wolfTPM

Commit Graph

Select branches

Hide Pull Requests

master

#10

#10

#100

#101

#102

#103

#107

#108

#11

#11

#111

#112

#113

#114

#115

#116

#117

#118

#119

#12

#121

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#151

#152

#154

#155

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#18

#180

#181

#182

#183

#184

#185

#186

#187

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#218

#219

#22

#220

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#261

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#279

#28

#280

#281

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#347

#348

#35

#350

#351

#352

#353

#354

#355

#357

#359

#36

#360

#361

#362

#363

#364

#366

#367

#368

#369

#37

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#490

#491

#492

#493

#494

#495

#496

#497

#498

#5

#50

#500

#501

#502

#503

#507

#508

#509

#51

#510

#511

#512

#513

#514

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#527

#528

#53

#530

#531

#532

#533

#534

#535

#536

#537

#538

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#562

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#58

#580

#581

#582

#583

#584

#585

#585

#586

#587

#587

#588

#59

#590

#591

#592

#593

#594

#595

#596

#597

#598

#599

#6

#60

#600

#601

#602

#602

#603

#604

#605

#606

#607

#607

#608

#609

#61

#610

#62

#63

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#9

#90

#91

#92

#93

#95

#96

#97

#99

v.1.8

v1.1

v1.2

v1.2.1

v1.2.2

v1.3

v1.4

v1.5

v1.6.0

v1.7

v1.8

v1.9.0

v2.0.0

v2.1.0

v2.2.0

v2.3.0

v2.3.1

v2.4.0

v2.5.0

v2.6.0

v2.7.0

v3.0.0

v3.1.0

v3.10.0

v3.2.0

v3.4.0

v3.6.0

v3.8.0

v3.9.0

v3.9.1

v3.9.2

v4.0.0

v4.1.0

v4.2.0

120b91513f

Merge af8141c9d1 into 4947973367 Aidan Garske 2026-09-17 07:23:56 -0700
a755c8254f

Merge 9afde207aa into 4947973367 David Garske 2026-09-17 07:11:17 -0700
4947973367

Merge pull request #594 from aidangarske/spdm-policy-transport master David Garske 2026-09-17 07:11:09 -0700
4603f83ac3

Merge pull request #610 from aidangarske/fwtpm-no-nv-context-slots David Garske 2026-09-16 11:46:50 -0700
64a6437e0e Reduce FWTPM_NO_NV context memory Aidan Garske 2026-09-16 10:41:13 -0700
9afde207aa Disambiguate ASN error codes from TPM response codes David Garske 2026-09-15 17:07:29 -0700
192c59ee5d Bound TIS wait loops by real time where a monotonic clock exists David Garske 2026-09-15 17:07:29 -0700
4fe76e2ad9 Skip example paths for features the TPM does not implement David Garske 2026-09-15 17:07:29 -0700
6655c7548a Reject oversized signatures before TPM2_VerifySignature David Garske 2026-09-15 17:07:29 -0700
4656a2c474 Add native helpers to query algorithm and PCR bank support David Garske 2026-09-15 17:07:29 -0700
3c3dfa9282 Gate SPDM channel return codes by spec or feature Aidan Garske 2026-09-15 12:34:28 -0700
485b3c93b2 Remove duplicate v1.85 channel response code enum definitions Aidan Garske 2026-09-11 14:42:47 -0700
64f2db9fcb Add SPDM-bound NV policy examples Aidan Garske 2026-09-08 11:10:44 -0700
ecf89639a8 Enforce SPDM transport policies in the firmware TPM Aidan Garske 2026-09-08 11:10:18 -0700
b064b409ae Add TPM PolicyTransportSPDM client support Aidan Garske 2026-09-08 11:09:52 -0700
c3c0621333

Merge pull request #609 from aidangarske/dist-include-missing-files v4.2.0 David Garske 2026-09-14 15:19:20 -0700
7ce6923f98 Add a release check that rebuilds the source tarball with every feature Aidan Garske 2026-09-14 14:09:25 -0700
a89169ef05 Include SPDM, PQC, test and CMake files in the source distribution Aidan Garske 2026-09-14 12:29:53 -0700
f32bf3d3aa

