Hardening fixes for examples, fwTPM command handlers, and crypto helpers#503

Merged

dgarske merged 43 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-11

May 12, 2026

Commits on May 12, 2026

F-3708 - Zero-initialize TBS_CONTEXT_PARAMS2 in TPM2_WinApi_SendCommand
aidangarske
committed
F-3709 - NULL check wolfTPM2_NewKeyBlob in external_import
aidangarske
committed
F-3710 - Use goto exit on TPM2_LoadExternal failure in make_credential
aidangarske
committed
F-3711 - Set rc on cert/key buffer load failure in tls_client_notpm
aidangarske
committed
F-3918 - Bounds check pcrArray writes in secret_unseal and policy_sign
aidangarske
committed
F-3919 - Treat swtpm response size as uint32_t and bound below by header
aidangarske
committed
F-3924 - Reject non-aligned size in block modes for EncryptDecryptBlock
aidangarske
committed
F-3722 - Reject x509sign keyHandle in FwCmd_Sign
aidangarske
committed
F-3920 - Bitwise AND poll revents to accept POLLIN|POLLHUP
aidangarske
committed
F-3921 - Restore goto exit on TPM2_ObjectChangeAuth failure in native_test
aidangarske
committed
F-3922 - Clamp -auth length in keygen example
aidangarske
committed
F-3926 - Clamp -ownerauth length in seal_nv example
aidangarske
committed
F-3927 - Clamp -password length in keyimport example
aidangarske
committed
F-3925 - Scale AES wrap to key strength in DecodeRsaDer and DecodeEccDer
aidangarske
committed
F-3716 - ForceZero encKeyBuf and importedAuth in FwCmd_Import
aidangarske
committed
F-3717 - ForceZero authValue in FwCmd_LoadExternal
aidangarske
committed
F-3718 - ForceZero SPDM vdMsg/vdRsp plaintext buffers before release
aidangarske
committed
F-3928 - ForceZero dataBuf in FwCmd_NV_Write before release
aidangarske
committed
F-3720 - Zero in.auth on BAD_FUNC_ARG paths in NVCreateAuthPolicy_ex
aidangarske
committed
F-3721 - ForceZero HMAC/hash context in TPM2_KDFa_ex and TPM2_KDFe_ex
aidangarske
committed
F-3931 - ForceZero GetRandom_Out in wolfTPM2_GetRandom
aidangarske
committed
F-3712 - Branch-free HMAC comparison for FwCmd_Sign ticket
aidangarske
committed
F-3713 - Branch-free HMAC comparison for FwCmd_CertifyCreation ticket
aidangarske
committed
F-3714 - Use TPM2_ConstantCompare for SPDM responder verify-data HMAC
aidangarske
committed
F-3715 - Add SHA3 and PQC reverse mappings in TPM2_GetAlgId
aidangarske
committed
F-3723 - Replace derivedDataOrigin with firmwareLimited and svnLimited
aidangarske
committed
F-3923 - Log Zephyr getaddrinfo and per-attempt connect failures
aidangarske
committed
F-3929 - Unconditional left-pad of ECDH X-coordinate in HPKE encap/decap
aidangarske
committed
F-3930 - Bound check offsets in ifx_fw_extract extractFW
aidangarske
committed
F-3719 - Add KAT for TPM2_ParamEnc_AESCFB cross-checking KDFa+AES-CFB
aidangarske
committed
F-3722 - Guard x509sign check on WOLFTPM_V185 in FwCmd_Sign
aidangarske
committed
F-3714 - Use volatile inline accumulator for SPDM verify-data HMAC
aidangarske
committed
F-3918 - Use element-count form for pcrArray bounds check
aidangarske
committed
F-3723 - Keep TPMA_OBJECT_derivedDataOrigin as deprecated alias
aidangarske
committed
F-3709 - Scope NULL guards to heap build in external_import
aidangarske
committed
F-3711 - Use WOLFSSL_FATAL_ERROR not WOLFSSL_FAILURE in tls_client_notpm
aidangarske
committed
F-3709 - Zero-init dev in external_import before alloc-fail goto exit
aidangarske
committed
F-3929 - Restore dhSz<=nSk guard in HPKE ECDH pad to avoid truncation
aidangarske
committed
F-3928 - NULL-check dataBuf before ForceZero under WOLFTPM_SMALL_STACK
aidangarske
committed
F-3922 - Use sizeof(auth.buffer) for -auth length check in keygen
aidangarske
committed
F-3927 - Hoist mid-block declarations in keyimport and seal_nv examples
aidangarske
committed
F-3924 - Document alignment contract and scrub per-iteration GetRandom output
aidangarske
committed
F-3715 - Test SHA3/PQC GetAlgId, EncryptDecryptBlock alignment, and Decode wrap-key scaling
aidangarske
committed