Commit Graph
100 Commits
Author SHA1 Message Date
Kapil Gupta 3677348bd8 fix(esp_wifi): Drop broadcast fragmented frames 2026-06-22 21:13:28 +08:00
Kapil Gupta e15821aca2 fix(mbedtls): Fix cached Rinv size mismatch under private exponent blinding
Prevent signature verification failures on targets that do not round hardware words
to 16-word boundaries (e.g. ESP32-S3, ESP32-C6, and ESP32-P4), where exponent blinding
can cause `num_words` to vary between calls, leading to reuse of an incorrectly sized
cached `Rinv`.
2026-06-22 09:00:45 +05:30
Kapil Gupta e8b60c7e2e fix(mbedtls): Enable hardware CRT for RSA-4096 via base reduction
Perform modulo reduction on the base before size checks to allow RSA-4096
CRT (2048-bit exponentiations) to use the hardware accelerator instead of
falling back to software. Fix input validation, negative zero sign issues,
and early memory cleanup paths in esp_mpi_exp_mod()
2026-06-22 09:00:41 +05:30
Kapil Gupta 4459a96ffc fix(esp_wifi): Fixed some issues in esp_supplicant code 2026-06-17 09:52:53 +05:30
Kapil Gupta 6c1ea60b28 fix(esp_wifi): Redesigned eloop code and extend UTs 2026-06-17 09:47:19 +05:30
Kapil Gupta 0268c8ee50 fix(esp_wifi): Correct igtk key installation in ft 2026-06-03 08:56:33 +05:30
Kapil Gupta c62143a9a3 fix(esp_wifi): Allow M1 in pmk caching case 2026-05-29 11:14:26 +05:30
Kapil Gupta 71bbd3cf4d fix(roaming): prevent timeout payload double-free on deinit
Track timeout user_data before registration, untrack on register failure
2026-05-20 19:12:45 +05:30
Kapil Gupta f4a4b9aa35 fix(esp_wifi): Fixed some issues in roaming app found using static analysis 2026-05-20 19:12:37 +05:30
Kapil Gupta 2c3440481d fix(esp_wifi): Execute DPP event handlers in eloop context 2026-04-30 12:36:01 +05:30
Kapil Gupta cbd9468904 ci(wpa_supplicant): Add UT for supplicant crypto 2026-04-27 16:17:55 +05:30
Kapil Gupta 4637170800 fix(esp_wifi): Optimize crypto operations for SAE
- Montgomery multiplication fast path for P-256 mulmod
- Jacobi symbol for legendre (replacing exp_mod)
- Software Jacobian point multiplication for MPI-only chips
- ECC hardware acceleration for supported chips
- ECDH fast path for P-256
2026-04-27 16:12:17 +05:30
Kapil Gupta 5d46920382 ci(esp_wifi): skip timing test if hw not available 2026-04-25 12:46:01 +05:30
Kapil Gupta db025d7015 fix(wpa_supplicant): Add optimizations in fastpsk 2026-04-25 12:45:31 +05:30
