Skip to content

Harden ECDH buffer bounds, RSA/ECC key conversion, identity auth, and fwTPM PQC TestParms#547

Merged
dgarske merged 22 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-6738-6750
Jul 9, 2026
Merged

Harden ECDH buffer bounds, RSA/ECC key conversion, identity auth, and fwTPM PQC TestParms#547
dgarske merged 22 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-6738-6750

Conversation

@aidangarske

@aidangarske aidangarske commented Jul 7, 2026

Copy link
Copy Markdown
Member 
F-6738, F-6739, F-6740, F-6741, F-6742, F-6743, F-6744, F-6745, F-6746, F-6747, F-6748, F-6749, F-6750

aidangarske added 19 commits July 7, 2026 12:40
@aidangarske
6748 - Gate fwTPM TestParms PQC arms on WOLFTPM_MLDSA/WOLFTPM_MLKEM
7e8aec5
@aidangarske
6749 - Bound ECDH response x-coordinate against caller buffer capacity
cd46447
@aidangarske
6738 - Require explicit master password in wolfTPM2_SetIdentityAuth
e41d2c9
@aidangarske
6739 - Propagate readKeyBlob failure in activate_credential example
a634687
@aidangarske
6740 - Propagate readKeyBlob failure in external_import example
b47aa22
@aidangarske
6741 - Use rsaDec label size for RSA Decrypt label copy in native_test
32ef758
@aidangarske
6742 - Add KDFe known-answer vector to pin hash-input construction
7b85356
@aidangarske
6743 - Add CalcHmac KAT and cpHash/attributes binding checks
c29d5ec
@aidangarske
6745 - Fix RSA exponent byte order in wolfTPM2_RsaKey_TpmToWolf
9a56a46
@aidangarske
6746 - Right-align short ECC coordinates in wolfTPM2_EccKey_TpmToWolf
ee00c70
@aidangarske
6750 - Scrub hash context in wolfTPM2_SetIdentityAuth after use
78096c1
@aidangarske
6744 - Exercise crypto-callback ECDSA invalid-signature branch in test
67feae3
@aidangarske
6738 - Allow sample password on autodetect Infineon builds and check …
fe88c6a 
…example rc
@aidangarske
6746 - Use deterministic P-256 vector in short-coordinate test
a79760c
@aidangarske
6738 - Match SetIdentityAuth test guard to production autodetect gating
d91adb6
@aidangarske
6746 - Drop redundant WOLFTPM2_NO_WRAPPER guard on TpmToWolf tests
ea50fa5
@aidangarske
6749 - Collapse wolfTPM2_EccZToBuffer header comment to one line
c42c6f6
@aidangarske
6738 - Update TLS example comment for Infineon-gated sample password
ebfdcf3
@aidangarske
6738 - Document Infineon-gated master password precondition in Doxygen
eef373d
@aidangarske aidangarske requested review from Copilot and dgarske July 7, 2026 21:47

This comment was marked as resolved.

Sign in to view

@aidangarske aidangarske marked this pull request as ready for review July 7, 2026 22:06
dgarske
dgarske requested changes Jul 8, 2026
View reviewed changes
Comment thread src/tpm2_wrap.c Outdated
@dgarske dgarske removed their assignment Jul 8, 2026
@aidangarske aidangarske requested a review from dgarske July 9, 2026 01:05
dgarske
dgarske approved these changes Jul 9, 2026
View reviewed changes

@dgarske dgarske left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Merging with unrelated failures fixed in #546

@dgarske dgarske merged commit c6cbb6b into wolfSSL:master Jul 9, 2026
179 of 196 checks passed
@aidangarske aidangarske deleted the fenrir-fixes-6738-6750 branch July 10, 2026 00:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments
@dgarske dgarske dgarske approved these changes

Assignees

@wolfSSL-Bot wolfSSL-Bot

@aidangarske aidangarske

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@aidangarske @dgarske @wolfSSL-Bot