Commit Graph
100 Commits
Author SHA1 Message Date
Kapil Gupta 57d95ead73 ci(wpa_supplicant): Add UT for supplicant crypto 2026-04-26 10:06:40 +05:30
Kapil Gupta 28ef80d57c fix(esp_wifi): Optimize crypto operations for SAE
- Montgomery multiplication fast path for P-256 mulmod
- Jacobi symbol for legendre (replacing exp_mod)
- Software Jacobian point multiplication for MPI-only chips
- ECC hardware acceleration for supported chips
- ECDH fast path for P-256
2026-04-25 17:00:15 +05:30
Kapil Gupta 65d4abc309 ci(esp_wifi): skip timing test if hw not available 2026-04-25 14:54:52 +05:30
Kapil Gupta f2dcdc1b9c fix(wpa_supplicant): Add optimizations in fastpsk 2026-04-25 14:53:52 +05:30
Kapil Gupta a8dc008c54 Merge branch 'bugfix/wps_frag_handling_v5.4' into 'release/v5.4'
fix(wps): harden enrollee WSC fragment handling (v5.4)

See merge request espressif/esp-idf!47858
2026-04-24 18:52:58 +05:30
Kapil Gupta 97f1d8eeb8 fix(esp_wifi): clean up fragment rx flow 2026-04-24 14:22:58 +05:30
Kapil Gupta c0e310eca4 fix(esp_wifi): fail if ptk derivation fails 2026-04-23 12:00:10 +05:30
Kapil Gupta 618f9ac28c fix(esp_wifi): Skip allocation of new buffers during EAP processing 2026-04-23 09:47:57 +05:30
Kapil Gupta e49f956c64 fix(esp_wifi): Address review comments on MR 2026-04-22 16:30:40 +05:30
Kapil Gupta 9e61d174cd fix(esp_wifi): Disconnect before sending WPS success event 2026-04-22 16:30:40 +05:30
Kapil Gupta e47d57d9e4 fix(esp_wifi): Address some issues in esp_supplicant WPS states 2026-04-22 16:30:40 +05:30
Kapil Gupta 620c2e8adc fix(wps): harden enrollee WSC fragment handling 2026-04-22 16:30:40 +05:30
Kapil Gupta 98521414f1 fix(esp_wifi): Fix min scan time for btm scan 2026-03-10 11:06:00 +05:30
Kapil Gupta d588a95acb fix(esp_wifi): Add alt snonce verification in softAP 2026-03-04 12:02:44 +05:30
Kapil Gupta 2bc5cb0ea5 fix(esp_wifi): Fix bug where wps_finish is called recursively 2026-02-28 11:48:37 +08:00
Kapil Gupta f973a3292f docs: update vulnerabilities guide to mention CVE-2026-25532 2026-02-04 14:31:02 +05:30
Kapil Gupta acd7b505de Merge branch 'bugfix/invalid_memory_access_supplicant_v5.4' into 'release/v5.4'
fix(esp_wifi): Fix some invalid memory access (v5.4)

See merge request espressif/esp-idf!44275
2026-01-26 15:25:24 +05:30
Kapil Gupta 73a587d42a fix(esp_wifi): Fix invalid memory accesses in supplicant code 2026-01-26 14:09:44 +05:30
Kapil Gupta f58a379b2f fix(esp_wifi): Change some defaults in roaming app 2026-01-08 14:49:41 +05:30
Kapil Gupta f3b4a05848 fix(esp_wifi): Use correct variable for neighbour report 2026-01-08 14:49:29 +05:30
Kapil Gupta 13515bc1e1 fix(esp_wifi): Check conditional compilation for roaming app features 2026-01-08 14:49:19 +05:30
Kapil Gupta 54f5970464 fix(esp_wifi): Cancel roaming_app_periodic_scan_internal_handler correctly 2026-01-08 14:49:04 +05:30
Kapil Gupta 025de31dc9 fix(esp_wifi): Add some fixes in roaming app 2026-01-08 14:49:04 +05:30
Kapil Gupta 29811c1630 fix(esp_wifi): Address some review comments and issues 2026-01-08 14:49:04 +05:30
Kapil Gupta b1b6e0f1fa feat(roaming): ignore WPA2-only APs on transition disable
This commit introduces a new feature to the roaming logic. If the
currently connected AP has the 'transition disable' bit set in its
RSN IE, the roaming logic will now ignore any scanned APs that only
support WPA2-PSK. This prevents a security downgrade when roaming in a
mixed WPA2/WPA3 environment.

