Commit Graph
100 Commits
Author SHA1 Message Date
Kapil Gupta ce8fb56f9b fix(wpa_supplicant): Correct some functions in crypto porting layer 2026-07-17 13:52:44 +05:30
Kapil Gupta 473dd5df7a fix(mbedtls): Fix cached Rinv size mismatch under private exponent blinding
Prevent signature verification failures on targets that do not round hardware words
to 16-word boundaries (e.g. ESP32-S3, ESP32-C6, and ESP32-P4), where exponent blinding
can cause `num_words` to vary between calls, leading to reuse of an incorrectly sized
cached `Rinv`.
2026-06-30 14:17:12 +08:00
Kapil Gupta 758dde1457 fix(mbedtls): Enable hardware CRT for RSA-4096 via base reduction
Perform modulo reduction on the base before size checks to allow RSA-4096
CRT (2048-bit exponentiations) to use the hardware accelerator instead of
falling back to software. Fix input validation, negative zero sign issues,
and early memory cleanup paths in esp_mpi_exp_mod()
2026-06-30 14:17:12 +08:00
Kapil Gupta 4206630b5f fix(esp_wifi): Isolate wifi-remote API check from local station build
Use scripts/station_gen_build with -B and -D SDKCONFIG so generate_and_check
does not read the station example's sdkconfig or build tree. Apply
sdkconfig.defaults and IDF_TARGET=esp32 for stable header preprocessing.

Unset GIT_DIR/GIT_INDEX_FILE (and related vars) before git subprocesses so
pre-commit and git worktrees do not mis-resolve paths after cd into scripts.
2026-06-12 14:49:19 +05:30
Kapil Gupta 48d253bc26 refactor(wpa_supplicant): add shared psa_import_aes_key helper
Centralize PSA AES key import used by ECB, CBC, CTR, CCM, CMAC, and
NIST key-wrap paths in crypto_mbedtls.c.
2026-06-05 12:11:53 +05:30
Kapil Gupta 613ff76550 fix(wpa_supplicant): migrate aes_wrap to PSA NIST-KW API
mbedTLS 3.x removed mbedtls_nist_kw_context; use psa_import_key and
mbedtls_nist_kw_wrap/unwrap with PSA key IDs instead.

Closes https://github.com/espressif/esp-idf/issues/18678
2026-06-05 12:11:53 +05:30
Kapil Gupta de91d9fb71 fix(esp_wifi): Correct igtk key installation in ft 2026-06-03 08:53:38 +05:30
Kapil Gupta c75736fadb ci(esp_wifi_remote): Optimize reconfigure targets 2026-06-01 16:18:46 +05:30
Kapil Gupta 496a82fdd1 ci(esp_remote): Add wifi-remote pre-commit hook 2026-06-01 16:18:46 +05:30
Kapil Gupta 80efe65d06 fix(esp_wifi): Increase partition size of app for NaN console 2026-05-27 18:43:40 +05:30
Kapil Gupta 331fa92f68 fix(roaming): prevent timeout payload double-free on deinit
Track timeout user_data before registration, untrack on register failure
2026-05-12 13:50:14 +08:00
Kapil Gupta 4721a8849b fix(esp_wifi): Allow M1 in pmk caching case 2026-05-11 23:09:21 +05:30
Kapil Gupta 797059d239 fix(esp_wifi): Add support to bypass rng for bringup 2026-05-11 14:10:11 +05:30
Kapil Gupta b585c0b364 fix(esp_wifi): Fixed some issues in roaming app found using static analysis 2026-05-06 15:50:54 +08:00
Kapil Gupta 1085d83c48 fix(esp_wifi): Update wifi lib pointer 2026-05-06 12:09:41 +05:30
Kapil Gupta 1d14e269b8 fix(esp_wifi): Drop broadcast fragmented frames 2026-05-05 13:49:02 +05:30
Kapil Gupta a6f5c15aca fix(esp_wifi): Fixed some issues in esp_supplicant code 2026-05-01 12:38:53 +05:30
Kapil Gupta 3368b271f5 fix(esp_wifi): Redesigned eloop code and extend UTs 2026-05-01 12:38:45 +05:30
Kapil Gupta fba7f6df97 Merge branch 'ci/wifi_remote_hook_cleanup' into 'master'
ci(esp_wifi): Update cleanup in script

