Kapil Gupta
3677348bd8
fix(esp_wifi): Drop broadcast fragmented frames
2026-06-22 21:13:28 +08:00
Kapil Gupta
e15821aca2
fix(mbedtls): Fix cached Rinv size mismatch under private exponent blinding
...
Prevent signature verification failures on targets that do not round hardware words
to 16-word boundaries (e.g. ESP32-S3, ESP32-C6, and ESP32-P4), where exponent blinding
can cause `num_words` to vary between calls, leading to reuse of an incorrectly sized
cached `Rinv`.
2026-06-22 09:00:45 +05:30
Kapil Gupta
e8b60c7e2e
fix(mbedtls): Enable hardware CRT for RSA-4096 via base reduction
...
Perform modulo reduction on the base before size checks to allow RSA-4096
CRT (2048-bit exponentiations) to use the hardware accelerator instead of
falling back to software. Fix input validation, negative zero sign issues,
and early memory cleanup paths in esp_mpi_exp_mod()
2026-06-22 09:00:41 +05:30
Kapil Gupta
4459a96ffc
fix(esp_wifi): Fixed some issues in esp_supplicant code
2026-06-17 09:52:53 +05:30
Kapil Gupta
6c1ea60b28
fix(esp_wifi): Redesigned eloop code and extend UTs
2026-06-17 09:47:19 +05:30
Kapil Gupta
0268c8ee50
fix(esp_wifi): Correct igtk key installation in ft
2026-06-03 08:56:33 +05:30
Kapil Gupta
c62143a9a3
fix(esp_wifi): Allow M1 in pmk caching case
2026-05-29 11:14:26 +05:30
Kapil Gupta
71bbd3cf4d
fix(roaming): prevent timeout payload double-free on deinit
...
Track timeout user_data before registration, untrack on register failure
2026-05-20 19:12:45 +05:30
Kapil Gupta
f4a4b9aa35
fix(esp_wifi): Fixed some issues in roaming app found using static analysis
2026-05-20 19:12:37 +05:30
Kapil Gupta
2c3440481d
fix(esp_wifi): Execute DPP event handlers in eloop context
2026-04-30 12:36:01 +05:30
Kapil Gupta
cbd9468904
ci(wpa_supplicant): Add UT for supplicant crypto
2026-04-27 16:17:55 +05:30
Kapil Gupta
4637170800
fix(esp_wifi): Optimize crypto operations for SAE
...
- Montgomery multiplication fast path for P-256 mulmod
- Jacobi symbol for legendre (replacing exp_mod)
- Software Jacobian point multiplication for MPI-only chips
- ECC hardware acceleration for supported chips
- ECDH fast path for P-256
2026-04-27 16:12:17 +05:30
Kapil Gupta
5d46920382
ci(esp_wifi): skip timing test if hw not available
2026-04-25 12:46:01 +05:30
Kapil Gupta
db025d7015
fix(wpa_supplicant): Add optimizations in fastpsk
2026-04-25 12:45:31 +05:30
Kapil Gupta
34e3d1dc3e
fix(esp_wifi): clean up fragment rx flow
2026-04-24 20:45:01 +08:00
Kapil Gupta
0f14b2b069
fix(esp_wifi): Address review comments on MR
2026-04-24 20:45:01 +08:00
Kapil Gupta
01a8e6ec43
fix(esp_wifi): Disconnect before sending WPS success event
2026-04-24 20:45:01 +08:00
Kapil Gupta
94095f7fd9
fix(esp_wifi): Address some issues in esp_supplicant WPS states
2026-04-24 20:45:01 +08:00
Kapil Gupta
e5b3432cc7
fix(wps): harden enrollee WSC fragment handling
2026-04-24 20:45:01 +08:00
Kapil Gupta
9669403338
fix(esp_wifi): fail if ptk derivation fails
2026-04-23 18:33:13 +08:00
Kapil Gupta
dd2d40bf3d
fix(esp_wifi): Skip allocation of new buffers during EAP processing
2026-04-23 18:32:28 +08:00
Kapil Gupta
c7758cff5f
fix(esp_wifi): Fix min scan time for btm scan
2026-03-10 11:05:46 +05:30
Kapil Gupta
3e0d67d416
fix(esp_wifi): Add alt snonce verification in softAP
2026-03-04 11:34:33 +05:30
Kapil Gupta
35187dea1e
fix(esp_wifi): Fix bug where wps_finish is called recursively
2026-02-05 09:40:39 +05:30
Kapil Gupta
e8dbfee7de
docs: update vulnerabilities guide to mention CVE-2026-25532
2026-02-04 14:30:51 +05:30
Kapil Gupta
e64e900be8
apply suggestion
2026-01-14 17:24:06 +05:30
Kapil Gupta
5059f574d0
fix(esp_wifi): Validate dpp auth instance before using it
2026-01-14 17:23:49 +05:30
Kapil Gupta
c9b5b40bc1
fix(esp_wifi): Change some defaults in roaming app
...
