Security Hardening and TCG v185 compliance by aidangarske · Pull Request #496 · wolfSSL/wolfTPM

F-3503 - https://fenrir.wolfssl.com/finding/3503 - fwtpm: emit TPM_ST_ATTEST_NV_DIGEST when NV_Certify size and offset are both zero

aidangarske

committed

F-3493 - https://fenrir.wolfssl.com/finding/3493 - examples/management/flush: fix copy-paste so HMAC sessions loop walks 0x02000000-0x02000003

aidangarske

committed

F-3494 - https://fenrir.wolfssl.com/finding/3494 - examples/pkcs7: reset offset and fix loop continuation so detached PKCS7 body actually gets written

aidangarske

committed

F-3496 - https://fenrir.wolfssl.com/finding/3496 - wolfTPM2_StartSession: enable parameter encryption attrs for salted sessions, not only bind+salt

aidangarske

committed

F-3272 - https://fenrir.wolfssl.com/finding/3272 - fwtpm: FwParseAttestParams consumes ECDAA count field per Part 2 §11.2.1.5

aidangarske

committed

F-3273 - https://fenrir.wolfssl.com/finding/3273 - fwtpm: FwCmd_Sign consumes ECDAA count field per Part 2 §11.2.1.5

aidangarske

committed

F-3274 - https://fenrir.wolfssl.com/finding/3274 - fwtpm: FwCmd_CertifyCreation consumes ECDAA count field per Part 2 Sec. 11.2.1.5

aidangarske

committed

F-3502 - https://fenrir.wolfssl.com/finding/3502 - wolftpm: TPM2_Packet_ParseAttest decodes TPM_ST_ATTEST_NV_DIGEST as TPMS_NV_DIGEST_CERTIFY_INFO

aidangarske

committed

F-3504 - https://fenrir.wolfssl.com/finding/3504 - wolftpm: map wolfCrypt Brainpool curves to TPM_ECC_BP_*_R1 (0x003X), not Barreto-Naehrig BN_P256

aidangarske

committed

F-3495 - https://fenrir.wolfssl.com/finding/3495 - examples/keygen: guard primary unload against NULL on early init failure

aidangarske

committed

F-3497 - https://fenrir.wolfssl.com/finding/3497 - wolfTPM2_LoadEccPublicKey_ex: caller-controlled scheme, hashAlg, and objectAttributes for ECDH peer keys

aidangarske

committed

F-3498 - https://fenrir.wolfssl.com/finding/3498 - wolfTPM2_RsaEncrypt/Decrypt return BUFFER_E for oversized input instead of silently truncating

aidangarske

committed

F-3499 - https://fenrir.wolfssl.com/finding/3499 - wolfTPM2_SignHashScheme/VerifyHashTicket: reject mismatched digest size for RSA, gate ECDSA

aidangarske

committed

F-3500 - https://fenrir.wolfssl.com/finding/3500 - wolfTPM2_NVCreateAuthPolicy: derive nameAlg from authPolicySz so SHA-384/SHA-512 policies are satisfiable

aidangarske

committed

F-3508 - https://fenrir.wolfssl.com/finding/3508 - wolftpm: TPM2_Packet_ParsePublic resyncs to outer pub->size to prevent inner-size desync drift

aidangarske

committed

F-3509 - https://fenrir.wolfssl.com/finding/3509 - wolftpm: TPM2_Packet_ParsePoint resyncs to outer point->size to prevent inner-size desync drift

aidangarske

committed

F-3505 - https://fenrir.wolfssl.com/finding/3505 - examples/attestation/activate_credential: guard primary unload against NULL on early init failure

aidangarske

committed

F-3506 - https://fenrir.wolfssl.com/finding/3506 - examples/keygen/keyload: guard primary unload against NULL on early init failure

aidangarske

committed

F-3511 - https://fenrir.wolfssl.com/finding/3511 - wolfTPM2_RsaEncrypt: scrub plaintext copy in rsaEncIn on every exit path

aidangarske

committed

F-3501 - https://fenrir.wolfssl.com/finding/3501 - wolfTPM2_GetKeyTemplate_KeyedHash: scheme defaults to TPM_ALG_NULL when neither sign nor decrypt is requested

aidangarske

committed

F-3510 - https://fenrir.wolfssl.com/finding/3510 - wolftpm: TPM2_Packet_AppendSignature/ParseSignature explicitly handles TPM_ALG_NULL and warns on unrecognized sigAlg

aidangarske

committed

F-3507 - https://fenrir.wolfssl.com/finding/3507 - examples/attestation/activate_credential: zero-init tpmSession so early-failure cleanup is safe

aidangarske

committed

Skoll review fixes

aidangarske

committed

F-3274 follow-up - tests/fwtpm_unit_tests: gate ECC sign helper for FWTPM_NO_NV builds too

aidangarske

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Security Hardening and TCG v185 compliance #496