Kapil Gupta 34e3d1dc3e fix(esp_wifi): clean up fragment rx flow 2026-04-24 20:45:01 +08:00
Kapil Gupta 0f14b2b069 fix(esp_wifi): Address review comments on MR 2026-04-24 20:45:01 +08:00
Kapil Gupta 01a8e6ec43 fix(esp_wifi): Disconnect before sending WPS success event 2026-04-24 20:45:01 +08:00
Kapil Gupta 94095f7fd9 fix(esp_wifi): Address some issues in esp_supplicant WPS states 2026-04-24 20:45:01 +08:00
Kapil Gupta e5b3432cc7 fix(wps): harden enrollee WSC fragment handling 2026-04-24 20:45:01 +08:00
Kapil Gupta 9669403338 fix(esp_wifi): fail if ptk derivation fails 2026-04-23 18:33:13 +08:00
Kapil Gupta dd2d40bf3d fix(esp_wifi): Skip allocation of new buffers during EAP processing 2026-04-23 18:32:28 +08:00
Kapil Gupta c7758cff5f fix(esp_wifi): Fix min scan time for btm scan 2026-03-10 11:05:46 +05:30
Kapil Gupta 3e0d67d416 fix(esp_wifi): Add alt snonce verification in softAP 2026-03-04 11:34:33 +05:30
Kapil Gupta 35187dea1e fix(esp_wifi): Fix bug where wps_finish is called recursively 2026-02-05 09:40:39 +05:30
Kapil Gupta e8dbfee7de docs: update vulnerabilities guide to mention CVE-2026-25532 2026-02-04 14:30:51 +05:30
Kapil Gupta e64e900be8 apply suggestion 2026-01-14 17:24:06 +05:30
Kapil Gupta 5059f574d0 fix(esp_wifi): Validate dpp auth instance before using it 2026-01-14 17:23:49 +05:30
Kapil Gupta c9b5b40bc1 fix(esp_wifi): Change some defaults in roaming app
- Closes https://github.com/espressif/esp-idf/issues/17687
2026-01-08 14:41:26 +05:30
Kapil Gupta 1cea05a416 fix(esp_wifi): Use correct variable for neighbour report 2026-01-08 14:40:36 +05:30
Kapil Gupta 9835845d98 fix(esp_wifi): Check conditional compilation for roaming app features 2026-01-08 14:40:36 +05:30
Kapil Gupta 4347dc6ff2 fix(esp_wifi): Cancel roaming_app_periodic_scan_internal_handler correctly 2026-01-08 14:40:36 +05:30
Kapil Gupta cf2c1738c0 fix(esp_wifi): Add some fixes in roaming app 2026-01-08 14:40:36 +05:30
Kapil Gupta 0ef0d068db fix(esp_wifi): Address some review comments and issues 2026-01-08 14:40:35 +05:30
Kapil Gupta 38302784c7 feat(roaming): ignore WPA2-only APs on transition disable
This commit introduces a new feature to the roaming logic. If the
currently connected AP has the 'transition disable' bit set in its
RSN IE, the roaming logic will now ignore any scanned APs that only
support WPA2-PSK. This prevents a security downgrade when roaming in a
mixed WPA2/WPA3 environment.

