Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity
51,868 Commits 25 Branches 192 Tags
a2b2b36a571de37a1d45e28db9f9b26fbd953d93
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Kapil Gupta 9fb8a3ddaa fix(wpa_supplicant): Correct some functions in crypto porting layer 2026-07-22 10:50:19 +08:00
Kapil Gupta c41dd724d4 fix(mbedtls): Fix cached Rinv size mismatch under private exponent blinding 
Prevent signature verification failures on targets that do not round hardware words
to 16-word boundaries (e.g. ESP32-S3, ESP32-C6, and ESP32-P4), where exponent blinding
can cause `num_words` to vary between calls, leading to reuse of an incorrectly sized
cached `Rinv`.
 2026-06-29 15:43:31 +08:00
Kapil Gupta 86f6192f10 fix(mbedtls): Enable hardware CRT for RSA-4096 via base reduction 
Perform modulo reduction on the base before size checks to allow RSA-4096
CRT (2048-bit exponentiations) to use the hardware accelerator instead of
falling back to software. Fix input validation, negative zero sign issues,
and early memory cleanup paths in esp_mpi_exp_mod()
 2026-06-29 15:43:31 +08:00
Kapil Gupta e5fe5fb8ac refactor(wpa_supplicant): add shared psa_import_aes_key helper 
Centralize PSA AES key import used by ECB, CBC, CTR, CCM, CMAC, and
NIST key-wrap paths in crypto_mbedtls.c.
 2026-06-29 15:37:42 +08:00
Kapil Gupta 005bedfbe0 fix(wpa_supplicant): migrate aes_wrap to PSA NIST-KW API 
mbedTLS 3.x removed mbedtls_nist_kw_context; use psa_import_key and
mbedtls_nist_kw_wrap/unwrap with PSA key IDs instead.

Closes https://github.com/espressif/esp-idf/issues/18678
 2026-06-29 15:37:42 +08:00
Kapil Gupta e862096a56 fix(esp_wifi): Correct igtk key installation in ft 2026-06-03 08:53:46 +05:30
Kapil Gupta 0d394f4196 fix(esp_wifi): Allow M1 in pmk caching case 2026-05-29 11:13:59 +05:30
Kapil Gupta 252bb88a33 fix(roaming): prevent timeout payload double-free on deinit 
Track timeout user_data before registration, untrack on register failure
 2026-05-18 12:56:28 +05:30
Kapil Gupta 93d55c312a fix(wpa_supplicant): Fix issues reported by compiler 2026-05-11 12:15:54 +05:30
Kapil Gupta a14702b848 fix(esp_wifi): Fixed some issues in esp_supplicant code 2026-05-11 11:32:25 +05:30
Kapil Gupta 9ac0488e79 fix(esp_wifi): Redesigned eloop code and extend UTs 2026-05-11 11:32:20 +05:30
Kapil Gupta db859a0e6a fix(esp_wifi): Fixed some issues in roaming app found using static analysis 2026-05-11 11:31:46 +05:30
Kapil Gupta bdc7468ec0 Merge branch 'bugfix/fastpsk_optimization_v6.0' into 'release/v6.0' 
fast psk optimization (v6.0)

