Kapil Gupta
05c44bcb8e
Merge branch 'fix/btm_query_reason' into 'master'
...
Send Low RSSI reason in BTM Query for roaming
Closes WIFIBUG-2120
See merge request espressif/esp-idf!52106
2026-09-10 12:13:40 +05:30
Kapil Gupta
a7cb4cc709
Merge branch 'fix/blacklist_roaming_issue' into 'master'
...
Preserve SSID and authmode across disconnect for blacklist recovery
Closes WIFIBUG-2168
See merge request espressif/esp-idf!52643
2026-09-10 11:13:58 +05:30
Kapil Gupta
4c9ffea8dd
Merge branch 'fix/roam_init_deinit_issue' into 'master'
...
Roam handle unregister issue
Closes WIFIBUG-2079
See merge request espressif/esp-idf!52312
2026-09-10 11:13:19 +05:30
Kapil Gupta
578e51b26b
Merge branch 'bugfix/rmac_scan' into 'master'
...
fix(esp_wifi): fix issues for scan, and NULL packets tx for random mac
Closes WIFIBUG-2009, WIFIBUG-2008, and WIFIBUG-2029
See merge request espressif/esp-idf!50298
2026-07-18 20:22:49 +05:30
Kapil Gupta
b3b955cd6e
fix(wpa_supplicant): Correct some functions in crypto porting layer
2026-07-16 17:48:27 +08:00
Kapil Gupta
fb14a3e7f4
Merge branch 'bugfix/mbedtls_rsa_base_reduction_hw_crt' into 'master'
...
fix(mbedlts): Enable hardware CRT for RSA-4096 via base reduction
Closes WIFIBUG-1789
See merge request espressif/esp-idf!49641
2026-06-21 09:59:18 +05:30
Kapil Gupta
66752f0942
fix(mbedtls): Fix cached Rinv size mismatch under private exponent blinding
...
Prevent signature verification failures on targets that do not round hardware words
to 16-word boundaries (e.g. ESP32-S3, ESP32-C6, and ESP32-P4), where exponent blinding
can cause `num_words` to vary between calls, leading to reuse of an incorrectly sized
cached `Rinv`.
2026-06-21 09:29:49 +05:30
Kapil Gupta
cf7a80aa01
fix(mbedtls): Enable hardware CRT for RSA-4096 via base reduction
...
Perform modulo reduction on the base before size checks to allow RSA-4096
CRT (2048-bit exponentiations) to use the hardware accelerator instead of
falling back to software. Fix input validation, negative zero sign issues,
and early memory cleanup paths in esp_mpi_exp_mod()
2026-06-21 09:29:37 +05:30
Kapil Gupta
f652f629fe
Merge branch 'bugfix/ft_igtk_installation' into 'master'
...
fix(esp_wifi): Correct igtk key installation in ft-psk mode
See merge request espressif/esp-idf!49048
2026-06-02 17:36:33 +05:30
Kapil Gupta
db6f99e160
Merge branch 'bugfix/isolate_remote_local_cache' into 'master'
...
fix(esp_wifi): Isolate wifi-remote API check from local station build
See merge request espressif/esp-idf!48866
2026-06-01 14:42:57 +05:30
Kapil Gupta
e88879e8ef
refactor(wpa_supplicant): add shared psa_import_aes_key helper
...
Centralize PSA AES key import used by ECB, CBC, CTR, CCM, CMAC, and
NIST key-wrap paths in crypto_mbedtls.c.
2026-06-01 12:34:42 +05:30
Kapil Gupta
05f74a8355
fix(wpa_supplicant): migrate aes_wrap to PSA NIST-KW API
...
mbedTLS 3.x removed mbedtls_nist_kw_context; use psa_import_key and
mbedtls_nist_kw_wrap/unwrap with PSA key IDs instead.
Closes https://github.com/espressif/esp-idf/issues/18678
2026-06-01 12:22:08 +05:30
Kapil Gupta
2d6bac1e21
fix(esp_wifi): Correct igtk key installation in ft
2026-06-01 10:30:53 +05:30
Kapil Gupta
620973393c
fix(esp_wifi): Isolate wifi-remote API check from local station build
...
Use scripts/station_gen_build with -B and -D SDKCONFIG so generate_and_check
does not read the station example's sdkconfig or build tree. Apply
sdkconfig.defaults and IDF_TARGET=esp32 for stable header preprocessing.
Unset GIT_DIR/GIT_INDEX_FILE (and related vars) before git subprocesses so
pre-commit and git worktrees do not mis-resolve paths after cd into scripts/.