See merge request espressif/esp-idf!48057
2026-04-30 16:37:12 +05:30
Kapil Gupta cbac39c984 ci(esp_wifi_remote): silently exit if related files are not modified 2026-04-30 09:42:29 +05:30
Kapil Gupta 0f1a1503ad ci(esp_wifi): Update cleanup in script 2026-04-29 09:55:30 +05:30
Kapil Gupta 1886d5269e Merge branch 'bugfix/fix_dangling_pointer_issue' into 'master'
fix(esp_wifi): clean up fragment rx flow

Closes WIFIBUG-1853

See merge request espressif/esp-idf!47915
2026-04-27 15:44:08 +05:30
Kapil Gupta e137133d75 fix(esp_remote): Remove idf_build_apps dependency from script 2026-04-27 15:12:20 +05:30
Kapil Gupta b700548c49 fix(wpa_supplicant): Fix issues reported by compiler 2026-04-24 20:12:40 +05:30
Kapil Gupta 41e67e1efb Merge branch 'bugfix/wps_pin_len' into 'master'
fix(wpa_supplicant): initialize wps pin len correctly

See merge request espressif/esp-idf!47326
2026-04-24 16:12:37 +05:30
Kapil Gupta 2670cbf4a6 Merge branch 'ci/wifi_remote_header_correction' into 'master'
ci(esp_remote): Add wifi-remote pre-commit hook

See merge request espressif/esp-idf!46204
2026-04-24 15:16:32 +05:30
Kapil Gupta 11a0dfcc7c ci(esp_remote): Add wifi-remote pre-commit hook 2026-04-24 15:16:32 +05:30
Kapil Gupta cb84db85ca fix(esp_wifi): clean up fragment rx flow 2026-04-24 13:07:50 +05:30
Kapil Gupta c1e8db338d Merge branch 'bugfix/pbkdf2_sha1_psa_fallback' into 'master'
fix(esp_wifi): Fallback to pbkdf2_sha1_psa when fast options are disabled

Closes WIFI-7330

See merge request espressif/esp-idf!47912
2026-04-24 12:29:32 +05:30
Kapil Gupta e113651adf fix(esp_wifi): Fallback to pbkdf2_sha1_psa when fast options are disabled 2026-04-24 10:15:50 +05:30
Kapil Gupta 8e4367bbf2 Merge branch 'bugfix/fastpsk_optimization' into 'master'
fast psk optimization

Closes WIFI-7330

See merge request espressif/esp-idf!47658
2026-04-24 07:20:38 +05:30
Kapil Gupta dd8a769d34 ci(esp_wifi): skip timing test if hw not available 2026-04-23 12:25:20 +05:30
Kapil Gupta e372a52e8f fix(wpa_supplicant): Only use fastpsk/fastpbkdf2 when hw available 2026-04-23 12:23:47 +05:30
Kapil Gupta 69b3391e5f Merge branch 'bugfix/static_analysis_issue_supplicant' into 'master'
fix(supplicant): resolve constant expression warning in crypto_ecdh_output_size

Closes IDF-15548

See merge request espressif/esp-idf!47650
2026-04-20 12:40:57 +05:30
Kapil Gupta 3c70d52b89 Merge branch 'bugfix/wps_frag_handling' into 'master'
fix(wps): harden enrollee WSC fragment handling

Closes WIFIBUG-1801

See merge request espressif/esp-idf!47084
2026-04-20 00:26:01 +05:30
Kapil Gupta 7774285b7d fix(esp_wifi): Move unnecessary PMF prints to verbose 2026-04-17 14:34:56 +05:30
Kapil Gupta a39e3035cf fix(wpa_supplicant): Add optimizations in fastpsk 2026-04-17 12:50:44 +05:30
Kapil Gupta fd883d87ac fix(esp_wifi): Address review comments on MR 2026-04-16 19:07:24 +05:30
Kapil Gupta ca94acf4de Merge branch 'bugfix/validate_ptk_generation' into 'master'
fix(esp_wifi): fail if ptk derivation fails