Security Hardening and TCG v185 compliance #496
dgarske merged 24 commits into
wolfSSL:masterfrom
aidangarske:fenrir-fixes-10

Commits on Apr 28, 2026

F-3503 - https://fenrir.wolfssl.com/finding/3503 - fwtpm: emit TPM_ST_ATTEST_NV_DIGEST when NV_Certify size and offset are both zero

F-3493 - https://fenrir.wolfssl.com/finding/3493 - examples/management/flush: fix copy-paste so HMAC sessions loop walks 0x02000000-0x02000003

F-3494 - https://fenrir.wolfssl.com/finding/3494 - examples/pkcs7: reset offset and fix loop continuation so detached PKCS7 body actually gets written

F-3496 - https://fenrir.wolfssl.com/finding/3496 - wolfTPM2_StartSession: enable parameter encryption attrs for salted sessions, not only bind+salt

F-3272 - https://fenrir.wolfssl.com/finding/3272 - fwtpm: FwParseAttestParams consumes ECDAA count field per Part 2 §11.2.1.5

F-3273 - https://fenrir.wolfssl.com/finding/3273 - fwtpm: FwCmd_Sign consumes ECDAA count field per Part 2 §11.2.1.5

F-3274 - https://fenrir.wolfssl.com/finding/3274 - fwtpm: FwCmd_CertifyCreation consumes ECDAA count field per Part 2 Sec. 11.2.1.5

F-3502 - https://fenrir.wolfssl.com/finding/3502 - wolftpm: TPM2_Packet_ParseAttest decodes TPM_ST_ATTEST_NV_DIGEST as TPMS_NV_DIGEST_CERTIFY_INFO

F-3504 - https://fenrir.wolfssl.com/finding/3504 - wolftpm: map wolfCrypt Brainpool curves to TPM_ECC_BP_*_R1 (0x003X), not Barreto-Naehrig BN_P256

F-3495 - https://fenrir.wolfssl.com/finding/3495 - examples/keygen: guard primary unload against NULL on early init failure

F-3497 - https://fenrir.wolfssl.com/finding/3497 - wolfTPM2_LoadEccPublicKey_ex: caller-controlled scheme, hashAlg, and objectAttributes for ECDH peer keys

F-3498 - https://fenrir.wolfssl.com/finding/3498 - wolfTPM2_RsaEncrypt/Decrypt return BUFFER_E for oversized input instead of silently truncating

F-3499 - https://fenrir.wolfssl.com/finding/3499 - wolfTPM2_SignHashScheme/VerifyHashTicket: reject mismatched digest size for RSA, gate ECDSA

F-3500 - https://fenrir.wolfssl.com/finding/3500 - wolfTPM2_NVCreateAuthPolicy: derive nameAlg from authPolicySz so SHA-384/SHA-512 policies are satisfiable

F-3508 - https://fenrir.wolfssl.com/finding/3508 - wolftpm: TPM2_Packet_ParsePublic resyncs to outer pub->size to prevent inner-size desync drift

F-3509 - https://fenrir.wolfssl.com/finding/3509 - wolftpm: TPM2_Packet_ParsePoint resyncs to outer point->size to prevent inner-size desync drift

F-3505 - https://fenrir.wolfssl.com/finding/3505 - examples/attestation/activate_credential: guard primary unload against NULL on early init failure

F-3506 - https://fenrir.wolfssl.com/finding/3506 - examples/keygen/keyload: guard primary unload against NULL on early init failure

F-3511 - https://fenrir.wolfssl.com/finding/3511 - wolfTPM2_RsaEncrypt: scrub plaintext copy in rsaEncIn on every exit path

F-3501 - https://fenrir.wolfssl.com/finding/3501 - wolfTPM2_GetKeyTemplate_KeyedHash: scheme defaults to TPM_ALG_NULL when neither sign nor decrypt is requested

F-3510 - https://fenrir.wolfssl.com/finding/3510 - wolftpm: TPM2_Packet_AppendSignature/ParseSignature explicitly handles TPM_ALG_NULL and warns on unrecognized sigAlg

F-3507 - https://fenrir.wolfssl.com/finding/3507 - examples/attestation/activate_credential: zero-init tpmSession so early-failure cleanup is safe

Skoll review fixes

F-3274 follow-up - tests/fwtpm_unit_tests: gate ECC sign helper for FWTPM_NO_NV builds too