2026-05-29 14:20:15 +08:00
Kapil Gupta
9dac8ed04f
fix(esp_wifi): Increase partition size of app for NaN console
2026-05-27 17:46:47 +05:30
Kapil Gupta
331fa92f68
fix(roaming): prevent timeout payload double-free on deinit
...
Track timeout user_data before registration, untrack on register failure
2026-05-12 13:50:14 +08:00
Kapil Gupta
4721a8849b
fix(esp_wifi): Allow M1 in pmk caching case
2026-05-11 23:09:21 +05:30
Kapil Gupta
797059d239
fix(esp_wifi): Add support to bypass rng for bringup
2026-05-11 14:10:11 +05:30
Kapil Gupta
b585c0b364
fix(esp_wifi): Fixed some issues in roaming app found using static analysis
2026-05-06 15:50:54 +08:00
Kapil Gupta
1085d83c48
fix(esp_wifi): Update wifi lib pointer
2026-05-06 12:09:41 +05:30
Kapil Gupta
1d14e269b8
fix(esp_wifi): Drop broadcast fragmented frames
2026-05-05 13:49:02 +05:30
Kapil Gupta
a6f5c15aca
fix(esp_wifi): Fixed some issues in esp_supplicant code
2026-05-01 12:38:53 +05:30
Kapil Gupta
3368b271f5
fix(esp_wifi): Redesigned eloop code and extend UTs
2026-05-01 12:38:45 +05:30
Kapil Gupta
fba7f6df97
Merge branch 'ci/wifi_remote_hook_cleanup' into 'master'
...
ci(esp_wifi): Update cleanup in script
See merge request espressif/esp-idf!48057
2026-04-30 16:37:12 +05:30
Kapil Gupta
cbac39c984
ci(esp_wifi_remote): silently exit if related files are not modified
2026-04-30 09:42:29 +05:30
Kapil Gupta
0f1a1503ad
ci(esp_wifi): Update cleanup in script
2026-04-29 09:55:30 +05:30
Kapil Gupta
1886d5269e
Merge branch 'bugfix/fix_dangling_pointer_issue' into 'master'
...
fix(esp_wifi): clean up fragment rx flow
Closes WIFIBUG-1853
See merge request espressif/esp-idf!47915
2026-04-27 15:44:08 +05:30
Kapil Gupta
e137133d75
fix(esp_remote): Remove idf_build_apps dependency from script
2026-04-27 15:12:20 +05:30
Kapil Gupta
b700548c49
fix(wpa_supplicant): Fix issues reported by compiler
2026-04-24 20:12:40 +05:30
Kapil Gupta
41e67e1efb
Merge branch 'bugfix/wps_pin_len' into 'master'
...
fix(wpa_supplicant): initialize wps pin len correctly
See merge request espressif/esp-idf!47326
2026-04-24 16:12:37 +05:30
Kapil Gupta
2670cbf4a6
Merge branch 'ci/wifi_remote_header_correction' into 'master'
...
ci(esp_remote): Add wifi-remote pre-commit hook
See merge request espressif/esp-idf!46204
2026-04-24 15:16:32 +05:30
Kapil Gupta
11a0dfcc7c
ci(esp_remote): Add wifi-remote pre-commit hook
2026-04-24 15:16:32 +05:30
Kapil Gupta
cb84db85ca
fix(esp_wifi): clean up fragment rx flow
2026-04-24 13:07:50 +05:30
Kapil Gupta
c1e8db338d
Merge branch 'bugfix/pbkdf2_sha1_psa_fallback' into 'master'
...
fix(esp_wifi): Fallback to pbkdf2_sha1_psa when fast options are disabled
Closes WIFI-7330
See merge request espressif/esp-idf!47912
2026-04-24 12:29:32 +05:30
Kapil Gupta
e113651adf
fix(esp_wifi): Fallback to pbkdf2_sha1_psa when fast options are disabled
2026-04-24 10:15:50 +05:30
Kapil Gupta
8e4367bbf2
Merge branch 'bugfix/fastpsk_optimization' into 'master'
...
fast psk optimization
Closes WIFI-7330
See merge request espressif/esp-idf!47658
2026-04-24 07:20:38 +05:30
Kapil Gupta
dd8a769d34
ci(esp_wifi): skip timing test if hw not available
2026-04-23 12:25:20 +05:30
Kapil Gupta
e372a52e8f
fix(wpa_supplicant): Only use fastpsk/fastpbkdf2 when hw available
2026-04-23 12:23:47 +05:30
Kapil Gupta
69b3391e5f
Merge branch 'bugfix/static_analysis_issue_supplicant' into 'master'
...