See merge request espressif/esp-idf!47643
2026-04-16 18:47:52 +05:30
Kapil Gupta 6aabf3706f fix(supplicant): resolve constant expression warning in crypto_ecdh_output_size
Use PSA_BITS_TO_BYTES(key_bits) directly instead of
PSA_RAW_KEY_AGREEMENT_OUTPUT_SIZE(PSA_KEY_TYPE_ECC_KEY_PAIR(...))
to eliminate a tautological type check that always evaluates to the same result.
2026-04-15 20:42:24 +05:30
Kapil Gupta 9dd1c015db fix(esp_wifi): fail if ptk derivation fails 2026-04-15 15:26:48 +05:30
Kapil Gupta 957313d4c3 fix(esp_wifi): Skip allocation of new buffers during EAP processing 2026-04-13 17:14:26 +08:00
Kapil Gupta 0dbe3b6701 Merge branch 'feat/dpp_crypto_optimization' into 'master'
fix(esp_wifi): Optimize crypto operations for DPP

See merge request espressif/esp-idf!46862
2026-04-12 09:00:25 +05:30
Kapil Gupta 85c164c2b7 fix(esp_wifi): Optimize crypto operations for DPP 2026-04-12 09:00:25 +05:30
Kapil Gupta 4707f8ee7d fix(esp_wifi): Disconnect before sending WPS success event 2026-03-31 14:48:44 +05:30
Kapil Gupta 91997ec7d2 fix(esp_wifi): Address some issues in esp_supplicant WPS states 2026-03-30 11:35:16 +05:30
Kapil Gupta d388fc268d fix(wps): harden enrollee WSC fragment handling 2026-03-27 15:00:27 +05:30
Kapil Gupta 24dd3d563e Merge branch 'feat/sae_calculation_optimizations' into 'master'
esp_wifi: Optimize crypto operations for SAE

Closes WIFIBUG-1760, WIFIBUG-1363, WIFIBUG-1701, WIFIBUG-1246, and IDF-15009

See merge request espressif/esp-idf!46539
2026-03-23 10:55:24 +05:30
Kapil Gupta 1f6e32ee78 fix(esp_wifi): Optimize crypto operations for SAE
- Montgomery multiplication fast path for P-256 mulmod
- Jacobi symbol for legendre (replacing exp_mod)
- Software Jacobian point multiplication for MPI-only chips
- ECC hardware acceleration for supported chips
2026-03-20 19:44:09 +05:30
Kapil Gupta 30efa77a80 ci(esp_wifi): Update supplicant's crypto Unit test cases 2026-03-20 19:44:09 +05:30
Kapil Gupta a359bfa614 fix(esp_wifi): Fix min scan time for btm scan 2026-03-06 08:36:43 +05:30
Kapil Gupta e2338ce516 Merge branch 'bugfix/wps_disable_stop_scan' into 'master'
fix(wifi): Stop scan when wps is disabled

Closes WIFIBUG-1633

See merge request espressif/esp-idf!45066
2026-03-05 15:34:12 +05:30
Kapil Gupta 53cdf7bc34 Merge branch 'bugfix/eap_tls_psa_crypto_fail' into 'master'
fix(esp_wifi): EAP TLS RSA verify and CBC record decrypt with PSA crypto

Closes WIFIBUG-1745

See merge request espressif/esp-idf!46056
2026-02-27 12:38:14 +05:30
Kapil Gupta 724f1fcaeb fix(esp_wifi): EAP TLS RSA verify and CBC record decrypt with PSA crypto 2026-02-25 15:24:50 +05:30
Kapil Gupta 78d06aae6e fix(esp_wifi): Add alt snonce verification in softAP 2026-02-24 10:53:15 +05:30
Kapil Gupta 63f6d822ae Merge branch 'bugfix/dpp_concurrency_issue' into 'master'
fix(esp_wifi): Execute DPP event handlers in eloop context

Closes WIFIBUG-1543

See merge request espressif/esp-idf!45718
2026-02-13 12:56:04 +05:30
Kapil Gupta b7a1e385f0 fix(esp_wifi): Execute DPP event handlers in eloop context 2026-02-11 12:30:35 +05:30
Kapil Gupta b90878aead Merge branch 'bugfix/wps_disable_at_timeout' into 'master'
fix(wifi): Disable wps in eloop context during wps abort

See merge request espressif/esp-idf!45723
2026-02-11 08:05:55 +05:30
Kapil Gupta d83df5d9ea docs: update vulnerabilities guide to mention CVE-2026-25532 2026-02-04 12:23:06 +05:30
Kapil Gupta 1452042ae8 Merge branch 'fix/offchan_roc_unit_test' into 'master'
CI: Fix offchan tx and roc related unit test case

