Skip to content

Fix info field padding, mechanism flags and API docs #231

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Frauschi merged 56 commits into from
Oct 15, 2026
Merged

Fix info field padding, mechanism flags and API docs #231

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
56 commits
Select commit Hold shift + click to select a range
ada5aca
F-4262 - Reject negative stored array lengths when loading token objects
aidangarske Oct 6, 2026
8437bbf
F-5078 - Grow stored array buffers only as data is read
aidangarske Oct 6, 2026
8427035
F-13814 - Set data object lengths only after a successful storage read
aidangarske Oct 6, 2026
651c6c8
F-4264 - Reject stored private key records shorter than the tag
aidangarske Oct 6, 2026
2982321
F-4733 - Bound stored DH public key length to the key buffer
aidangarske Oct 6, 2026
4a951df
F-3641 - Reject stored trust records that are not the trust size
aidangarske Oct 6, 2026
4ab2ef3
F-3404 - Write the encoded TPM key into the caller's buffer
aidangarske Oct 6, 2026
af7c5da
F-8643 - Keep key buffer allocation errors in TPM RSA and ECC encoders
aidangarske Oct 6, 2026
004016c
F-13813 - Release DH and symmetric key data when encoding fails
aidangarske Oct 6, 2026
c240e05
F-3017 - Zeroize encoded private keys when RSA, ECC or ML-DSA encodin…
aidangarske Oct 6, 2026
bb0085e
F-3413 - Zeroize decrypted private key buffers on every decode path
aidangarske Oct 6, 2026
8086644
F-8667 - Scrub symmetric and DH key buffers after a failed decrypt
aidangarske Oct 6, 2026
0d8ae91
Keep the old key record when encoding fails
aidangarske Oct 13, 2026
885ac28
F-10400 - Authenticate stored object policy with the key encryption
aidangarske Oct 7, 2026
80fb604
Take the store lock before publishing the store batch slot
aidangarske Oct 13, 2026
e990c0d
Skip store batch recovery when token storage is disabled
aidangarske Oct 13, 2026
014bbf4
Hold the store batch locks until the token load finishes
aidangarske Oct 13, 2026
e17221d
Record store batch entries by file name
aidangarske Oct 13, 2026
d9ee4f2
Sync staged store files before commit
aidangarske Oct 13, 2026
05872b9
Correct the store batch setup comment
aidangarske Oct 13, 2026
84665b1
Rename WP11_FLAG_UNBOUND to WP11_FLAG_POLICY_EXCLUDED
aidangarske Oct 13, 2026
5ea1e48
Hold the token lock across the SO PIN change store
aidangarske Oct 15, 2026
e1e32f2
Clean up staged store files in the policy test
aidangarske Oct 13, 2026
e79a8d1
Test store failures with undecoded keys
aidangarske Oct 13, 2026
d8d715f
Cache the empty user PIN verdict when loading a token
aidangarske Oct 13, 2026
a5706b8
Test that a stored PIN change needs no logout to take effect
aidangarske Oct 15, 2026
64f8bcd
Tidy store batch comments
aidangarske Oct 13, 2026
c988a2f
Publish SO PIN changes under the token lock
aidangarske Oct 15, 2026
023ba80
F-5763 - Release the replaced operation when a new one is initialized
aidangarske Oct 6, 2026
92b96a5
F-8664 - Release operation state on terminating error paths
aidangarske Oct 6, 2026
6e40e9d
F-11514 - Free buffered AES-GCM data when GCM parameters are reset
aidangarske Oct 6, 2026
63a6306
F-11506 - Free AES and HMAC contexts when key setup fails
aidangarske Oct 6, 2026
a017615
F-12480 - Drop the session reference to a destroyed AES key read at o…
aidangarske Oct 6, 2026
91badc4
F-4071 - Scrub accumulated MAC input before growing or freeing it
aidangarske Oct 6, 2026
e52a716
F-8660 - Release accumulated MAC input when the session operation ends
aidangarske Oct 6, 2026
fbb7c6a
F-8641 - Require an active digest before saving operation state
aidangarske Oct 6, 2026
59d913b
F-5871 - Release the active operation before restoring saved state
aidangarske Oct 6, 2026
d85d878
F-11510 - Validate saved operation state before changing the session
aidangarske Oct 6, 2026
0af972a
F-5870 - Reject key handles when restoring a keyless operation state
aidangarske Oct 6, 2026
3bfe457
F-10394 - Cancel the active operation when Init is called with a NULL…
aidangarske Oct 6, 2026
a0a0715
F-2769 - Blank pad fixed-length info fields
aidangarske Oct 7, 2026
cda47ad
F-6230 - Report the token clock only when a valid UTC time is available
aidangarske Oct 7, 2026
b985c99
F-6053 - Advertise wrap and unwrap only for mechanisms C_WrapKey supp…
aidangarske Oct 7, 2026
d8d206d
F-12477 - Report generic secret key generation sizes in bits
aidangarske Oct 7, 2026
bf8e0b1
F-13248 - Advertise PBKDF2 and PKCS#12 PBE key generation only with HMAC
aidangarske Oct 7, 2026
6708b01
F-8634 - Report C_OpenSession failures instead of returning CKR_OK
aidangarske Oct 7, 2026
5eb1dc9
F-10370 - Document how C_Initialize uses pInitArgs
aidangarske Oct 7, 2026
efc1770
F-10371 - Remove the wrong NULL pulCount return from C_GetMechanismLi…
aidangarske Oct 7, 2026
ea063a1
F-10372 - Document CKR_PIN_LEN_RANGE for C_InitToken PIN length
aidangarske Oct 7, 2026
b000e3a
F-10373 - Document CKR_PIN_LEN_RANGE for C_InitPIN PIN length
aidangarske Oct 7, 2026
3088517
F-10374 - Document CKR_PIN_LEN_RANGE for the C_SetPIN new PIN length
aidangarske Oct 7, 2026
c825ec0
F-9413 - Correct the WP11_Slot_UserLogin return code docs
aidangarske Oct 7, 2026
8895ce1
Require CKA_VALUE_LEN on ECB unwrap only when ambiguous
aidangarske Oct 13, 2026
7a10138
Return CKR_KEY_SIZE_RANGE for unaligned ECB wraps
aidangarske Oct 13, 2026
5d086ab
Refuse an unaligned AES-ECB wrap before encrypting
aidangarske Oct 14, 2026
61ac0c8
Add an AES-ECB unit test build
aidangarske Oct 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/workflows/unit-test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,11 @@ jobs:
with:
config: --enable-singlethreaded

aesecb:
uses: ./.github/workflows/build-workflow.yml
with:
config: --enable-aesecb

tpm:
uses: ./.github/workflows/build-workflow.yml
with:
Expand Down
253 changes: 185 additions & 68 deletions src/crypto.c
View file
Open in desktop

Large diffs are not rendered by default.

Loading
Loading