WolfSSL
/
wolfTPM
mirror of https://github.com/wolfSSL/wolfTPM.git
1
0
Fork 0
Code Issues Releases Wiki Activity
2,350 Commits
1 Branch
34 Tags
29 MiB
Commit Graph

320 Commits (master)

Author SHA1 Message Date
David Garske 4947973367
Merge pull request #594 from aidangarske/spdm-policy-transport 
Add TPM2_PolicyTransportSPDM support for client and firmware TPM
 2026-09-17 07:11:09 -07:00
Aidan Garske 64a6437e0e Reduce FWTPM_NO_NV context memory 2026-09-16 10:41:13 -07:00
Aidan Garske ecf89639a8 Enforce SPDM transport policies in the firmware TPM 
Implement PolicyTransportSPDM and the SPDM session-info capability in the fwTPM. Track authenticated responder key names, fail closed on malformed state, and add regression coverage for policy enforcement.
 2026-09-15 12:24:05 -07:00
Aidan Garske b064b409ae Add TPM PolicyTransportSPDM client support 
Define the command, capability structures, and wrapper APIs needed to bind TPM policies to authenticated SPDM sessions. Reject malformed or truncated session-info responses and cover the client paths in unit tests.
 2026-09-15 12:24:05 -07:00
Aidan Garske a89169ef05 Include SPDM, PQC, test and CMake files in the source distribution 2026-09-14 13:28:18 -07:00
David Garske 01aef89af0 Fix --enable-pqc build with --disable-wolfcrypt 2026-09-11 11:14:06 -07:00
David Garske 5f3a6af5af
Merge pull request #595 from aidangarske/coverity-913517-tainted-child-blobs 
Bound fwTPM child blob sizes before copying from the response
 2026-09-10 10:42:16 -07:00
Aidan Garske bc33d44169 Bound fwTPM child blob sizes before copying from the response 2026-09-09 09:29:42 -07:00
Aidan Garske e6a99705f3 F-12706 - Enforce TPM response header minimum and inclusive size bound 2026-09-09 09:19:01 -07:00
David Garske 8646904212
Merge pull request #592 from aidangarske/pq-attestation-fix 
Support ML-KEM credential activation and ML-DSA quotes in fwTPM
 2026-09-08 10:40:01 -07:00
David Garske 17f1230449
Merge pull request #593 from aidangarske/fenrir-fixes-12712-13524-13525-13526-13527 
Make fwTPM state changes transactional and harden PolicyPCR and private-blob wrapping
 2026-09-08 10:37:00 -07:00
Aidan Garske c9e652988b F-13526 - Bind wrapped fwTPM private blobs to their public area 2026-09-07 18:45:08 -07:00
Aidan Garske a27662a4c2 F-13527 - Use a fresh IV for every wrapped fwTPM private blob 2026-09-07 18:45:08 -07:00
Aidan Garske fc23e93ced F-13525 - Invalidate PCR policy sessions when a PCR changes 2026-09-07 18:45:08 -07:00
Aidan Garske e9716101b2 Support ML-KEM credential activation and ML-DSA quotes in fwTPM 2026-09-07 18:44:02 -07:00
Aidan Garske 11917addc0 F-13524 - Verify the PolicyPCR digest against live PCR values 2026-09-07 18:06:08 -07:00
Aidan Garske 9bb9e2f8f7 F-12712 - Roll back fwTPM state when the NV journal write fails 2026-09-07 18:06:08 -07:00
Aidan Garske aed309c03c Resolve six outstanding Coverity findings 2026-09-07 10:50:31 -07:00
Aidan Garske 18d9ead84f Keep fixed fwTPM TIS semaphore names and protocol version 2026-09-02 14:14:59 -07:00
Aidan Garske a7b1aa6c3b Inline fwTPM TIS atomics and semaphore name helpers 2026-09-02 14:14:59 -07:00
Aidan Garske ab1bdb3602 F-12738 - Reject truncated signing sequence buffers 2026-09-02 14:14:59 -07:00