A new Kconfig option, CONFIG_ESP_WIFI_IGNORE_WPA2_ONLY_ON_TRANSITION_DISABLE,
has been added to control this feature. It is disabled by default.
2026-01-08 14:40:35 +05:30
Kapil Gupta be1515baf3 fix(roaming_app): resolve issues in blacklisting logic
This commit addresses several issues in the BSSID blacklisting
feature of the roaming application:

- Merged duplicate  functions into a single,
  unified function, resolving a compilation error.
- Corrected  and
  to properly access the  member of the
  struct, fixing invalid memory access.
- Introduced  in Kconfig to enable
  the manual blacklisting feature and made auto-blacklisting
  dependent on it.
- Updated  to use the
  correct BSSID from .
- Optimized the removal of expired blacklist entries by using
   for better efficiency.
2026-01-08 14:40:35 +05:30
Kapil Gupta 91ba3b2d49 fix(esp_wifi): Add blacklist logic in roaming app 2026-01-08 14:40:35 +05:30
Kapil Gupta b209fae993 fix(esp_wifi): Fix invalid memory accesses in supplicant code 2025-12-30 10:24:12 +08:00
Kapil Gupta bdd1b0ca20 fix(mbedtls): Addressed comments on PR15679 2025-10-27 15:41:21 +08:00
Kapil Gupta f63e81c044 refactor(esp_wifi): Remove WPS task code 2025-10-16 11:12:22 +08:00
Kapil Gupta 7c29420e45 fix(esp_wifi): skip call to esp_fast_psk() when hardware SHA is not supported 2025-10-13 11:27:57 +05:30
Kapil Gupta 63312aa64d fix(esp_wifi): Add depenedency of 192 bit config on wifi enterprise
Closes https://github.com/espressif/esp-idf/issues/17567
2025-09-21 12:30:34 +05:30
Kapil Gupta 3b21679be9 fix(esp_wifi): Address review comments 2025-07-22 14:53:13 +08:00
Kapil Gupta f794af38c2 feat(esp_wifi): Add support to limit EAP methods
Added support to limit EAP method supported by device based on
user configuration.
2025-07-22 14:53:13 +08:00
Kapil Gupta 97888e2152 fix (esp_wifi): Set default akm as eap for non AKM APs 2025-07-04 09:21:45 +05:30
Kapil Gupta 8588446859 fix(wpa_supplicant): Delay sending of EAP_START for EAP auth 2025-07-04 09:21:14 +05:30
Kapil Gupta f3579cee33 fix(esp_wifi): Set default ap mgmt cipher 2025-06-25 17:47:50 +08:00
Kapil Gupta 9c61e31be4 fix(esp_wifi): Make sure old DPP listen is cancelled 2025-06-17 21:33:18 +08:00
Kapil Gupta f0d7baae5e fix(esp_wifi): Modify check for dpp event handlers 2025-06-17 21:31:56 +08:00
Kapil Gupta 9189406b05 change(esp_wifi): Update dpp enrollee example to use updated events 2025-06-17 21:31:46 +08:00
Kapil Gupta 30c24b2f31 fix(esp_wifi): Update dpp code to send events in freeRTOS context 2025-06-17 21:31:38 +08:00
Kapil Gupta 23bc0a51fb fix(esp_wifi): Fixed DPP concurrency issue 2025-06-17 21:31:27 +08:00
Kapil Gupta 3b596bb602 fix(esp_wifi): Fixed static analyzer issues 2025-05-27 13:37:13 +05:30
Kapil Gupta 45fed1d225 fix(esp_wifi): Disble IP renew skip by default 2025-05-27 13:37:13 +05:30
Kapil Gupta 1f4fbd060c Merge branch 'fix/rrm_config_set_v5.5' into 'release/v5.5'
Set rrm config condition in case RRM monitoring is enabled

See merge request espressif/esp-idf!39280
2025-05-20 15:34:42 +05:30
Kapil Gupta cf0166d196 fix(esp_wifi): Use supplicant's internal SHA1 if not available from IDF 2025-04-21 13:38:29 +05:30
Kapil Gupta b33394907b Merge branch 'bugfix/ssc_compilation_wps' into 'master'
bugfix(wpa_supplicant): Fix build errors when Supplicant logs are enabled

Closes WIFIBUG-1141

See merge request espressif/esp-idf!38481
2025-04-18 07:14:41 +08:00
Kapil Gupta 9c75d7961c Merge branch 'bugfix/h2e_porting_improvement' into 'master'
change(esp_wifi): Improve handling group parameter A in H2E

Closes IDFGH-14994 and IDFGH-14995
Closes https://github.com/espressif/esp-idf/issues/15691
Closes https://github.com/espressif/esp-idf/pull/15692

See merge request espressif/esp-idf!38319
2025-04-15 18:36:12 +08:00
Kapil Gupta 6e1b2aa23f ci(esp_wifi): Extend eloop test to verify wifi deinit properly 2025-04-14 21:14:23 +05:30
Kapil Gupta 859d18a123 fix(esp_wifi): Fixed some concurrency issues in eloop deinit 2025-04-14 21:14:17 +05:30
Kapil Gupta bfc86f6094 fix(esp_wifi): Removal of task posting code and use pptask instead 2025-04-14 20:30:53 +05:30
Kapil Gupta a96d680fc5 fix(esp_wifi): Add various DPP fixes observed during testing 2025-04-14 20:30:53 +05:30
Kapil Gupta 4dac5482e3 fix(esp_wifi): Add eloop blocking call API for public APIs 2025-04-14 20:30:47 +05:30
Kapil Gupta f025008d4e ci(esp_wifi): Add h2e testcase 2025-04-09 11:17:00 +05:30
Kapil Gupta 6b5ac56b9d Merge branch 'feat/eap_domain_check' into 'master'
esp_wifi: Add EAP domain validation support

