Repository navigation

Bind stored object policy to the encrypted key data - #229

Merged

Frauschi merged 28 commits into

wolfSSL:masterfrom

aidangarske:fenrir-fixes-10400

Oct 15, 2026

Merged

Bind stored object policy to the encrypted key data#229
Frauschi merged 28 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-10400

Commits on Oct 15, 2026
- F-4262 - Reject negative stored array lengths when loading token objects
  aidangarske
  committed
  ada5aca
- F-5078 - Grow stored array buffers only as data is read
  aidangarske
  committed
  8437bbf
- F-13814 - Set data object lengths only after a successful storage read
  aidangarske
  committed
  8427035
- F-4264 - Reject stored private key records shorter than the tag
  aidangarske
  committed
  651c6c8
- F-4733 - Bound stored DH public key length to the key buffer
  aidangarske
  committed
  2982321
- F-3641 - Reject stored trust records that are not the trust size
  aidangarske
  committed
  4a951df
- F-3404 - Write the encoded TPM key into the caller's buffer
  aidangarske
  committed
  4ab2ef3
- F-8643 - Keep key buffer allocation errors in TPM RSA and ECC encoders
  aidangarske
  committed
  af7c5da
- F-13813 - Release DH and symmetric key data when encoding fails
  aidangarske
  committed
  004016c
- F-3017 - Zeroize encoded private keys when RSA, ECC or ML-DSA encoding fails
  aidangarske
  committed
  c240e05
- F-3413 - Zeroize decrypted private key buffers on every decode path
  aidangarske
  committed
  bb0085e
- F-8667 - Scrub symmetric and DH key buffers after a failed decrypt
  aidangarske
  committed
  8086644
- Keep the old key record when encoding fails
  aidangarske
  committed
  0d8ae91
- F-10400 - Authenticate stored object policy with the key encryption
  aidangarske
  committed
  885ac28
- Take the store lock before publishing the store batch slot
  aidangarske
  committed
  80fb604
- Skip store batch recovery when token storage is disabled
  aidangarske
  committed
  e990c0d
- Hold the store batch locks until the token load finishes
  aidangarske
  committed
  014bbf4
- Record store batch entries by file name
  aidangarske
  committed
  e17221d
- Sync staged store files before commit
  aidangarske
  committed
  d9ee4f2
- Correct the store batch setup comment
  aidangarske
  committed
  05872b9
- Rename WP11_FLAG_UNBOUND to WP11_FLAG_POLICY_EXCLUDED
  aidangarske
  committed
  84665b1
- Hold the token lock across the SO PIN change store
  aidangarske
  committed
  5ea1e48
- Clean up staged store files in the policy test
  aidangarske
  committed
  e1e32f2
- Test store failures with undecoded keys
  aidangarske
  committed
  e79a8d1
- Cache the empty user PIN verdict when loading a token
  aidangarske
  committed
  d8d715f
- Test that a stored PIN change needs no logout to take effect
  aidangarske
  committed
  a5706b8
- Tidy store batch comments
  aidangarske
  committed
  64f8bcd
- Publish SO PIN changes under the token lock
  aidangarske
  committed
  c988a2f

Commits

Commits on Oct 15, 2026