Merge pull request #590 from aidangarske/release-v4.2.0 David Garske 2026-09-14 11:48:13 -0700
2b489b66da Bump version to v4.2.0 and add the 4.2.0 ChangeLog Aidan Garske 2026-09-07 09:24:30 -0700
2a726188ea

Merge pull request #608 from aidangarske/fenrir-fixes-14014-14015-14068-14072-14073-14074-14087 David Garske 2026-09-14 10:19:12 -0700
9d4b182887 F-14074 - Bind the full keyed-hash secret into the public unique value Aidan Garske 2026-09-14 10:00:49 -0700
2a8c1e2e2b F-14073 - Reject policy session auth for empty authPolicy entities Aidan Garske 2026-09-14 10:00:48 -0700
e61b751dd0 F-14072 - Reject Rewrap on a truncated duplicate parameter Aidan Garske 2026-09-14 10:00:47 -0700
b543f546a2 F-14087 - Clear sensitive request bytes from the shared command buffer Aidan Garske 2026-09-14 10:00:46 -0700
0fb80e09ac F-14015 - Fail TPM2_ParsePublic on packet overflow Aidan Garske 2026-09-14 10:00:30 -0700
a84cb5f31f F-14014 - Normalize a granted TIS locality to TPM_RC_SUCCESS Aidan Garske 2026-09-14 10:00:29 -0700
af8141c9d1 Drop unused libc bindings and C comments from the Rust wrapper FFI Aidan Garske 2026-09-10 09:32:59 -0700
91291d7a37 Build wolfSSL with RSA keygen and raw padding for the Rust fwTPM tests Aidan Garske 2026-09-10 08:44:07 -0700
c17238363d Add official wolftpm Rust wrapper crate Aidan Garske 2026-09-09 09:57:01 -0700
498a8e103a

Merge pull request #606 from dgarske/pqc_no_wolfcrypt_build Aidan Garske 2026-09-11 12:35:54 -0700
6908d34f57

Merge pull request #605 from aidangarske/coverity-913526-fwtpm-name-deadcode David Garske 2026-09-11 11:28:48 -0700
01aef89af0 Fix --enable-pqc build with --disable-wolfcrypt David Garske 2026-09-11 11:14:06 -0700
a2c3103e6e

Merge pull request #604 from aidangarske/fenrir-fixes-9172-13499 David Garske 2026-09-11 09:31:34 -0700
b571dfba5f Guard fwTPM public name computation on buffer allocation success Aidan Garske 2026-09-11 09:17:49 -0700
4ff1972737

