[cconlon]

This PR fixes 5 Fenrir issues:

• F-15081: Size the wc_DhAgree() shared secret buffer to fit the key's prime.
• F-15030: Free native digest contexts on re-init and release via MessageDigest.native_free().
• F-15031: Re-key AesCmac after doFinal(), since wc_CmacFinal() frees the native context.
• F-15032: Verify default-salt RSA-PSS with wc_RsaPSS_VerifyCheck() so the salt length follows the modulus bits.
• F-15033: Stop the PBKDF2 JNI wrapper on GetByteArrayElements() failure and keep the pending exception.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #298

Scan targets checked: wolfcrypt-jni-src, wolfcrypt-jni-bugs
Coverage: 10 of 32 in-scope changed file(s) opened by the reviewer; not opened: jni/include/com_wolfssl_wolfcrypt_Md5.h, jni/include/com_wolfssl_wolfcrypt_Sha.h, jni/include/com_wolfssl_wolfcrypt_Sha224.h, jni/include/com_wolfssl_wolfcrypt_Sha256.h, jni/include/com_wolfssl_wolfcrypt_Sha3.h, jni/include/com_wolfssl_wolfcrypt_Sha384.h, jni/include/com_wolfssl_wolfcrypt_Sha512.h, jni/jni_sha.c, src/main/java/com/wolfssl/wolfcrypt/Sha.java, src/main/java/com/wolfssl/wolfcrypt/Sha224.java and 12 more

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

Review tier: Lite