Rust wrapper: add rand_core, aead, cipher trait implementations

[holtrop-wolfssl]

Description

This PR adds APIs which implement the traits in the rand_core, aead, and cipher crates.

This makes our crate more compatible with the rest of the Rust ecosystem.

Testing

Unit tests

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

Pull request overview

This PR extends the wolfssl-wolfcrypt Rust wrapper with trait implementations from common ecosystem crates (rand_core, aead, cipher) to improve interoperability with existing Rust crypto APIs.

Changes:

• Add optional crate features and dependencies for rand_core, aead, and cipher.
• Implement rand_core RNG traits for RNG, plus aead/cipher trait adapters for ChaCha20-Poly1305/XChaCha20-Poly1305 and multiple AES modes.
• Add new unit tests covering the new trait-based APIs, and update the wrapper Makefile to build/test with these features enabled.

Reviewed changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated 9 comments.

Show a summary per file

File	Description
wrapper/rust/wolfssl-wolfcrypt/src/random.rs	Adds rand_core trait implementation for RNG.
wrapper/rust/wolfssl-wolfcrypt/src/chacha20_poly1305.rs	Adds aead trait adapter types for ChaCha20-Poly1305 and XChaCha20-Poly1305; adjusts XChaCha struct form.
wrapper/rust/wolfssl-wolfcrypt/src/aes.rs	Adds aead adapters for AES-GCM/CCM and cipher adapters for AES ECB/CBC and stream modes (CTR/OFB).
wrapper/rust/wolfssl-wolfcrypt/tests/test_random.rs	Adds tests validating rand_core trait behavior on RNG.
wrapper/rust/wolfssl-wolfcrypt/tests/test_chacha20_poly1305.rs	Adds aead-trait tests for ChaCha20-Poly1305 and XChaCha20-Poly1305.
wrapper/rust/wolfssl-wolfcrypt/tests/test_aes.rs	Adds aead and cipher trait tests for AES modes (GCM/CCM, ECB/CBC, CTR/OFB).
wrapper/rust/wolfssl-wolfcrypt/Cargo.toml	Declares new optional features/dependencies and dev-dependencies for tests.
wrapper/rust/wolfssl-wolfcrypt/Makefile	Builds/tests/docs with the new features enabled by default.
wrapper/rust/wolfssl-wolfcrypt/Cargo.lock	Locks newly introduced dependency graph entries.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[holtrop-wolfssl]

retest this please (Calling Pipeline was cancelled)

[Copilot]

Pull request overview

Copilot reviewed 8 out of 9 changed files in this pull request and generated no new comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[dgarske]

🐺 Skoll Code Review

Overall recommendation: REQUEST_CHANGES
Findings: 8 total — 6 posted, 2 skipped

Posted findings

• [High] check_remaining no-op allows silent len as u32 truncation in StreamCipher impls — wrapper/rust/wolfssl-wolfcrypt/src/aes.rs:3250-3252
• [Medium] AEAD key wrapper structs do not zeroize key material on Drop — wrapper/rust/wolfssl-wolfcrypt/src/aes.rs:499-501
• [Medium] GCM/CCM AEAD wrappers re-initialize crypto context on every operation — wrapper/rust/wolfssl-wolfcrypt/src/aes.rs:1587-1611
• [Medium] TryRng::try_fill_bytes panics on wolfCrypt RNG failure instead of returning error — wrapper/rust/wolfssl-wolfcrypt/src/random.rs:401-403
• [Low] ~1000 lines of near-identical boilerplate for AES key-size variants — wrapper/rust/wolfssl-wolfcrypt/src/aes.rs:2882-3885
• [Low] AEAD GCM/CCM buffer.len() as u32 truncates silently for buffers > 4GB — wrapper/rust/wolfssl-wolfcrypt/src/aes.rs:1601

Skipped findings

• [Medium] XChaCha20Poly1305Aead has undocumented 4096-byte message limit with large stack allocation
• [Low] Missing AES-192 variants for GCM/CCM AEAD trait implementations

Review generated by Skoll via openclaw

[dgarske]

Merging and @holtrop-wolfssl will followup with recommended fixes (already in another branch).