Aidan Garske 95696b36ef F-12736 - Authenticate fwTPM shared-memory endpoints 2026-09-02 14:14:58 -07:00
Aidan Garske 5e3cbd2241 F-12735 - Pin the SPDM responder identity 2026-09-02 14:14:58 -07:00
Aidan Garske 3507da0429 F-12710 - Advertise supported ECC curves 2026-09-02 14:14:28 -07:00
Aidan Garske 17c6926f80 F-12709 - Order handle capability pages numerically 2026-09-02 14:14:28 -07:00
Aidan Garske 657cfa499f F-12708 - Report live ReadClock counters 2026-09-02 14:14:28 -07:00
Aidan Garske de67c482d5
Merge pull request #586 from dgarske/st33_fu_ordinal 
Select ST33 field upgrade commands from the TPM command set
 2026-09-02 13:42:42 -07:00
David Garske fe7167a6a9 Peer review feedback (thanks Aidan) 2026-09-02 11:54:59 -07:00
David Garske 00591ba28c
Merge pull request #584 from aidangarske/fenrir-fixes-11898-11920-11921-11925-11927 
Fix TCG v185 complaince issues for fwtpm and spdm
 2026-09-02 07:44:05 -07:00
David Garske 50dfdcec95 Cover the ST33 command set probe in unit tests 2026-08-31 10:26:12 -07:00
David Garske ca34684225 Select ST33 field upgrade commands from the TPM command set (ZD 22193) 2026-08-27 13:29:29 -07:00
Aidan Garske dde9925d45 F-11926 - Enforce ADMIN authorization policy 2026-08-25 16:22:05 -07:00
David Garske 23a328ff87 Fix ST33 generation 1 manifest size and refuse oversized commands (ZD 22193) 2026-08-25 16:02:53 -07:00
Aidan Garske c483e43061 F-11927 - Match NV access to authorization method 2026-08-25 15:48:38 -07:00
Aidan Garske 6ee27ccdfe F-11921 - Reject unsupported limited primaries 2026-08-25 15:48:38 -07:00
Aidan Garske 64003cbdd3 F-11920 - Gate advertised PQC algorithms by support 2026-08-25 15:48:38 -07:00
Aidan Garske 98070a6796 F-9209 - Stream Pure ML-DSA sequence hashing 2026-08-22 00:45:51 -07:00
Aidan Garske cb009766b1 F-9208 - Exempt sequence authorization from DA lockout 2026-08-22 00:20:06 -07:00
Aidan Garske 18066a9402 F-9203 - Bind sequence tickets to raw messages 2026-08-21 15:59:27 -07:00
Eric Blankenhorn 68deab3ca6
Merge pull request #581 from aidangarske/coverity-fixes-912593-912594-911493 
Harden PCR policy bounds checks
 2026-08-21 07:50:17 -05:00
Aidan Garske 2882b72b9d Handle ClearControl NV save failures 2026-08-19 20:01:38 -07:00
Aidan Garske f3360c5d11 Address additional PolicyPCRMake review findings 2026-08-19 14:43:26 -07:00
Aidan Garske 6331325e9e Address PolicyPCRMake review findings 2026-08-19 14:09:25 -07:00
Aidan Garske b1c4c03028 Address fwTPM review findings 2026-08-19 13:53:15 -07:00
Aidan Garske 7d50ca1eef Harden PCR policy bounds checks 2026-08-19 12:41:15 -07:00
Aidan Garske ec250336b8 F-10831 - Bind verified-ticket HMAC to the context integrity hash 2026-08-19 11:59:40 -07:00
Aidan Garske bd94568b89 F-10830 - Advertise FlushContext with zero command handles 2026-08-19 11:59:31 -07:00
Aidan Garske 373a22f517 F-10829 - Set TPMA_CC flushed bit for SequenceComplete commands 2026-08-19 11:59:05 -07:00
Aidan Garske 1aaded0a31
Merge pull request #576 from dgarske/jetson_orin_ftpm 
Add support for the NVIDIA Jetson Orin OP-TEE firmware TPM
 2026-08-18 16:50:54 -07:00
David Garske a5a400bd0b Add support for the NVIDIA Jetson Orin OP-TEE firmware TPM 2026-08-18 14:03:58 -07:00