Harden ECDH buffer bounds, RSA/ECC key conversion, identity auth, and fwTPM PQC TestParms#547

Merged

dgarske merged 22 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-6738-6750

Jul 9, 2026

Commits on Jul 7, 2026

6748 - Gate fwTPM TestParms PQC arms on WOLFTPM_MLDSA/WOLFTPM_MLKEM
aidangarske
committed
6749 - Bound ECDH response x-coordinate against caller buffer capacity
aidangarske
committed
6738 - Require explicit master password in wolfTPM2_SetIdentityAuth
aidangarske
committed
6739 - Propagate readKeyBlob failure in activate_credential example
aidangarske
committed
6740 - Propagate readKeyBlob failure in external_import example
aidangarske
committed
6741 - Use rsaDec label size for RSA Decrypt label copy in native_test
aidangarske
committed
6742 - Add KDFe known-answer vector to pin hash-input construction
aidangarske
committed
6743 - Add CalcHmac KAT and cpHash/attributes binding checks
aidangarske
committed
6745 - Fix RSA exponent byte order in wolfTPM2_RsaKey_TpmToWolf
aidangarske
committed
6746 - Right-align short ECC coordinates in wolfTPM2_EccKey_TpmToWolf
aidangarske
committed
6750 - Scrub hash context in wolfTPM2_SetIdentityAuth after use
aidangarske
committed
6744 - Exercise crypto-callback ECDSA invalid-signature branch in test
aidangarske
committed
6738 - Allow sample password on autodetect Infineon builds and check example rc
aidangarske
committed
6746 - Use deterministic P-256 vector in short-coordinate test
aidangarske
committed
6738 - Match SetIdentityAuth test guard to production autodetect gating
aidangarske
committed
6746 - Drop redundant WOLFTPM2_NO_WRAPPER guard on TpmToWolf tests
aidangarske
committed
6749 - Collapse wolfTPM2_EccZToBuffer header comment to one line
aidangarske
committed
6738 - Update TLS example comment for Infineon-gated sample password
aidangarske
committed
6738 - Document Infineon-gated master password precondition in Doxygen
aidangarske
committed
6749 - Bound EccZToBuffer source size against z->buffer to prevent OOB read
aidangarske
committed
6743 - Assert HMAC size before comparing against fixed KAT length
aidangarske
committed

Commits on Jul 9, 2026

6738 - Gate identity sample password on ST33/autodetect not Infineon
aidangarske
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Harden ECDH buffer bounds, RSA/ECC key conversion, identity auth, and fwTPM PQC TestParms#547

Harden ECDH buffer bounds, RSA/ECC key conversion, identity auth, and fwTPM PQC TestParms#547
dgarske merged 22 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-6738-6750

Commits on Jul 7, 2026

6748 - Gate fwTPM TestParms PQC arms on WOLFTPM_MLDSA/WOLFTPM_MLKEM

6749 - Bound ECDH response x-coordinate against caller buffer capacity

6738 - Require explicit master password in wolfTPM2_SetIdentityAuth

6739 - Propagate readKeyBlob failure in activate_credential example

6740 - Propagate readKeyBlob failure in external_import example

6741 - Use rsaDec label size for RSA Decrypt label copy in native_test

6742 - Add KDFe known-answer vector to pin hash-input construction

6743 - Add CalcHmac KAT and cpHash/attributes binding checks

6745 - Fix RSA exponent byte order in wolfTPM2_RsaKey_TpmToWolf

6746 - Right-align short ECC coordinates in wolfTPM2_EccKey_TpmToWolf

6750 - Scrub hash context in wolfTPM2_SetIdentityAuth after use

6744 - Exercise crypto-callback ECDSA invalid-signature branch in test

6738 - Allow sample password on autodetect Infineon builds and check example rc

6746 - Use deterministic P-256 vector in short-coordinate test

6738 - Match SetIdentityAuth test guard to production autodetect gating

6746 - Drop redundant WOLFTPM2_NO_WRAPPER guard on TpmToWolf tests

6749 - Collapse wolfTPM2_EccZToBuffer header comment to one line

6738 - Update TLS example comment for Infineon-gated sample password

6738 - Document Infineon-gated master password precondition in Doxygen

6749 - Bound EccZToBuffer source size against z->buffer to prevent OOB read

6743 - Assert HMAC size before comparing against fixed KAT length

Commits on Jul 9, 2026

6738 - Gate identity sample password on ST33/autodetect not Infineon