Harden wolfTPM validation and data handling - #582

Merged

dgarske merged 63 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-10829-10836-pass2

Aug 25, 2026

Commits on Aug 21, 2026

F-9135 - Require timing resistance for ECC secret encryption
aidangarske
committed
09aaf07
F-9160 - Release wolfCrypt after failed TPM initialization
aidangarske
committed
c88d1e0
F-9163 - Reject truncated public key blobs
aidangarske
committed
32008fc
F-9164 - Reject NULL file buffers in no-heap builds
aidangarske
committed
25bb167
F-9165 - Return TIS register read failures
aidangarske
committed
f753882
F-9166 - Accept optional X.509 signature parameters
aidangarske
committed
d24d171
F-9167 - Stop GPIO setup after capability failure
aidangarske
committed
8134e70
F-9168 - Reject malformed attestation data
aidangarske
committed
d494f36
F-9169 - Return failure from TLS setup errors
aidangarske
committed
2051630
F-9170 - Fail unseal on file output errors
aidangarske
committed
617b815
F-9171 - Write exact quote attestation length
aidangarske
committed
175b0bb
F-9189 - Enforce PCR policy hash algorithm
aidangarske
committed
6526fa6
F-9190 - Make PCR extend updates atomic
aidangarske
committed
a1882ed
F-9196 - Validate ML-KEM symmetric parameters
aidangarske
committed
32604f9
F-9199 - Accept v1.85 verified ticket layouts
aidangarske
committed
38f8406
F-9203 - Bind sequence tickets to raw messages
aidangarske
committed
18066a9

Commits on Aug 22, 2026

F-9207 - Save sequence contexts
aidangarske
committed
b41a941
F-9208 - Exempt sequence authorization from DA lockout
aidangarske
committed
cb00976
F-9209 - Stream Pure ML-DSA sequence hashing
aidangarske
committed
98070a6
F-9210 - Correct algorithm capability attributes
aidangarske
committed
be686c7
F-9212 - Validate ML-DSA external-mu flag
aidangarske
committed
ce0bedd
F-9213 - Clear wrapper session secrets on cleanup
aidangarske
committed
2687603
F-9214 - Clear shared-memory transfer staging
aidangarske
committed
31babae
F-9215 - Clear sequence authentication residue
aidangarske
committed
d22abb9
F-9216 - Clear command buffer after lock failure
aidangarske
committed
09b9e8c
F-9217 - Clear obsolete key password bytes
aidangarske
committed
2ae2dd9
F-9218 - Clear replaced key authorization values
aidangarske
committed
2fd1204
F-9219 - Harden session authentication updates
aidangarske
committed
c2d0736
F-9220 - Clear replaced policy authorization bytes
aidangarske
committed
54ac9d4
F-9221 - Clear replaced NV authorization bytes
aidangarske
committed
e931104
F-9222 - Clear obsolete identity authorization
aidangarske
committed
3834e70
F-10757 - Validate SPDM negotiation responses
aidangarske
committed
81db441
F-10758 - Validate END_SESSION acknowledgment
aidangarske
committed
9ea5077
F-10759 - Report unsupported key loading
aidangarske
committed
2c67d40
F-10769 - Blind private ECC public derivation
aidangarske
committed
d459c2c
F-10777 - Document retry getter synchronization
aidangarske
committed
cb72e07
F-10783 - Correct PCR reset documentation
aidangarske
committed
97dbc20
F-10786 - Document fwTPM callback serialization
aidangarske
committed
8edc084
F-10827 - Validate signature context sizes
aidangarske
committed
464b258
F-10828 - Honor PQC capability opt-outs
aidangarske
committed
b7a7fbc
F-10832 - Support HMAC sequence wrappers
aidangarske
committed
a5e8c1f
F-10833 - Clear HMAC auth on start failure
aidangarske
committed
cf0fb6d
F-10834 - Clear terminal HMAC authorizations
aidangarske
committed
8d8d3fe
F-10835 - Defer NV authorization commit
aidangarske
committed
31fdfbf
F-10836 - Scrub timed-out I2C staging
aidangarske
committed
6941718

Commits on Aug 24, 2026

Preserve empty-auth policy session state
aidangarske
committed
7956c5a
Restrict SHAKE256 to ML-DSA sequences
aidangarske
committed
aa4ed5d
Report SYMCIPHER as a symmetric algorithm
aidangarske
committed
491a0f3
Preserve ML-DSA allocation failures
aidangarske
committed
31bc16c
Correct the SPDM END_SESSION request code
aidangarske
committed
fabd768
Accept both valid responder PSK capabilities
aidangarske
committed
9cc21be
Keep DA declarations C89 compatible
aidangarske
committed
0ee095d
Avoid blocking during fwTPM client cleanup
aidangarske
committed
cfabfb8
Correct SPDM ALGORITHMS response layout
aidangarske
committed
a634a22
Recompute ticket proof when restoring sequences
aidangarske
committed
f666151
Complete cleanup after crypto callback errors
aidangarske
committed
114bac4
Validate the selected policy authorization mode
aidangarske
committed
48f896e
Match X.509 signature algorithm identifiers
aidangarske
committed
e78d481
Fix strict CI build failures
aidangarske
committed
b0c8e3e
Fix GCC v1.85 warning failures
aidangarske
committed
ceeab36
Guard verify-only ticket helper
aidangarske
committed
fd56f68
Skip unsupported key loads without filesystem
aidangarske
committed
eda30bd
Support SHA-3 state on wolfSSL 5.8.0
aidangarske
committed
ffb148a