See merge request espressif/esp-idf!47950
 2026-05-01 09:16:32 +05:30
Kapil Gupta 1b1b574bd1 fix(esp_wifi): Fallback to pbkdf2_sha1_psa when fast options are disabled 2026-04-30 14:52:04 +05:30
Kapil Gupta 69f00c7051 ci(esp_wifi): skip timing test if hw not available 2026-04-30 14:51:59 +05:30
Kapil Gupta e1ce570218 fix(wpa_supplicant): Only use fastpsk/fastpbkdf2 when hw available 2026-04-30 14:40:25 +05:30
Kapil Gupta 761d6def65 fix(wpa_supplicant): Add optimizations in fastpsk 2026-04-30 14:40:25 +05:30
Kapil Gupta ec3c82c177 fix(esp_wifi): Backport some fixes to v6.0 2026-04-24 17:14:05 +08:00
Kapil Gupta a83eabab11 fix(esp_wifi): clean up fragment rx flow 2026-04-24 14:21:28 +05:30
Kapil Gupta 8a197ec0ea fix(esp_wifi): Skip allocation of new buffers during EAP processing 2026-04-23 09:47:38 +05:30
Kapil Gupta 2be5c4f05a fix(esp_wifi): Address review comments on MR 2026-04-22 16:30:15 +05:30
Kapil Gupta 6248e45526 fix(esp_wifi): Disconnect before sending WPS success event 2026-04-22 16:30:15 +05:30
Kapil Gupta 9d13698d46 fix(esp_wifi): Address some issues in esp_supplicant WPS states 2026-04-22 16:30:15 +05:30
Kapil Gupta 13e32c5a38 fix(wps): harden enrollee WSC fragment handling 2026-04-22 16:30:15 +05:30
Kapil Gupta 9d7811b076 fix(esp_wifi): fail if ptk derivation fails 2026-04-16 23:20:04 +05:30
Kapil Gupta 57aec74146 fix(esp_wifi): Changes to make DPP crypto faster (v6.0) 2026-04-09 19:51:36 +08:00
Kapil Gupta b5d26380b9 fix(esp_wifi): Optimize crypto operations for SAE 
- Montgomery multiplication fast path for P-256 mulmod
- Jacobi symbol for legendre (replacing exp_mod)
- Software Jacobian point multiplication for MPI-only chips
- ECC hardware acceleration for supported chips
 2026-03-20 19:47:23 +05:30
Kapil Gupta 7fcb5e66e8 ci(esp_wifi): Update supplicant's crypto Unit test cases 2026-03-20 19:47:18 +05:30
Kapil Gupta 25ef6916ed fix(esp_wifi): Fix min scan time for btm scan 2026-03-10 11:04:57 +05:30
Kapil Gupta 0947c0005a fix(esp_wifi): Add alt snonce verification in softAP 2026-03-04 11:33:53 +05:30
Kapil Gupta b39aea0b11 fix(esp_wifi): EAP TLS RSA verify and CBC record decrypt with PSA crypto 2026-02-27 12:39:41 +05:30
Kapil Gupta 7515249364 fix(esp_wifi): Execute DPP event handlers in eloop context 2026-02-13 10:09:16 +05:30
Kapil Gupta ac3f1055c0 fix(esp_wifi): Fix bug where wps_finish is called recursively 2026-02-13 12:31:32 +08:00
Kapil Gupta eca8f20165 docs: update vulnerabilities guide to mention CVE-2026-25532 2026-02-04 14:30:07 +05:30
Kapil Gupta e3715e3ade apply suggestion 2026-01-14 17:27:00 +05:30
Kapil Gupta b98b2292ce fix(esp_wifi): Validate dpp auth instance before using it 2026-01-14 17:27:00 +05:30
Kapil Gupta 6ec1a3f061 fix(esp_wifi): Change some defaults in roaming app 2026-01-08 14:18:23 +05:30
Kapil Gupta 5e4ee0126a fix(esp_wifi): Use correct variable for neighbour report 2026-01-08 14:18:13 +05:30
Kapil Gupta aa96e85108 fix(esp_wifi): Check conditional compilation for roaming app features 2026-01-08 14:18:01 +05:30
Kapil Gupta 5638b31c54 fix(esp_wifi): Fix invalid memory accesses in wpa_supplicant code 2026-01-06 01:03:40 +08:00
Kapil Gupta 80dd3156b2 fix(esp_wifi): Enable all sig algos for wifi enterprise 2025-12-19 07:29:08 +08:00
Kapil Gupta 54a41e1b29 Merge branch 'feat/wpa_supplicant_rom_md5_tests_v6.0' into 'release/v6.0' 
fix(esp_rom): use hmac_md5 and hmac_md5_vector from ROM only if CONFIG_LIBC_NEWLIB (v6.0)