fix(supplicant): resolve constant expression warning in crypto_ecdh_output_size
Closes IDF-15548
See merge request espressif/esp-idf!47650
2026-04-20 12:40:57 +05:30
Kapil Gupta
3c70d52b89
Merge branch 'bugfix/wps_frag_handling' into 'master'
...
fix(wps): harden enrollee WSC fragment handling
Closes WIFIBUG-1801
See merge request espressif/esp-idf!47084
2026-04-20 00:26:01 +05:30
Kapil Gupta
7774285b7d
fix(esp_wifi): Move unnecessary PMF prints to verbose
2026-04-17 14:34:56 +05:30
Kapil Gupta
a39e3035cf
fix(wpa_supplicant): Add optimizations in fastpsk
2026-04-17 12:50:44 +05:30
Kapil Gupta
fd883d87ac
fix(esp_wifi): Address review comments on MR
2026-04-16 19:07:24 +05:30
Kapil Gupta
ca94acf4de
Merge branch 'bugfix/validate_ptk_generation' into 'master'
...
fix(esp_wifi): fail if ptk derivation fails
See merge request espressif/esp-idf!47643
2026-04-16 18:47:52 +05:30
Kapil Gupta
6aabf3706f
fix(supplicant): resolve constant expression warning in crypto_ecdh_output_size
...
Use PSA_BITS_TO_BYTES(key_bits) directly instead of
PSA_RAW_KEY_AGREEMENT_OUTPUT_SIZE(PSA_KEY_TYPE_ECC_KEY_PAIR(...))
to eliminate a tautological type check that always evaluates to the same result.
2026-04-15 20:42:24 +05:30
Kapil Gupta
9dd1c015db
fix(esp_wifi): fail if ptk derivation fails
2026-04-15 15:26:48 +05:30
Kapil Gupta
957313d4c3
fix(esp_wifi): Skip allocation of new buffers during EAP processing
2026-04-13 17:14:26 +08:00
Kapil Gupta
0dbe3b6701
Merge branch 'feat/dpp_crypto_optimization' into 'master'
...
fix(esp_wifi): Optimize crypto operations for DPP
See merge request espressif/esp-idf!46862
2026-04-12 09:00:25 +05:30
Kapil Gupta
85c164c2b7
fix(esp_wifi): Optimize crypto operations for DPP
2026-04-12 09:00:25 +05:30
Kapil Gupta
4707f8ee7d
fix(esp_wifi): Disconnect before sending WPS success event
2026-03-31 14:48:44 +05:30
Kapil Gupta
91997ec7d2
fix(esp_wifi): Address some issues in esp_supplicant WPS states
2026-03-30 11:35:16 +05:30
Kapil Gupta
d388fc268d
fix(wps): harden enrollee WSC fragment handling
2026-03-27 15:00:27 +05:30
Kapil Gupta
24dd3d563e
Merge branch 'feat/sae_calculation_optimizations' into 'master'
...
esp_wifi: Optimize crypto operations for SAE
Closes WIFIBUG-1760, WIFIBUG-1363, WIFIBUG-1701, WIFIBUG-1246, and IDF-15009
See merge request espressif/esp-idf!46539
2026-03-23 10:55:24 +05:30
Kapil Gupta
1f6e32ee78
fix(esp_wifi): Optimize crypto operations for SAE
...
- Montgomery multiplication fast path for P-256 mulmod
- Jacobi symbol for legendre (replacing exp_mod)
- Software Jacobian point multiplication for MPI-only chips
- ECC hardware acceleration for supported chips
2026-03-20 19:44:09 +05:30
Kapil Gupta
30efa77a80
ci(esp_wifi): Update supplicant's crypto Unit test cases
2026-03-20 19:44:09 +05:30
Kapil Gupta
a359bfa614
fix(esp_wifi): Fix min scan time for btm scan
2026-03-06 08:36:43 +05:30
Kapil Gupta
e2338ce516
Merge branch 'bugfix/wps_disable_stop_scan' into 'master'
...
fix(wifi): Stop scan when wps is disabled
Closes WIFIBUG-1633
See merge request espressif/esp-idf!45066
2026-03-05 15:34:12 +05:30
Kapil Gupta
53cdf7bc34
Merge branch 'bugfix/eap_tls_psa_crypto_fail' into 'master'
...
