WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
2,823 Commits
31 Branches
32 Tags
44 MiB
Commit Graph

2823 Commits (b705ca74ae599bec8978a76b063226b405ca4880)

Author SHA1 Message Date
Daniele Lacamera b705ca74ae Warn when DISABLE_BACKUP is enabled 
F/2257
 2026-04-08 19:53:50 +02:00
Daniele Lacamera fc9e7a3e8a Use constant-time delta base hash compare 
F/2253
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 435e8d4c92 Scrub sign-tool encryption material 
F/1891
 2026-04-08 19:53:50 +02:00
Daniele Lacamera e855c591db zeroize swap trailer key buffer 
F/1890
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 2f75363a19 zero custom encrypt stack buffers 
F/1889
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 04cc957d6f zeroize update key material 
F/1888
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 35142e6945 Fix total size type in update flash 
F/2269
 2026-04-08 19:53:50 +02:00
Daniele Lacamera e4e96ad2fa Reject valid zero-size delta images 
F/2268
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 0c4be70a29 Add equal-version update-disk regression test 
F/2264
 2026-04-08 19:53:50 +02:00
Daniele Lacamera f5d50d4257 enforce skip-verify prerequisites 
F/2256
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 8e2f8b34da Use fixed-length erased-key check 
F/2252
 2026-04-08 19:53:50 +02:00
Daniele Lacamera dfc73ca7e1 Use constant-time encryption key validation 
F/2249
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 1528bc8d99 Use constant-time TPM secret checks 
F/2248
 2026-04-08 19:53:50 +02:00
Daniele Lacamera e22eade623 fix memmove large-length backward copy 
F/1897
 2026-04-08 19:53:50 +02:00
Daniele Lacamera a5ea3ff829 Reject oversized delta source offsets 
F/2267
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 153ad2b0af Fix sign header TLV overflow sizing 
F/2266
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 0bcc49ab3c Strengthen same-version RAM update test 
F/2262
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 47b61ba2eb Add RAM_CODE self-update unit coverage 
F/2261
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 30fb32f89f Add auth-only invalid update test 
F/2260
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 12dd6becc6 Add auth type coverage for unit-image 
F/2259
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 44c5b4ab0a Protect bootloader before application boot 
F/2255
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 9715b4df26 Use constant-time RSA hash comparison 
F/2247
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 2ab04ed382 Check image reopen failures in sign tool 
F/1898
 2026-04-08 19:53:50 +02:00
Daniele Lacamera c6e7f7966b Fix sign encrypted output open failure 
F/1895
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 364b9d099b Fix policy_create PCR digest validation 
F/1894
 2026-04-08 19:51:17 +02:00
Daniele Lacamera de4c33ee44 Propagate erase encrypt key write failures 
F/1893
 2026-04-08 19:50:11 +02:00
Daniele Lacamera 1442e1c8d0 Propagate encrypt key flash errors 
F/1892
 2026-04-08 19:50:11 +02:00
Daniele Lacamera 8399e3ed44 Add restricted key mask authenticity tests 
F/2258
 2026-04-08 15:47:47 +02:00
Daniele Lacamera 32783034ab zero ML-DSA private key buffer 
F/2277
 2026-04-08 15:43:26 +02:00
Daniele Lacamera 6f40afaedf Zero EdDSA keygen private data 
F/2276
 2026-04-08 15:42:14 +02:00
Daniele Lacamera 114140c232 Zero ECC keygen private buffers 
F/2275
 2026-04-08 15:40:48 +02:00
Daniele Lacamera 87d5a7fc9a Scrub RSA keygen private material 
F/2274
 2026-04-08 15:39:47 +02:00
Daniele Lacamera 1c82453922 sign: scrub key buffers before free 
F/2273
 2026-04-08 15:38:18 +02:00
David Garske 993b4f42f6
Merge pull request #744 from danielinux/update-submodules-2.8.0 
Updated submodules to latest version
 2026-04-08 00:43:59 +08:00
Daniele Lacamera c03d251599 Addressed copilot's comment 2026-04-07 15:02:21 +02:00
Daniele Lacamera 201c2c5c7e Adjust BIGINT limits for new wolfSSL ECC+SMALLSTACK 2026-04-07 14:14:44 +02:00
Daniele Lacamera c710fe9078 Fixed xmalloc pools for new wolfSSL ECC+SMALLSTACK 2026-04-07 12:36:30 +02:00
Daniele Lacamera f62dc729eb Updated submodules to latest 2026-04-07 12:07:24 +02:00
Mattia Moffa 084431ba87
Merge pull request #740 from danielinux/fixes-20260330 
Fixes 20260330
 2026-03-31 14:33:52 +02:00
Daniele Lacamera d7e56d59c7 Address copilot comments 2026-03-31 07:33:48 +02:00
Daniele Lacamera 909fbeb35e (review comment) remove hal_otp.h 2026-03-31 07:20:45 +02:00
Daniele Lacamera 6b6d27de5c PKCS11 test: use pre-provisioned key to make test deterministic 2026-03-31 07:16:54 +02:00
Daniele Lacamera cfbc3f0cfc Up to latest emulator container 2026-03-30 19:19:36 +02:00
Daniele Lacamera 02b88c054f Move variable to its usage block 2026-03-30 16:49:42 +02:00
Brett Nicholas 9debc4c559 Fix XMSS and ML_DSA keygen type mismatch between image headers and keystore by unifying AUTH_KEY_*/KEYGEN_* constants 2026-03-30 16:32:44 +02:00
Marco Oliverio 409901b660 pic32c: remove unused variable 2026-03-30 16:31:57 +02:00
Daniele Lacamera 918e00c781 Rebased, addressed comments 2026-03-30 16:30:27 +02:00
Daniele Lacamera 49106caefc Updated .gitignore: add new unit test binaries 2026-03-30 16:23:16 +02:00
Daniele Lacamera 43b485f239 Validate FDT string offsets 
F/1481
 2026-03-30 16:23:16 +02:00
Daniele Lacamera 2abf80addd Guard TPM keystore auth in check_rot 
F/1482
 2026-03-30 16:23:16 +02:00