tests: adapt test_long_hash and test_fips to wolfSSL FIPS v5.2.4

[gasbytes]

FIPS v5.2.4 caps total CMAC input at 2^32-1 bytes and allows 64-bit AES-GCM tags. Updated the tests appropriately.

[Copilot]

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Copilot review overview

Review effort: Lite
Findings: 2 · 1

Open (3)

• The comment is now inconsistent with the test intent described in the PR: 64-bit (8-byte) tags are… · New
• Using buf_sz - 1 is both opaque (it’s not clear to the reader which limit is being targeted) and… · New
• The CMAC expected bytes changed, but there’s no in-test explanation tying this vector to the… · New

What changed in this PR

Updates wolfSSL wrapper tests to align with wolfSSL FIPS v5.2.4 constraints (CMAC max input length and AES-GCM tag length rules).

Changes:

• Update expected AES-CMAC output vector in test_long_hash.c.
• Adjust long CMAC test length to stay within the new FIPS input cap.
• Update AES-GCM invalid tag-size test cases to reflect 64-bit tags now being allowed.

File	Description
wolfssl-gnutls-wrapper/​tests/​test_long_hash.c	Updates CMAC expected value and reduces CMAC input length by 1 byte to comply with FIPS v5.2.4 limit.
wolfssl-gnutls-wrapper/​tests/​test_fips.c	Removes 64-bit tag length from “invalid” cases for AES-GCM to match updated FIPS behavior.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.