Merge pull request #603 from aidangarske/codeql-46-unseal-permissions David Garske 2026-09-10 16:13:34 -0700
1d8ea0cfd2 Advance SPDM receive sequence after auth and harden size checks Aidan Garske 2026-09-10 14:05:48 -0700
58d0fa65fb F-9194 - Zeroize the command auth cache on every process command exit Aidan Garske 2026-09-10 11:43:52 -0700
c33c5036e2 F-11933 - Skip the authorization area in no-auth-handle session commands Aidan Garske 2026-09-10 11:41:18 -0700
c06f2c2cb8 F-13499 - Run the PolicyTemplate compare without short-circuiting on size Aidan Garske 2026-09-10 11:38:30 -0700
6ecdd4ba8b F-13498 - Run policy assertion compares without short-circuiting on size Aidan Garske 2026-09-10 11:38:03 -0700
7ce7a67919 F-12713 - Reject malformed PCR_Read selection counts and sizes Aidan Garske 2026-09-10 11:36:44 -0700
e15f515b66 F-13529 - Guard the EncryptDecrypt input buffer against a NULL allocation Aidan Garske 2026-09-10 11:35:36 -0700
d679f5bec5 F-13530 - Guard the encrypted salt zeroization against a NULL buffer Aidan Garske 2026-09-10 11:35:17 -0700
022fe8409d F-13531 - Guard the object name marshalling on a successful allocation Aidan Garske 2026-09-10 11:34:41 -0700
ed95d45f64 F-11916 - Use a constant-time compare for the primary key cache lookup Aidan Garske 2026-09-10 11:34:25 -0700
651a35f2a5 F-12755 - Zeroize the session start nonce structures on all exits Aidan Garske 2026-09-10 11:31:54 -0700
facc55c239 F-9193 - Assert the TIS FIFO can hold the maximum command response Aidan Garske 2026-09-10 11:29:52 -0700
7f02facf89 F-12707 - Clean up wolfCrypt only when its init succeeded Aidan Garske 2026-09-10 11:29:28 -0700
efa68e4acf F-11932 - Zeroize the hierarchy authorization stack buffer Aidan Garske 2026-09-10 11:28:13 -0700
36a549d773 F-11931 - Zeroize the PCR authorization buffer before freeing Aidan Garske 2026-09-10 11:27:54 -0700
b8615b3504 F-11930 - Zeroize the NV save marshal buffer before grow frees Aidan Garske 2026-09-10 11:27:12 -0700
f53b7ecf65 F-10824 - Zeroize the NV journal load buffer before freeing Aidan Garske 2026-09-10 11:26:13 -0700
b12c95e64a F-11929 - Zeroize the append-only NV replay buffer before freeing Aidan Garske 2026-09-10 11:25:53 -0700
ae3581982e F-13453 - Preserve an allocation failure before generating the context IV Aidan Garske 2026-09-10 11:24:51 -0700
55135d1cd2 F-13452 - Free the wrap HMAC only after it is initialized Aidan Garske 2026-09-10 11:24:40 -0700
ef6e19e25b F-11934 - Advance the SPDM receive sequence only after authentication Aidan Garske 2026-09-10 11:22:28 -0700
60fd8ae1d2 F-9185 - Fail MCTP encryption once the sequence number exceeds 16 bits Aidan Garske 2026-09-10 11:22:08 -0700
3ac5feb984 F-13467 - Validate declared PSK exchange field lengths against the request Aidan Garske 2026-09-10 11:19:58 -0700
550277ef13 F-9177 - Reset the responder only after the end session ack is encrypted Aidan Garske 2026-09-10 11:19:23 -0700
19b33fb29f F-9176 - Provision the responder PSK only after the inner set succeeds Aidan Garske 2026-09-10 11:19:03 -0700
c8ce45ebdf F-10760 - Size the key exchange buffer check to the encoded request Aidan Garske 2026-09-10 11:18:30 -0700
43f34846a5 F-10762 - Reject an oversized vendor payload that wraps the length field Aidan Garske 2026-09-10 11:17:08 -0700
e86c7573d0 F-9179 - Reject a NULL vendor payload with a nonzero size Aidan Garske 2026-09-10 11:16:55 -0700
38850cee43 F-11891 - Correct the SPDM disconnect key wipe comment Aidan Garske 2026-09-10 11:16:28 -0700
1be467d96b F-11909 - Reject an empty Nuvoton GET_STATUS response Aidan Garske 2026-09-10 11:16:28 -0700
cedcd8e592 F-11908 - Reject truncated Nations GET_STATUS payloads Aidan Garske 2026-09-10 11:16:28 -0700
4b76ba64a0 F-13532 - Bound the advanced IO SPI size to the frame buffer Aidan Garske 2026-09-10 11:14:43 -0700
03446a7169 F-12753 - Wipe the hex render buffer in the Espressif debug helper Aidan Garske 2026-09-10 11:13:54 -0700
0d3f2f756a F-13463 - Clear ECC r and s on all policy signing paths Aidan Garske 2026-09-10 11:13:54 -0700
3adb0f5e4a F-13457 - Return an error for incomplete firmware update arguments Aidan Garske 2026-09-10 11:13:54 -0700
27d1bf5f9f F-10763 - Return an error on a GPIO config vendor mismatch Aidan Garske 2026-09-10 11:12:59 -0700
7d4d39780d F-13461 - Return success from the capabilities example handle listing Aidan Garske 2026-09-10 11:12:25 -0700
94963636ac F-11901 - Fail make credential when the AK name cannot be read Aidan Garske 2026-09-10 11:12:25 -0700
e3cbe8ee1d F-11903 - Reject a negative get random length argument Aidan Garske 2026-09-10 11:12:25 -0700
b58bee5952 F-9182 - Free PKCS7 state on error paths in the sign verify examples Aidan Garske 2026-09-10 11:10:02 -0700
c425242730 F-9180 - Mask to the format-one field when checking hash bench errors Aidan Garske 2026-09-10 11:07:18 -0700
995b0879bc F-9175 - Return the flush result for an explicit handle Aidan Garske 2026-09-10 11:06:46 -0700
7792efb8ec F-9174 - Unload the TPM hash sequence object on failure paths Aidan Garske 2026-09-10 11:06:20 -0700
91326022d0 F-9173 - Return an error status from pcr policy argument validation Aidan Garske 2026-09-10 11:06:02 -0700
319d689108 F-9172 - Use XSTRNCMP to parse the -digest option in pcr policy Aidan Garske 2026-09-10 11:05:35 -0700
863f0f900b Restrict unsealed output file permissions Aidan Garske 2026-09-10 10:20:32 -0700
338f56fedc