Closes IDFGH-14822

See merge request espressif/esp-idf!37668
2025-04-08 20:23:06 +08:00
Kapil Gupta 7f2814a0da fix(esp_wifi): Flush PMK when EAP config is changed 2025-04-08 12:45:00 +05:30
Kapil Gupta 0b20847e2d fix(esp_wifi): Increase WPS timeout 2025-04-08 00:23:52 +08:00
Kapil Gupta bbf7f9b2a7 fix(esp_wifi): Code cleanup for PR#15550 PR#15551
Closes https://github.com/espressif/esp-idf/pull/15550
Closes https://github.com/espressif/esp-idf/pull/15551
2025-04-07 19:38:11 +05:30
Kapil Gupta fb75c854ce Merge branch 'bugfix/pmksa_null_check' into 'master'
Draft: fix(wifi): Fix crash when set config is called with changed password

Closes IDFGH-14863 and IDFGH-14926

Closes https://github.com/espressif/esp-idf/issues/15635

See merge request espressif/esp-idf!37840
2025-03-24 21:25:34 +08:00
Kapil Gupta 7ff63ac9af Merge branch 'feature/okc_support' into 'master'
feat(wpa_supplicant): Add support for OKC

Closes WIFIBUG-841

See merge request espressif/esp-idf!34873
2025-03-20 16:47:33 +08:00
Kapil Gupta 1a5b2a267b fix(esp_wifi): Add alternate SHA1 APIs in WiFi
Add alternate SHA1 APIs to handle cases when
`CONFIG_MBEDTLS_SHA1_C` is disabled.
2025-03-19 15:11:10 +05:30
Kapil Gupta ac0eaa0034 ci(wifi): Add builds for FT, RRM and WNM configs 2025-03-19 12:07:08 +08:00
Kapil Gupta a10635e389 fix(wifi): Fixed compilation error when 11R is enabled without 11KV
Closes https://github.com/espressif/esp-idf/issues/15539
2025-03-19 12:07:08 +08:00
Kapil Gupta 3d1ea229d5 Merge branch 'bugfix/wps_reconnect_failure' into 'master'
fix(wpa_suppplicant): Fix for issue in wps reconnection

Closes WIFI-6810, WIFIBUG-1086, and WIFIBUG-1067

See merge request espressif/esp-idf!37320
2025-03-10 22:26:42 +08:00
Kapil Gupta 3c7ca8f2c9 Merge branch 'bugfix/11kv_config_break' into 'master'
fix(esp_wifi): Correctly break 11kv config into wnm and rrm configs

Closes WIFIBUG-1065

See merge request espressif/esp-idf!37451
2025-03-05 18:28:26 +08:00
Kapil Gupta 4cdd5087ef Merge branch 'feature/github_pull_15073' into 'master'
feat(wpa_supplicant): Add optimized PSK implementation

See merge request espressif/esp-idf!36229
2025-03-05 16:28:16 +08:00
Kapil Gupta 1ee5551004 fix(esp_wifi): Prevent flushing of FT data mistakenly 2025-03-05 12:24:18 +05:30
Kapil Gupta 4f127f57e2 fix(esp_wifi): Fix some compilation errors in roaming app 2025-03-05 12:24:15 +05:30
Kapil Gupta c058048085 fix(esp_wifi): Correctly break 11kv config into wnm and rrm configs 2025-03-05 12:24:11 +05:30
Kapil Gupta a8e5fd4b86 fix(ci): Update UT to verify fast psk calculations
Also update some comments
2025-03-03 14:16:32 +05:30
Kapil Gupta e02e6fe5ca fix(esp_wifi): Add some comments in github PR 15073
Closes https://github.com/espressif/esp-idf/pull/15073
2025-03-03 14:04:44 +05:30
Kapil Gupta b5eadb56e7 fix(esp_wifi): Fix stack corruption in wpa3 task 2025-02-12 23:14:53 +05:30
Kapil Gupta 534fce5fbf fix(esp_wifi): fixed Stack corruption in DPP task 2025-02-12 21:35:11 +05:30
Kapil Gupta e48122f4a8 fix(esp_wifi): fixed Stack corruption in WPS processing 2025-02-12 21:34:53 +05:30
Kapil Gupta 4d83458e6b fix(esp_wifi): Fixed memory corruption in wifi enterprise
Closes https://github.com/espressif/esp-idf/issues/15370
2025-02-12 20:37:12 +05:30
Kapil Gupta 7bb6c67efe Merge branch 'bugfix/wps_scan_freq' into 'master'
fix(esp_wifi): Reduce scan frequency in WPS

