 0) {`
	`551`	`+ if (hpkePubkeyLen > HPKE_Npk_MAX \|\|`
	`552`	`+ hpkePubkeyLen != wc_HpkeKemGetEncLen(workingConfig->kemId)) {`
`552`	`553`	`ret = BUFFER_E;`
`553`	`554`	`break;`
`554`	`555`	`}`