Merge pull request #598 from aidangarske/examples-fixes-11902 David Garske 2026-09-10 10:42:33 -0700
5f3a6af5af

Merge pull request #595 from aidangarske/coverity-913517-tainted-child-blobs David Garske 2026-09-10 10:42:16 -0700
0df6f5253a Fix TLS and no-wolfCrypt CI failures Aidan Garske 2026-09-10 09:22:04 -0700
08595ac392

Merge pull request #596 from aidangarske/fwtpm-fixes-12728 David Garske 2026-09-09 20:39:57 -0700
2f4b959ebb F-13528 - Honor peer certificate verification result in TLS examples Aidan Garske 2026-09-08 11:31:15 -0700
b0e882da46

Merge pull request #600 from aidangarske/tpm2-core-fixes-12758 David Garske 2026-09-09 15:07:38 -0700
ed48b8dd23

Merge pull request #597 from aidangarske/tpm2-core-fixes-11899 David Garske 2026-09-09 13:20:57 -0700
d311c769a7

Merge pull request #599 from aidangarske/hal-spdm-fixes-11910 David Garske 2026-09-09 13:20:45 -0700
1721aa66b8 F-13537 - Reject malformed CreatePrimary hierarchy selectors with TPM_RC_VALUE Aidan Garske 2026-09-08 11:31:59 -0700
4c0ac7e9c6 F-13462 - Clear only initialized big integers on CRT error paths Aidan Garske 2026-09-08 11:27:02 -0700
092fadd91e F-13451 - Check buffer allocation before marshalling wrapped sensitive Aidan Garske 2026-09-08 11:22:00 -0700
9931f071fa F-13450 - Check buffer allocation before marshalling object name Aidan Garske 2026-09-08 11:21:24 -0700
bc33d44169 Bound fwTPM child blob sizes before copying from the response Aidan Garske 2026-09-08 17:29:54 -0700
c9e49e03dd F-12754 - Zeroize hash context and buffer in TPM2_HashNvPublic Aidan Garske 2026-09-08 12:53:14 -0700
1305585540 F-10837 - Reject truncated public area when computing an object Name Aidan Garske 2026-09-08 12:52:32 -0700
3d31a932bf F-10816 - Size PCR selection storage and marshalling for PCR_SELECT_MAX Aidan Garske 2026-09-08 12:50:09 -0700
3f1baaee9f F-10811 - Retire one-shot sessions after a verified response Aidan Garske 2026-09-08 12:48:07 -0700
5e20f44d00 F-10810 - Accept exact-fit buffers in TPM2_AppendPublic Aidan Garske 2026-09-08 12:47:07 -0700