fix(esp_wifi): EAP TLS RSA verify and CBC record decrypt with PSA crypto
Closes WIFIBUG-1745
See merge request espressif/esp-idf!46056
2026-02-27 12:38:14 +05:30
Kapil Gupta
724f1fcaeb
fix(esp_wifi): EAP TLS RSA verify and CBC record decrypt with PSA crypto
2026-02-25 15:24:50 +05:30
Kapil Gupta
78d06aae6e
fix(esp_wifi): Add alt snonce verification in softAP
2026-02-24 10:53:15 +05:30
Kapil Gupta
63f6d822ae
Merge branch 'bugfix/dpp_concurrency_issue' into 'master'
...
fix(esp_wifi): Execute DPP event handlers in eloop context
Closes WIFIBUG-1543
See merge request espressif/esp-idf!45718
2026-02-13 12:56:04 +05:30
Kapil Gupta
b7a1e385f0
fix(esp_wifi): Execute DPP event handlers in eloop context
2026-02-11 12:30:35 +05:30
Kapil Gupta
b90878aead
Merge branch 'bugfix/wps_disable_at_timeout' into 'master'
...
fix(wifi): Disable wps in eloop context during wps abort
See merge request espressif/esp-idf!45723
2026-02-11 08:05:55 +05:30
Kapil Gupta
d83df5d9ea
docs: update vulnerabilities guide to mention CVE-2026-25532
2026-02-04 12:23:06 +05:30
Kapil Gupta
1452042ae8
Merge branch 'fix/offchan_roc_unit_test' into 'master'
...
CI: Fix offchan tx and roc related unit test case
Closes IDFCI-3347 and IDFCI-5037
See merge request espressif/esp-idf!42883
2026-01-28 12:25:00 +05:30
Kapil Gupta
f10dc34880
fix(esp_wifi): Fix bug where wps_finish is called recursively
2026-01-21 11:10:59 +05:30
Kapil Gupta
1eb2c9249a
Merge branch 'bugfix/wps_reg_crash' into 'master'
...
fix(wifi): Add check before allocating eapol sm
See merge request espressif/esp-idf!43273
2026-01-17 11:03:06 +05:30
Kapil Gupta
f6200b85f5
Merge branch 'bugfix/dpp_auth_ctx_validation' into 'master'
...
fix(esp_wifi): Validate dpp auth instance before using it
Closes WIFIBUG-1539
See merge request espressif/esp-idf!43031
2026-01-05 18:37:36 +05:30
Kapil Gupta
c001c8715f
fix(esp_wifi): Validate dpp auth instance before using it
2026-01-05 18:37:36 +05:30
Kapil Gupta
b88befde6b
fix(esp_wifi): Fix invalid memory accesses in supplicant code
2025-12-10 20:19:56 +05:30
Kapil Gupta
4e1b768353
Merge branch 'bugfix/roaming_app_condition_compilation' into 'master'
...
Bugfix/roaming app condition compilation
Closes IDFGH-16568 and WIFIBUG-1493
See merge request espressif/esp-idf!42434
2025-12-10 17:49:50 +05:30
Kapil Gupta
6ad7b92097
fix(esp_wifi): Change some defaults in roaming app
2025-12-04 17:43:31 +08:00
Kapil Gupta
43bec17ed3
fix(esp_wifi): Use correct variable for neighbour report
2025-12-04 17:43:31 +08:00
Kapil Gupta
9c804f1158
fix(esp_wifi): Check conditional compilation for roaming app features
2025-12-04 17:43:31 +08:00
Kapil Gupta
092338b78d
fix(esp_wifi): Add validation before accessing RSNXE
2025-10-09 09:32:56 +05:30
Kapil Gupta
04174c4928
Merge branch 'bugfix/concurrency_issue_roam_app' into 'master'
...
fix(esp_wifi): Add some fixes in roaming app
See merge request espressif/esp-idf!42262
2025-09-30 23:25:48 +05:30
Kapil Gupta
cf65928773
fix(esp_wifi): Cancel roaming_app_periodic_scan_internal_handler correctly
2025-09-30 14:18:29 +08:00
Kapil Gupta
a75a3710c4
fix(esp_wifi): Add some fixes in roaming app
2025-09-30 14:18:29 +08:00
Kapil Gupta
e8f75f97b0
Merge branch 'feat/roaming_app_blacklist' into 'master'
...
fix(esp_wifi): Add blacklist logic in roaming app
Closes WIFIBUG-1219, WIFIBUG-1208, WIFIBUG-1109, WIFIBUG-1203, and WIFIBUG-1428
See merge request espressif/esp-idf!40802
2025-09-28 21:44:31 +05:30
Kapil Gupta
0f3034586b
fix(esp_wifi): Address some review comments and issues
2025-09-28 11:53:01 +08:00
Kapil Gupta
7d18b82575
feat(roaming): ignore WPA2-only APs on transition disable
...