See merge request espressif/esp-idf!35866
2025-02-10 16:46:20 +08:00
Kapil Gupta 7a94d450e0 Merge branch 'bugfix/analyzer_issues_supplicant' into 'master'
fix(esp_wifi): fix some analyzer issues

Closes IDFGH-14306, IDFGH-14307, and IDFGH-14308

See merge request espressif/esp-idf!36100
2025-01-21 10:47:51 +08:00
Kapil Gupta 897e487f89 Merge branch 'fix/fix_off_wpa3_build_issue' into 'master'
fix(wifi): fix build issue when disable wpa3 sae

Closes WIFIBUG-1014 and IDFGH-14420

Closes https://github.com/espressif/esp-idf/issues/15200

See merge request espressif/esp-idf!36297
2025-01-14 16:14:53 +08:00
Kapil Gupta a95406ad90 fix(esp_wifi): Add review comments and some cleanup 2025-01-14 14:35:00 +08:00
Kapil Gupta 22897aaf5b fix(esp_wifi): fix some analyzer issues
Closes https://github.com/espressif/esp-idf/issues/15097
Closes https://github.com/espressif/esp-idf/issues/15098
Closes https://github.com/espressif/esp-idf/issues/15099
2025-01-14 14:35:00 +08:00
Kapil Gupta 80132653c7 fix(esp_wifi): Address some review comments 2025-01-03 16:47:00 +05:30
Kapil Gupta fbe9fcd7bf Merge branch 'bugfix/roaming_app_issues' into 'master'
fix(wifi): Fix some issues observed in roaming app

Closes WIFIBUG-904, WIFIBUG-881, and WIFIBUG-905

See merge request espressif/esp-idf!34519
2025-01-03 12:47:18 +08:00
Kapil Gupta afeefc9e1e Merge branch 'bugfix/coverity_issue_supplicant' into 'master'
esp_wifi: Fix coverity issues

Closes IDF-11716 and IDF-11751

See merge request espressif/esp-idf!35865
2025-01-02 18:03:34 +08:00
Kapil Gupta b3b1c19ed3 fix(esp_wifi): Enable EAP workarounds by default
Enabling this will make sure our behavior is same as upstream
wpa_supplicant.
2025-01-02 15:05:12 +08:00
Kapil Gupta 5633f2f169 fix(esp_wifi): Removed unnecessary handlers to cleanup 2025-01-02 11:52:15 +05:30
Kapil Gupta de28ee09d6 fix(esp_wifi): Roaming app, sync api naming 2025-01-02 11:47:18 +05:30
Kapil Gupta 2577769813 fix(esp_wifi): Some more cleanup for roaming app 2025-01-02 11:47:18 +05:30
Kapil Gupta 7028b8f573 fix(esp_wifi): moving around roaming app code a bit 2025-01-02 11:47:18 +05:30
Kapil Gupta f61847b4b4 fix(roaming_app): Add get set config params for the app 2025-01-02 11:47:18 +05:30
Kapil Gupta e028cc6952 fix(wifi): Provide a config option to skip IP renew during roam 2025-01-02 11:47:18 +05:30
Kapil Gupta d2fde65545 fix(esp_wifi): Set minimum scan time to 30ms in roaming app 2025-01-02 11:47:18 +05:30