- Closes https://github.com/espressif/esp-idf/issues/17687
2026-01-08 14:41:26 +05:30
Kapil Gupta
1cea05a416
fix(esp_wifi): Use correct variable for neighbour report
2026-01-08 14:40:36 +05:30
Kapil Gupta
9835845d98
fix(esp_wifi): Check conditional compilation for roaming app features
2026-01-08 14:40:36 +05:30
Kapil Gupta
4347dc6ff2
fix(esp_wifi): Cancel roaming_app_periodic_scan_internal_handler correctly
2026-01-08 14:40:36 +05:30
Kapil Gupta
cf2c1738c0
fix(esp_wifi): Add some fixes in roaming app
2026-01-08 14:40:36 +05:30
Kapil Gupta
0ef0d068db
fix(esp_wifi): Address some review comments and issues
2026-01-08 14:40:35 +05:30
Kapil Gupta
38302784c7
feat(roaming): ignore WPA2-only APs on transition disable
...
This commit introduces a new feature to the roaming logic. If the
currently connected AP has the 'transition disable' bit set in its
RSN IE, the roaming logic will now ignore any scanned APs that only
support WPA2-PSK. This prevents a security downgrade when roaming in a
mixed WPA2/WPA3 environment.
A new Kconfig option, CONFIG_ESP_WIFI_IGNORE_WPA2_ONLY_ON_TRANSITION_DISABLE,
has been added to control this feature. It is disabled by default.
2026-01-08 14:40:35 +05:30
Kapil Gupta
be1515baf3
fix(roaming_app): resolve issues in blacklisting logic
...
This commit addresses several issues in the BSSID blacklisting
feature of the roaming application:
- Merged duplicate functions into a single,
unified function, resolving a compilation error.
- Corrected and
to properly access the member of the
struct, fixing invalid memory access.
- Introduced in Kconfig to enable
the manual blacklisting feature and made auto-blacklisting
dependent on it.
- Updated to use the
correct BSSID from .
- Optimized the removal of expired blacklist entries by using
for better efficiency.
2026-01-08 14:40:35 +05:30
Kapil Gupta
91ba3b2d49
fix(esp_wifi): Add blacklist logic in roaming app
2026-01-08 14:40:35 +05:30
Kapil Gupta
b209fae993
fix(esp_wifi): Fix invalid memory accesses in supplicant code
2025-12-30 10:24:12 +08:00
Kapil Gupta
bdd1b0ca20
fix(mbedtls): Addressed comments on PR15679
2025-10-27 15:41:21 +08:00
Kapil Gupta
f63e81c044
refactor(esp_wifi): Remove WPS task code
2025-10-16 11:12:22 +08:00
Kapil Gupta
7c29420e45
fix(esp_wifi): skip call to esp_fast_psk() when hardware SHA is not supported
2025-10-13 11:27:57 +05:30
Kapil Gupta
63312aa64d
fix(esp_wifi): Add depenedency of 192 bit config on wifi enterprise
...