Closes IDFCI-3347 and IDFCI-5037

See merge request espressif/esp-idf!42883
2026-01-28 12:25:00 +05:30
Kapil Gupta f10dc34880 fix(esp_wifi): Fix bug where wps_finish is called recursively 2026-01-21 11:10:59 +05:30
Kapil Gupta 1eb2c9249a Merge branch 'bugfix/wps_reg_crash' into 'master'
fix(wifi): Add check before allocating eapol sm

See merge request espressif/esp-idf!43273
2026-01-17 11:03:06 +05:30
Kapil Gupta f6200b85f5 Merge branch 'bugfix/dpp_auth_ctx_validation' into 'master'
fix(esp_wifi): Validate dpp auth instance before using it

Closes WIFIBUG-1539

See merge request espressif/esp-idf!43031
2026-01-05 18:37:36 +05:30
Kapil Gupta c001c8715f fix(esp_wifi): Validate dpp auth instance before using it 2026-01-05 18:37:36 +05:30
Kapil Gupta b88befde6b fix(esp_wifi): Fix invalid memory accesses in supplicant code 2025-12-10 20:19:56 +05:30
Kapil Gupta 4e1b768353 Merge branch 'bugfix/roaming_app_condition_compilation' into 'master'
Bugfix/roaming app condition compilation

Closes IDFGH-16568 and WIFIBUG-1493

See merge request espressif/esp-idf!42434
2025-12-10 17:49:50 +05:30
Kapil Gupta 6ad7b92097 fix(esp_wifi): Change some defaults in roaming app 2025-12-04 17:43:31 +08:00
Kapil Gupta 43bec17ed3 fix(esp_wifi): Use correct variable for neighbour report 2025-12-04 17:43:31 +08:00
Kapil Gupta 9c804f1158 fix(esp_wifi): Check conditional compilation for roaming app features 2025-12-04 17:43:31 +08:00
Kapil Gupta 092338b78d fix(esp_wifi): Add validation before accessing RSNXE 2025-10-09 09:32:56 +05:30
Kapil Gupta 04174c4928 Merge branch 'bugfix/concurrency_issue_roam_app' into 'master'
fix(esp_wifi): Add some fixes in roaming app

See merge request espressif/esp-idf!42262
2025-09-30 23:25:48 +05:30
Kapil Gupta cf65928773 fix(esp_wifi): Cancel roaming_app_periodic_scan_internal_handler correctly 2025-09-30 14:18:29 +08:00
Kapil Gupta a75a3710c4 fix(esp_wifi): Add some fixes in roaming app 2025-09-30 14:18:29 +08:00
Kapil Gupta e8f75f97b0 Merge branch 'feat/roaming_app_blacklist' into 'master'
fix(esp_wifi): Add blacklist logic in roaming app

Closes WIFIBUG-1219, WIFIBUG-1208, WIFIBUG-1109, WIFIBUG-1203, and WIFIBUG-1428

See merge request espressif/esp-idf!40802
2025-09-28 21:44:31 +05:30
Kapil Gupta 0f3034586b fix(esp_wifi): Address some review comments and issues 2025-09-28 11:53:01 +08:00
Kapil Gupta 7d18b82575 feat(roaming): ignore WPA2-only APs on transition disable
This commit introduces a new feature to the roaming logic. If the
currently connected AP has the 'transition disable' bit set in its
RSN IE, the roaming logic will now ignore any scanned APs that only
support WPA2-PSK. This prevents a security downgrade when roaming in a
mixed WPA2/WPA3 environment.

A new Kconfig option, CONFIG_ESP_WIFI_IGNORE_WPA2_ONLY_ON_TRANSITION_DISABLE,
has been added to control this feature. It is disabled by default.
2025-09-28 11:53:01 +08:00
Kapil Gupta 074b2d0f93 fix(roaming_app): resolve issues in blacklisting logic
This commit addresses several issues in the BSSID blacklisting
feature of the roaming application:

- Merged duplicate  functions into a single,
  unified function, resolving a compilation error.
- Corrected  and
  to properly access the  member of the
  struct, fixing invalid memory access.
- Introduced  in Kconfig to enable
  the manual blacklisting feature and made auto-blacklisting
  dependent on it.
- Updated  to use the
  correct BSSID from .
- Optimized the removal of expired blacklist entries by using
   for better efficiency.
2025-09-28 11:53:01 +08:00
Kapil Gupta a7d2066913 fix(esp_wifi): Add blacklist logic in roaming app 2025-09-28 11:53:01 +08:00
Kapil Gupta 8b68791996 fix(tool): increase buffer size for kconfig server 2025-09-27 17:55:28 +05:30
Kapil Gupta 552a8653ad fix(esp_wifi): Fix some compilation issues in examples 2025-09-26 21:51:38 +05:30
Kapil Gupta 7b665b6512 fix(esp_wifi): Correct some documentation 2025-09-26 21:43:32 +05:30
Kapil Gupta f12debf4f5 fix(esp_wifi): Updated some documentation 2025-09-26 21:43:05 +05:30
Kapil Gupta ce00aa9b78 fix(esp_wifi): Address review comments 2025-09-26 21:42:46 +05:30
Kapil Gupta 2563d6a2e8 fix(esp_wifi): Add dummy value for deprecated enums 2025-09-26 21:42:30 +05:30
Kapil Gupta 0f63b92501 fix(esp_wifi): remove esp_interface.h and update usages 2025-09-26 21:42:30 +05:30
Kapil Gupta a28fefcf73 docs: add Wi-Fi migration guide for v6.0 2025-09-26 21:42:30 +05:30
Kapil Gupta 5898086eca fix(esp_wifi): Remove some more deprecated enum/functions 2025-09-26 21:42:30 +05:30
Kapil Gupta f189052386 fix(esp_wifi): Remove esp_interface.h 2025-09-26 21:42:30 +05:30
Kapil Gupta 35f8d9d42c fix(esp_wifi): Remove deprecated arguments from some APIs 2025-09-26 21:42:30 +05:30
Kapil Gupta f2cd005473 fix(esp_wifi): Removed deprecated rrm function 2025-09-26 21:42:30 +05:30
Kapil Gupta b6e632900b fix(esp_wifi): Remove deprecated event for DPP 2025-09-26 21:42:29 +05:30
Kapil Gupta 6bb3306154 fix(esp_wifi): Remove deprecated esp_wpa2.h 2025-09-26 21:42:29 +05:30
Kapil Gupta 1e1d5601de refactor(esp_wifi): Remove WPS task code 2025-09-24 12:52:52 +08:00
Kapil Gupta 9b2f439ce2 Merge branch 'bugfix/eloop_lock' into 'master'
Made changes related to registering eloop timeout for eloop lock

Closes WIFIBUG-1306

See merge request espressif/esp-idf!40384
2025-09-23 18:10:52 +05:30
Kapil Gupta 0f215a4057 Merge branch 'bugfix/roam_app_neighbor_crash' into 'master'
fix(wifi_apps): Fix crash due to neighbor_list lock

Closes IDFGH-16029

See merge request espressif/esp-idf!40854
2025-09-23 14:24:18 +05:30
Kapil Gupta b789198c9b Merge branch 'bugfix/cleanup_ctr_drbg' into 'master'
wpa_supplicant: Replace use of mbedtls_ctr_drbg with esp_mbedtls_random()

Closes IDFGH-14978

See merge request espressif/esp-idf!39221
2025-09-18 11:30:10 +05:30
Kapil Gupta 2d1b94cdc7 Merge branch 'bugfix/add_dependency_suiteb_on_enterprise' into 'master'
fix(esp_wifi): Add depenedency of 192 bit config on wifi enterprise

Closes IDFGH-16434

See merge request espressif/esp-idf!41836
2025-09-17 16:40:52 +05:30
Kapil Gupta 65ab48229e fix(esp_wifi): Add depenedency of 192 bit config on wifi enterprise
Closes https://github.com/espressif/esp-idf/issues/17567
2025-09-17 14:03:23 +08:00
Kapil Gupta 88d71da23f fix(mbedtls): Addressed comments on PR15679 2025-09-16 22:10:53 +05:30
Kapil Gupta f82bcd2a65 Merge branch 'bugfix/dpp_roc_loop_error' into 'master'
fix(esp_wifi): Correctly set roc_in_progress flag

Closes WIFI-7013

See merge request espressif/esp-idf!41722
2025-09-14 22:52:56 +05:30