See merge request espressif/esp-idf!44330
 2025-12-17 21:19:34 +05:30
Kapil Gupta 092338b78d fix(esp_wifi): Add validation before accessing RSNXE 2025-10-09 09:32:56 +05:30
Kapil Gupta 04174c4928 Merge branch 'bugfix/concurrency_issue_roam_app' into 'master' 
fix(esp_wifi): Add some fixes in roaming app

See merge request espressif/esp-idf!42262
 2025-09-30 23:25:48 +05:30
Kapil Gupta cf65928773 fix(esp_wifi): Cancel roaming_app_periodic_scan_internal_handler correctly 2025-09-30 14:18:29 +08:00
Kapil Gupta a75a3710c4 fix(esp_wifi): Add some fixes in roaming app 2025-09-30 14:18:29 +08:00
Kapil Gupta e8f75f97b0 Merge branch 'feat/roaming_app_blacklist' into 'master' 
fix(esp_wifi): Add blacklist logic in roaming app

Closes WIFIBUG-1219, WIFIBUG-1208, WIFIBUG-1109, WIFIBUG-1203, and WIFIBUG-1428

See merge request espressif/esp-idf!40802
 2025-09-28 21:44:31 +05:30
Kapil Gupta 0f3034586b fix(esp_wifi): Address some review comments and issues 2025-09-28 11:53:01 +08:00
Kapil Gupta 7d18b82575 feat(roaming): ignore WPA2-only APs on transition disable 
This commit introduces a new feature to the roaming logic. If the
currently connected AP has the 'transition disable' bit set in its
RSN IE, the roaming logic will now ignore any scanned APs that only
support WPA2-PSK. This prevents a security downgrade when roaming in a
mixed WPA2/WPA3 environment.

A new Kconfig option, CONFIG_ESP_WIFI_IGNORE_WPA2_ONLY_ON_TRANSITION_DISABLE,
has been added to control this feature. It is disabled by default.
 2025-09-28 11:53:01 +08:00
Kapil Gupta 074b2d0f93 fix(roaming_app): resolve issues in blacklisting logic 
This commit addresses several issues in the BSSID blacklisting
feature of the roaming application:

- Merged duplicate  functions into a single,
  unified function, resolving a compilation error.
- Corrected  and
  to properly access the  member of the
  struct, fixing invalid memory access.
- Introduced  in Kconfig to enable
  the manual blacklisting feature and made auto-blacklisting
  dependent on it.
- Updated  to use the
  correct BSSID from .
- Optimized the removal of expired blacklist entries by using
   for better efficiency.
 2025-09-28 11:53:01 +08:00
Kapil Gupta a7d2066913 fix(esp_wifi): Add blacklist logic in roaming app 2025-09-28 11:53:01 +08:00
Kapil Gupta 8b68791996 fix(tool): increase buffer size for kconfig server 2025-09-27 17:55:28 +05:30
Kapil Gupta 552a8653ad fix(esp_wifi): Fix some compilation issues in examples 2025-09-26 21:51:38 +05:30
Kapil Gupta 7b665b6512 fix(esp_wifi): Correct some documentation 2025-09-26 21:43:32 +05:30
Kapil Gupta f12debf4f5 fix(esp_wifi): Updated some documentation 2025-09-26 21:43:05 +05:30
Kapil Gupta ce00aa9b78 fix(esp_wifi): Address review comments 2025-09-26 21:42:46 +05:30
Kapil Gupta 2563d6a2e8 fix(esp_wifi): Add dummy value for deprecated enums 2025-09-26 21:42:30 +05:30
Kapil Gupta 0f63b92501 fix(esp_wifi): remove esp_interface.h and update usages 2025-09-26 21:42:30 +05:30
Kapil Gupta a28fefcf73 docs: add Wi-Fi migration guide for v6.0 2025-09-26 21:42:30 +05:30
Kapil Gupta 5898086eca fix(esp_wifi): Remove some more deprecated enum/functions 2025-09-26 21:42:30 +05:30
Kapil Gupta f189052386 fix(esp_wifi): Remove esp_interface.h 2025-09-26 21:42:30 +05:30
Kapil Gupta 35f8d9d42c fix(esp_wifi): Remove deprecated arguments from some APIs 2025-09-26 21:42:30 +05:30
Kapil Gupta f2cd005473 fix(esp_wifi): Removed deprecated rrm function 2025-09-26 21:42:30 +05:30
Kapil Gupta b6e632900b fix(esp_wifi): Remove deprecated event for DPP 2025-09-26 21:42:29 +05:30
Kapil Gupta 6bb3306154 fix(esp_wifi): Remove deprecated esp_wpa2.h 2025-09-26 21:42:29 +05:30
Kapil Gupta 1e1d5601de refactor(esp_wifi): Remove WPS task code 2025-09-24 12:52:52 +08:00
Kapil Gupta 9b2f439ce2 Merge branch 'bugfix/eloop_lock' into 'master' 
Made changes related to registering eloop timeout for eloop lock