Closes https://github.com/espressif/esp-idf/issues/17567
2025-09-21 12:30:34 +05:30
Kapil Gupta
3b21679be9
fix(esp_wifi): Address review comments
2025-07-22 14:53:13 +08:00
Kapil Gupta
f794af38c2
feat(esp_wifi): Add support to limit EAP methods
...
Added support to limit EAP method supported by device based on
user configuration.
2025-07-22 14:53:13 +08:00
Kapil Gupta
97888e2152
fix (esp_wifi): Set default akm as eap for non AKM APs
2025-07-04 09:21:45 +05:30
Kapil Gupta
8588446859
fix(wpa_supplicant): Delay sending of EAP_START for EAP auth
2025-07-04 09:21:14 +05:30
Kapil Gupta
f3579cee33
fix(esp_wifi): Set default ap mgmt cipher
2025-06-25 17:47:50 +08:00
Kapil Gupta
9c61e31be4
fix(esp_wifi): Make sure old DPP listen is cancelled
2025-06-17 21:33:18 +08:00
Kapil Gupta
f0d7baae5e
fix(esp_wifi): Modify check for dpp event handlers
2025-06-17 21:31:56 +08:00
Kapil Gupta
9189406b05
change(esp_wifi): Update dpp enrollee example to use updated events
2025-06-17 21:31:46 +08:00
Kapil Gupta
30c24b2f31
fix(esp_wifi): Update dpp code to send events in freeRTOS context
2025-06-17 21:31:38 +08:00
Kapil Gupta
23bc0a51fb
fix(esp_wifi): Fixed DPP concurrency issue
2025-06-17 21:31:27 +08:00
Kapil Gupta
3b596bb602
fix(esp_wifi): Fixed static analyzer issues
2025-05-27 13:37:13 +05:30
Kapil Gupta
45fed1d225
fix(esp_wifi): Disble IP renew skip by default
2025-05-27 13:37:13 +05:30
Kapil Gupta
1f4fbd060c
Merge branch 'fix/rrm_config_set_v5.5' into 'release/v5.5'
...
Set rrm config condition in case RRM monitoring is enabled
See merge request espressif/esp-idf!39280
2025-05-20 15:34:42 +05:30
Kapil Gupta
cf0166d196
fix(esp_wifi): Use supplicant's internal SHA1 if not available from IDF
2025-04-21 13:38:29 +05:30
Kapil Gupta
b33394907b
Merge branch 'bugfix/ssc_compilation_wps' into 'master'
...
bugfix(wpa_supplicant): Fix build errors when Supplicant logs are enabled
Closes WIFIBUG-1141
See merge request espressif/esp-idf!38481
2025-04-18 07:14:41 +08:00
Kapil Gupta
9c75d7961c
Merge branch 'bugfix/h2e_porting_improvement' into 'master'
...
change(esp_wifi): Improve handling group parameter A in H2E
Closes IDFGH-14994 and IDFGH-14995
Closes https://github.com/espressif/esp-idf/issues/15691
Closes https://github.com/espressif/esp-idf/pull/15692
See merge request espressif/esp-idf!38319
2025-04-15 18:36:12 +08:00
Kapil Gupta
6e1b2aa23f
ci(esp_wifi): Extend eloop test to verify wifi deinit properly
2025-04-14 21:14:23 +05:30
Kapil Gupta
859d18a123
fix(esp_wifi): Fixed some concurrency issues in eloop deinit
2025-04-14 21:14:17 +05:30
Kapil Gupta
bfc86f6094
fix(esp_wifi): Removal of task posting code and use pptask instead
2025-04-14 20:30:53 +05:30
Kapil Gupta
a96d680fc5
fix(esp_wifi): Add various DPP fixes observed during testing
2025-04-14 20:30:53 +05:30
Kapil Gupta
4dac5482e3
fix(esp_wifi): Add eloop blocking call API for public APIs
2025-04-14 20:30:47 +05:30
Kapil Gupta
f025008d4e
ci(esp_wifi): Add h2e testcase
2025-04-09 11:17:00 +05:30
Kapil Gupta
6b5ac56b9d
Merge branch 'feat/eap_domain_check' into 'master'
...
esp_wifi: Add EAP domain validation support
Closes IDFGH-14822
See merge request espressif/esp-idf!37668
2025-04-08 20:23:06 +08:00
Kapil Gupta
7f2814a0da
fix(esp_wifi): Flush PMK when EAP config is changed
2025-04-08 12:45:00 +05:30
Kapil Gupta
0b20847e2d
fix(esp_wifi): Increase WPS timeout
2025-04-08 00:23:52 +08:00
Kapil Gupta
bbf7f9b2a7
fix(esp_wifi): Code cleanup for PR#15550 PR#15551
...
