mirror of https://github.com/wolfSSL/wolfBoot.git
6dabdad01e
pkcs11_pin is a file-scope copy of the compile-time credential passed to C_Login() for the token holding the firmware-decryption key. pkcs11_crypto_deinit() runs on the pre-handoff path but only closed the session, leaving the credential in retained bootloader memory where a post-handoff attacker could recover it and authenticate to the token. Wipe the copy (volatile zeroize) after the final C_CloseSession(). No re-init path exists after deinit in the product flow (init is only called from the verification paths), so wiping inside the deinit is safe. Add unit-pkcs11-pin-zeroize: a full init/deinit cycle with a stubbed PKCS#11 backend that asserts the pin copy is all zero after deinit and the session was closed, plus a no-session deinit safety case. Verification: unit-pkcs11-pin-zeroize 1/2 pre-fix (pin byte 0 not wiped), 2/2 post-fix; full unit suite green; sim build green; kontron_vx3060_s2 CI build green. |
||
|---|---|---|
| .. | ||
| armclang | ||
| bin-assemble | ||
| check_config | ||
| ci | ||
| delta | ||
| efi | ||
| elf-parser | ||
| fdt-parser | ||
| fs-test | ||
| keytools | ||
| lms | ||
| openocd | ||
| renode | ||
| sbom | ||
| scripts | ||
| squashelf | ||
| test-expect-version | ||
| test-update-server | ||
| tpm | ||
| uart-flash-server | ||
| unit-tests | ||
| xmss | ||
| config.mk | ||
| test-delta.mk | ||
| test-enc.mk | ||
| test-renode.mk | ||
| test.mk | ||
| wolfboot-rpi-devicetree.diff | ||