Harden crypto callback, ASN.1 parsing, param-enc and marshalling; add negative tests - #551

Merged

embhorn merged 27 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-6839-6850

Jul 13, 2026

Commits on Jul 13, 2026

F-6847 - Bound ECDSA verify R/S to key size in crypto callback
aidangarske
committed
F-6839 - Fix dead error handling in TPM2_ASN_DecodeX509Cert
aidangarske
committed
F-6840 - Report tag mismatch from TPM2_ASN_DecodeTag
aidangarske
committed
F-6848 - Scrub hash context in TPM2_CalcCpHash and TPM2_CalcRpHash
aidangarske
committed
F-6844 - Clamp TPM2B sizes in TPM2_Packet_AppendPublicArea
aidangarske
committed
F-6842 - Add XOR param-enc mask-size boundary test
aidangarske
committed
F-6843 - Add AES-CFB param-enc key-size boundary test
aidangarske
committed
F-6849 - Document 32-byte ML-KEM K in fwTPM seed KDF
aidangarske
committed
F-6845 - Add field-level roundtrip test for RSA and ECC TPMT_PUBLIC
aidangarske
committed
F-6841 - Add response HMAC verification test for TPM2_ResponseProcess
aidangarske
committed
F-6841 - Expose TPM2_CalcRpHash to tests via WOLFTPM_TEST_API
aidangarske
committed
F-6841 - Exercise response nonceTPM update in HMAC verify test
aidangarske
committed
F-6844 - Clamp ECC point sizes in TPM2_Packet_AppendEccPoint
aidangarske
committed
F-6845 - Run RSA/ECC public roundtrip test in non-PQC builds
aidangarske
committed
F-6844 - Cover keyedHash/sym/mldsa/mlkem clamp arms in append test
aidangarske
committed
F-6847 - Guard ECC verify test on curve size and add oversized-S case
aidangarske
committed
F-6839 - Add valid-certificate happy-path test for DecodeX509Cert
aidangarske
committed
F-6840 - Use fixed pass print in DecodeTag error test
aidangarske
committed
F-6842 - Share TPM2_XOR_MASK_MAX via header so test matches impl
aidangarske
committed
F-6839 - Cover truncated-buffer error path in DecodeX509Cert test
aidangarske
committed
F-6840 - Bound RsaDecodeSignature size check against TPM_RC error codes
aidangarske
committed
F-6839 - Revert DecodeX509Cert guard changes; ASN errors are negative
aidangarske
committed
F-6840 - Revert DecodeTag change and EK cert bound; ASN errors are negative
aidangarske
committed
F-6847 - Cover keySz==0 fallback in ECC verify crypto callback test
aidangarske
committed
F-6847 - Add ChangeLog entry for crypto callback and marshaling hardening
aidangarske
committed
F-6847 - Remove ChangeLog entry
aidangarske
committed
F-6847 - Drop keySz==0 ECC verify test; old wolfSSL wc_ecc_size derefs NULL dp
aidangarske
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Harden crypto callback, ASN.1 parsing, param-enc and marshalling; add negative tests - #551

Harden crypto callback, ASN.1 parsing, param-enc and marshalling; add negative tests#551
embhorn merged 27 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-6839-6850

Commits on Jul 13, 2026

F-6847 - Bound ECDSA verify R/S to key size in crypto callback

F-6839 - Fix dead error handling in TPM2_ASN_DecodeX509Cert

F-6840 - Report tag mismatch from TPM2_ASN_DecodeTag

F-6848 - Scrub hash context in TPM2_CalcCpHash and TPM2_CalcRpHash

F-6844 - Clamp TPM2B sizes in TPM2_Packet_AppendPublicArea

F-6842 - Add XOR param-enc mask-size boundary test

F-6843 - Add AES-CFB param-enc key-size boundary test

F-6849 - Document 32-byte ML-KEM K in fwTPM seed KDF

F-6845 - Add field-level roundtrip test for RSA and ECC TPMT_PUBLIC

F-6841 - Add response HMAC verification test for TPM2_ResponseProcess

F-6841 - Expose TPM2_CalcRpHash to tests via WOLFTPM_TEST_API

F-6841 - Exercise response nonceTPM update in HMAC verify test

F-6844 - Clamp ECC point sizes in TPM2_Packet_AppendEccPoint

F-6845 - Run RSA/ECC public roundtrip test in non-PQC builds

F-6844 - Cover keyedHash/sym/mldsa/mlkem clamp arms in append test

F-6847 - Guard ECC verify test on curve size and add oversized-S case

F-6839 - Add valid-certificate happy-path test for DecodeX509Cert

F-6840 - Use fixed pass print in DecodeTag error test

F-6842 - Share TPM2_XOR_MASK_MAX via header so test matches impl

F-6839 - Cover truncated-buffer error path in DecodeX509Cert test

F-6840 - Bound RsaDecodeSignature size check against TPM_RC error codes

F-6839 - Revert DecodeX509Cert guard changes; ASN errors are negative

F-6840 - Revert DecodeTag change and EK cert bound; ASN errors are negative

F-6847 - Cover keySz==0 fallback in ECC verify crypto callback test

F-6847 - Add ChangeLog entry for crypto callback and marshaling hardening

F-6847 - Remove ChangeLog entry

F-6847 - Drop keySz==0 ECC verify test; old wolfSSL wc_ecc_size derefs NULL dp