Closes https://github.com/espressif/esp-idf/pull/15550
Closes https://github.com/espressif/esp-idf/pull/15551
2025-04-07 19:38:11 +05:30
Kapil Gupta
fb75c854ce
Merge branch 'bugfix/pmksa_null_check' into 'master'
...
Draft: fix(wifi): Fix crash when set config is called with changed password
Closes IDFGH-14863 and IDFGH-14926
Closes https://github.com/espressif/esp-idf/issues/15635
See merge request espressif/esp-idf!37840
2025-03-24 21:25:34 +08:00
Kapil Gupta
7ff63ac9af
Merge branch 'feature/okc_support' into 'master'
...
feat(wpa_supplicant): Add support for OKC
Closes WIFIBUG-841
See merge request espressif/esp-idf!34873
2025-03-20 16:47:33 +08:00
Kapil Gupta
1a5b2a267b
fix(esp_wifi): Add alternate SHA1 APIs in WiFi
...
Add alternate SHA1 APIs to handle cases when
`CONFIG_MBEDTLS_SHA1_C` is disabled.
2025-03-19 15:11:10 +05:30
Kapil Gupta
ac0eaa0034
ci(wifi): Add builds for FT, RRM and WNM configs
2025-03-19 12:07:08 +08:00
Kapil Gupta
a10635e389
fix(wifi): Fixed compilation error when 11R is enabled without 11KV
...
Closes https://github.com/espressif/esp-idf/issues/15539
2025-03-19 12:07:08 +08:00
Kapil Gupta
3d1ea229d5
Merge branch 'bugfix/wps_reconnect_failure' into 'master'
...
fix(wpa_suppplicant): Fix for issue in wps reconnection
Closes WIFI-6810, WIFIBUG-1086, and WIFIBUG-1067
See merge request espressif/esp-idf!37320
2025-03-10 22:26:42 +08:00
Kapil Gupta
3c7ca8f2c9
Merge branch 'bugfix/11kv_config_break' into 'master'
...
fix(esp_wifi): Correctly break 11kv config into wnm and rrm configs
Closes WIFIBUG-1065
See merge request espressif/esp-idf!37451
2025-03-05 18:28:26 +08:00
Kapil Gupta
4cdd5087ef
Merge branch 'feature/github_pull_15073' into 'master'
...
feat(wpa_supplicant): Add optimized PSK implementation
See merge request espressif/esp-idf!36229
2025-03-05 16:28:16 +08:00
Kapil Gupta
1ee5551004
fix(esp_wifi): Prevent flushing of FT data mistakenly
2025-03-05 12:24:18 +05:30
Kapil Gupta
4f127f57e2
fix(esp_wifi): Fix some compilation errors in roaming app
2025-03-05 12:24:15 +05:30
Kapil Gupta
c058048085
fix(esp_wifi): Correctly break 11kv config into wnm and rrm configs
2025-03-05 12:24:11 +05:30
Kapil Gupta
a8e5fd4b86
fix(ci): Update UT to verify fast psk calculations
...
Also update some comments
2025-03-03 14:16:32 +05:30
Kapil Gupta
e02e6fe5ca
fix(esp_wifi): Add some comments in github PR 15073
...