This commit introduces a new feature to the roaming logic. If the
currently connected AP has the 'transition disable' bit set in its
RSN IE, the roaming logic will now ignore any scanned APs that only
support WPA2-PSK. This prevents a security downgrade when roaming in a
mixed WPA2/WPA3 environment.
A new Kconfig option, CONFIG_ESP_WIFI_IGNORE_WPA2_ONLY_ON_TRANSITION_DISABLE,
has been added to control this feature. It is disabled by default.
2025-09-28 11:53:01 +08:00
Kapil Gupta
074b2d0f93
fix(roaming_app): resolve issues in blacklisting logic
...
This commit addresses several issues in the BSSID blacklisting
feature of the roaming application:
- Merged duplicate functions into a single,
unified function, resolving a compilation error.
- Corrected and
to properly access the member of the
struct, fixing invalid memory access.
- Introduced in Kconfig to enable
the manual blacklisting feature and made auto-blacklisting
dependent on it.
- Updated to use the
correct BSSID from .
- Optimized the removal of expired blacklist entries by using
for better efficiency.
2025-09-28 11:53:01 +08:00
Kapil Gupta
a7d2066913
fix(esp_wifi): Add blacklist logic in roaming app
2025-09-28 11:53:01 +08:00
Kapil Gupta
8b68791996
fix(tool): increase buffer size for kconfig server
2025-09-27 17:55:28 +05:30
Kapil Gupta
552a8653ad
fix(esp_wifi): Fix some compilation issues in examples
2025-09-26 21:51:38 +05:30
Kapil Gupta
7b665b6512
fix(esp_wifi): Correct some documentation
2025-09-26 21:43:32 +05:30
Kapil Gupta
f12debf4f5
fix(esp_wifi): Updated some documentation
2025-09-26 21:43:05 +05:30
Kapil Gupta
ce00aa9b78
fix(esp_wifi): Address review comments
2025-09-26 21:42:46 +05:30
Kapil Gupta
2563d6a2e8
fix(esp_wifi): Add dummy value for deprecated enums
2025-09-26 21:42:30 +05:30
Kapil Gupta
0f63b92501
fix(esp_wifi): remove esp_interface.h and update usages
2025-09-26 21:42:30 +05:30
Kapil Gupta
a28fefcf73
docs: add Wi-Fi migration guide for v6.0
2025-09-26 21:42:30 +05:30
Kapil Gupta
5898086eca
fix(esp_wifi): Remove some more deprecated enum/functions
2025-09-26 21:42:30 +05:30
Kapil Gupta
f189052386
fix(esp_wifi): Remove esp_interface.h
2025-09-26 21:42:30 +05:30
Kapil Gupta
35f8d9d42c
fix(esp_wifi): Remove deprecated arguments from some APIs
2025-09-26 21:42:30 +05:30
Kapil Gupta
f2cd005473
fix(esp_wifi): Removed deprecated rrm function
2025-09-26 21:42:30 +05:30
Kapil Gupta
b6e632900b
fix(esp_wifi): Remove deprecated event for DPP
2025-09-26 21:42:29 +05:30
Kapil Gupta
6bb3306154
fix(esp_wifi): Remove deprecated esp_wpa2.h
2025-09-26 21:42:29 +05:30
Kapil Gupta
1e1d5601de
refactor(esp_wifi): Remove WPS task code
2025-09-24 12:52:52 +08:00
Kapil Gupta
9b2f439ce2
Merge branch 'bugfix/eloop_lock' into 'master'
...
Made changes related to registering eloop timeout for eloop lock
Closes WIFIBUG-1306
See merge request espressif/esp-idf!40384
2025-09-23 18:10:52 +05:30
Kapil Gupta
0f215a4057
Merge branch 'bugfix/roam_app_neighbor_crash' into 'master'
...
fix(wifi_apps): Fix crash due to neighbor_list lock
Closes IDFGH-16029
See merge request espressif/esp-idf!40854
2025-09-23 14:24:18 +05:30