Closes WIFIBUG-1306

See merge request espressif/esp-idf!40384
 2025-09-23 18:10:52 +05:30
Kapil Gupta 0f215a4057 Merge branch 'bugfix/roam_app_neighbor_crash' into 'master' 
fix(wifi_apps): Fix crash due to neighbor_list lock

Closes IDFGH-16029

See merge request espressif/esp-idf!40854
 2025-09-23 14:24:18 +05:30
Kapil Gupta b789198c9b Merge branch 'bugfix/cleanup_ctr_drbg' into 'master' 
wpa_supplicant: Replace use of mbedtls_ctr_drbg with esp_mbedtls_random()

Closes IDFGH-14978

See merge request espressif/esp-idf!39221
 2025-09-18 11:30:10 +05:30
Kapil Gupta 2d1b94cdc7 Merge branch 'bugfix/add_dependency_suiteb_on_enterprise' into 'master' 
fix(esp_wifi): Add depenedency of 192 bit config on wifi enterprise

Closes IDFGH-16434

See merge request espressif/esp-idf!41836
 2025-09-17 16:40:52 +05:30
Kapil Gupta 65ab48229e fix(esp_wifi): Add depenedency of 192 bit config on wifi enterprise 
Closes https://github.com/espressif/esp-idf/issues/17567
 2025-09-17 14:03:23 +08:00
Kapil Gupta 88d71da23f fix(mbedtls): Addressed comments on PR15679 2025-09-16 22:10:53 +05:30
Kapil Gupta f82bcd2a65 Merge branch 'bugfix/dpp_roc_loop_error' into 'master' 
fix(esp_wifi): Correctly set roc_in_progress flag

Closes WIFI-7013

See merge request espressif/esp-idf!41722
 2025-09-14 22:52:56 +05:30
Kapil Gupta fe9dbc2b1d fix(esp_wifi): skip call to esp_fast_psk() when hardware SHA is not supported 2025-08-25 11:05:25 +08:00
Kapil Gupta 76d24d2fe5 Merge branch 'feat/eap_method_limit' into 'master' 
feat(esp_wifi): Add support to limit EAP methods

See merge request espressif/esp-idf!40198
 2025-07-10 11:44:14 +05:30
Kapil Gupta 6c309b29e9 feat(esp_wifi): Add support to limit EAP methods 2025-07-10 11:44:14 +05:30
Kapil Gupta f90f7a5c85 fix (esp_wifi): Set default akm as eap for non AKM APs 2025-07-04 11:04:41 +08:00
Kapil Gupta eae83f993e fix(wpa_supplicant): Delay sending of EAP_START for EAP auth 2025-07-04 11:04:41 +08:00
Kapil Gupta bc93cee52e Merge branch 'bugfix/set_default_ap_mgmt_cipher' into 'master' 
fix(esp_wifi): Set default ap mgmt cipher

