DF-3560 / verdict.json
{ "finding_id": "DF-3560", "status": "untested", "reproduced": 0, "impact": "latent key-material stack residue + KASSERT-only key-size validation", "confidence": "certain", "verdict": "Info hardening finding - no in-tree callers, residue unreachable today. The underlying crypto primitive correctness was exhaustively verified live in the same run (RFC 3713 tables + KATs + 96/96 OpenSSL cross-match, camtest.log in DF-3559 pack). Phase V skipped per contract (Info).", "evidence": "findings/poc/DF-3559/camtest.log (correctness); cryptoapi.c consumer grep (absence)", "attempts": 0, "guest_dirty": 0, "runner": "df-bsd-reviewer" } |