Closes https://github.com/espressif/esp-idf/pull/15073
2025-03-03 14:04:44 +05:30
Kapil Gupta
b5eadb56e7
fix(esp_wifi): Fix stack corruption in wpa3 task
2025-02-12 23:14:53 +05:30
Kapil Gupta
534fce5fbf
fix(esp_wifi): fixed Stack corruption in DPP task
2025-02-12 21:35:11 +05:30
Kapil Gupta
e48122f4a8
fix(esp_wifi): fixed Stack corruption in WPS processing
2025-02-12 21:34:53 +05:30
Kapil Gupta
4d83458e6b
fix(esp_wifi): Fixed memory corruption in wifi enterprise
...
Closes https://github.com/espressif/esp-idf/issues/15370
2025-02-12 20:37:12 +05:30
Kapil Gupta
7bb6c67efe
Merge branch 'bugfix/wps_scan_freq' into 'master'
...
fix(esp_wifi): Reduce scan frequency in WPS
See merge request espressif/esp-idf!35866
2025-02-10 16:46:20 +08:00
Kapil Gupta
7a94d450e0
Merge branch 'bugfix/analyzer_issues_supplicant' into 'master'
...
fix(esp_wifi): fix some analyzer issues
Closes IDFGH-14306, IDFGH-14307, and IDFGH-14308
See merge request espressif/esp-idf!36100
2025-01-21 10:47:51 +08:00
Kapil Gupta
897e487f89
Merge branch 'fix/fix_off_wpa3_build_issue' into 'master'
...
fix(wifi): fix build issue when disable wpa3 sae
Closes WIFIBUG-1014 and IDFGH-14420
Closes https://github.com/espressif/esp-idf/issues/15200
See merge request espressif/esp-idf!36297
2025-01-14 16:14:53 +08:00
Kapil Gupta
a95406ad90
fix(esp_wifi): Add review comments and some cleanup
2025-01-14 14:35:00 +08:00
Kapil Gupta
22897aaf5b
fix(esp_wifi): fix some analyzer issues
...
Closes https://github.com/espressif/esp-idf/issues/15097
Closes https://github.com/espressif/esp-idf/issues/15098
Closes https://github.com/espressif/esp-idf/issues/15099
2025-01-14 14:35:00 +08:00
Kapil Gupta
80132653c7
fix(esp_wifi): Address some review comments
2025-01-03 16:47:00 +05:30
Kapil Gupta
fbe9fcd7bf
Merge branch 'bugfix/roaming_app_issues' into 'master'
...
fix(wifi): Fix some issues observed in roaming app
Closes WIFIBUG-904, WIFIBUG-881, and WIFIBUG-905
See merge request espressif/esp-idf!34519
2025-01-03 12:47:18 +08:00
Kapil Gupta
afeefc9e1e
Merge branch 'bugfix/coverity_issue_supplicant' into 'master'
...
esp_wifi: Fix coverity issues
Closes IDF-11716 and IDF-11751
See merge request espressif/esp-idf!35865
2025-01-02 18:03:34 +08:00
Kapil Gupta
b3b1c19ed3
fix(esp_wifi): Enable EAP workarounds by default
...
Enabling this will make sure our behavior is same as upstream
wpa_supplicant.
2025-01-02 15:05:12 +08:00
Kapil Gupta
5633f2f169
fix(esp_wifi): Removed unnecessary handlers to cleanup
2025-01-02 11:52:15 +05:30
Kapil Gupta
de28ee09d6
fix(esp_wifi): Roaming app, sync api naming
2025-01-02 11:47:18 +05:30
Kapil Gupta
2577769813
fix(esp_wifi): Some more cleanup for roaming app
2025-01-02 11:47:18 +05:30
Kapil Gupta
7028b8f573
fix(esp_wifi): moving around roaming app code a bit
2025-01-02 11:47:18 +05:30
Kapil Gupta
f61847b4b4
fix(roaming_app): Add get set config params for the app
2025-01-02 11:47:18 +05:30
Kapil Gupta
e028cc6952
fix(wifi): Provide a config option to skip IP renew during roam
2025-01-02 11:47:18 +05:30
Kapil Gupta
d2fde65545
fix(esp_wifi): Set minimum scan time to 30ms in roaming app
2025-01-02 11:47:18 +05:30