See merge request espressif/esp-idf!39691
 2025-06-06 14:00:04 +05:30
Kapil Gupta 514853d2e3 fix(esp_wifi): Set default ap mgmt cipher 2025-06-05 15:35:20 +05:30
Kapil Gupta 3c84fd7b4d fix(esp_wifi): Make sure old DPP listen is cancelled 2025-06-05 16:55:21 +08:00
Kapil Gupta ab9304d3b7 fix(esp_wifi): Modify check for dpp event handlers 2025-06-05 16:55:21 +08:00
Kapil Gupta a929aae33f change(esp_wifi): Update dpp enrollee example to use updated events 2025-06-05 16:55:21 +08:00
Kapil Gupta 15c336bf49 fix(esp_wifi): Update dpp code to send events in freeRTOS context 2025-06-05 16:55:21 +08:00
Kapil Gupta 76723c063a fix(esp_wifi): Fixed DPP concurrency issue 2025-06-05 16:55:21 +08:00
Kapil Gupta 4ce1da7569 Merge branch 'fix/bcast_mgmt_api' into 'master' 
Add BIP support for AP mode.

Closes WIFIBUG-1155

See merge request espressif/esp-idf!38249
 2025-06-03 21:46:01 +05:30
Kapil Gupta 17cd200c67 fix(esp_wifi): Fixed static analyzer issues 2025-05-21 09:26:40 +05:30
Kapil Gupta 2ce481ffbd fix(esp_wifi): Disble IP renew skip by default 2025-05-21 09:00:09 +05:30
Kapil Gupta cf0166d196 fix(esp_wifi): Use supplicant's internal SHA1 if not available from IDF 2025-04-21 13:38:29 +05:30
Kapil Gupta b33394907b Merge branch 'bugfix/ssc_compilation_wps' into 'master' 
bugfix(wpa_supplicant): Fix build errors when Supplicant logs are enabled

Closes WIFIBUG-1141

See merge request espressif/esp-idf!38481
 2025-04-18 07:14:41 +08:00
Kapil Gupta 9c75d7961c Merge branch 'bugfix/h2e_porting_improvement' into 'master' 
change(esp_wifi): Improve handling group parameter A in H2E

Closes IDFGH-14994 and IDFGH-14995
Closes https://github.com/espressif/esp-idf/issues/15691
Closes https://github.com/espressif/esp-idf/pull/15692

See merge request espressif/esp-idf!38319
 2025-04-15 18:36:12 +08:00
Kapil Gupta 6e1b2aa23f ci(esp_wifi): Extend eloop test to verify wifi deinit properly 2025-04-14 21:14:23 +05:30
Kapil Gupta 859d18a123 fix(esp_wifi): Fixed some concurrency issues in eloop deinit 2025-04-14 21:14:17 +05:30
Kapil Gupta bfc86f6094 fix(esp_wifi): Removal of task posting code and use pptask instead 2025-04-14 20:30:53 +05:30
Kapil Gupta a96d680fc5 fix(esp_wifi): Add various DPP fixes observed during testing 2025-04-14 20:30:53 +05:30
Kapil Gupta 4dac5482e3 fix(esp_wifi): Add eloop blocking call API for public APIs 2025-04-14 20:30:47 +05:30
Kapil Gupta f025008d4e ci(esp_wifi): Add h2e testcase 2025-04-09 11:17:00 +05:30
Kapil Gupta 6b5ac56b9d Merge branch 'feat/eap_domain_check' into 'master' 
esp_wifi: Add EAP domain validation support

Closes IDFGH-14822

See merge request espressif/esp-idf!37668
 2025-04-08 20:23:06 +08:00
Kapil Gupta 7f2814a0da fix(esp_wifi): Flush PMK when EAP config is changed 2025-04-08 12:45:00 +05:30
Kapil Gupta 0b20847e2d fix(esp_wifi): Increase WPS timeout 2025-04-08 00:23:52 +08:00