A new Kconfig option, CONFIG_ESP_WIFI_IGNORE_WPA2_ONLY_ON_TRANSITION_DISABLE,
has been added to control this feature. It is disabled by default.
2026-01-08 14:49:04 +05:30
Kapil Gupta 19b510c261 fix(roaming_app): resolve issues in blacklisting logic
This commit addresses several issues in the BSSID blacklisting
feature of the roaming application:

- Merged duplicate  functions into a single,
  unified function, resolving a compilation error.
- Corrected  and
  to properly access the  member of the
  struct, fixing invalid memory access.
- Introduced  in Kconfig to enable
  the manual blacklisting feature and made auto-blacklisting
  dependent on it.
- Updated  to use the
  correct BSSID from .
- Optimized the removal of expired blacklist entries by using
   for better efficiency.
2026-01-08 14:49:04 +05:30
Kapil Gupta a105dc6064 fix(esp_wifi): Add blacklist logic in roaming app 2026-01-08 14:49:04 +05:30
Kapil Gupta e8c27ff92a fix(esp_wifi): skip call to esp_fast_psk() when hardware SHA is not supported 2025-12-05 15:04:56 +08:00
Kapil Gupta 4495803370 Merge branch 'bugfix/cleanup_ctr_drbg_v5.4' into 'release/v5.4'
wpa_supplicant: Replace use of mbedtls_ctr_drbg with esp_mbedtls_random() (v5.4)

See merge request espressif/esp-idf!42376
2025-11-15 19:58:23 +05:30
Kapil Gupta 2ecb81d745 refactor(esp_wifi): Remove WPS task code 2025-10-09 23:25:09 +05:30
Kapil Gupta 3cf1f74776 fix(mbedtls): Addressed comments on PR15679 2025-10-06 11:27:16 +05:30
Kapil Gupta eb93cd9932 fix(esp_wifi): Add depenedency of 192 bit config on wifi enterprise
Closes https://github.com/espressif/esp-idf/issues/17567
2025-09-21 12:31:00 +05:30
Kapil Gupta 1502a50bc6 fix (esp_wifi): Set default akm as eap for non AKM APs 2025-08-28 11:02:26 +05:30
Kapil Gupta 5e91cd87a8 fix(wpa_supplicant): Delay sending of EAP_START for EAP auth 2025-08-28 11:00:10 +05:30
Kapil Gupta 297c9de26a fix(esp_wifi): Address review comments 2025-07-28 12:35:55 +05:30
Kapil Gupta 9c8ac5c3fb feat(esp_wifi): Add support to limit EAP methods
Added support to limit EAP method supported by device based on
user configuration.
2025-07-28 12:33:44 +05:30
Kapil Gupta 0a19eac18f fix(esp_wifi): Set default ap mgmt cipher 2025-07-25 16:53:25 +05:30
Kapil Gupta 2348bc3ff9 ci(esp_wifi): Extend eloop test to verify wifi deinit properly 2025-05-27 13:43:03 +05:30
Kapil Gupta 6d97c71d91 fix(esp_wifi): Fixed some concurrency issues in eloop deinit 2025-05-27 13:42:55 +05:30
Kapil Gupta 3e810f5936 fix(esp_wifi): Add eloop blocking call API for public APIs 2025-05-27 13:42:41 +05:30
Kapil Gupta 221f641eb8 fix(esp_wifi): Fixed static analyzer issues 2025-05-27 13:39:08 +05:30
Kapil Gupta 4514aa8e11 fix(esp_wifi): Disble IP renew skip by default 2025-05-27 13:37:23 +05:30
Kapil Gupta 0de5180d8a fix(esp_wifi): Increase WPS timeout 2025-05-06 12:46:42 +05:30
Kapil Gupta ad4f3277db fix(esp_wifi): Use supplicant's internal SHA1 if not available from IDF 2025-04-29 11:10:56 +05:30
Kapil Gupta a18ce5df2d Merge branch 'bugfix/roaming_app_issues_v5.4' into 'release/v5.4'
fix(wifi): Fix some issues observed in roaming app (v5.4)

See merge request espressif/esp-idf!37414
2025-04-11 19:34:05 +08:00
Kapil Gupta d255e7e7b5 fix(esp_wifi): Fix some compilation errors in roaming app 2025-04-11 15:49:12 +05:30
Kapil Gupta 5574205935 fix(esp_wifi): Removed unnecessary handlers to cleanup 2025-04-11 15:49:06 +05:30
Kapil Gupta 2b495713b2 fix(esp_wifi): Roaming app, sync api naming 2025-04-11 15:47:19 +05:30
Kapil Gupta e5915c3ce3 fix(esp_wifi): Some more cleanup for roaming app 2025-04-11 15:47:17 +05:30
Kapil Gupta 8ed1cf8050 fix(esp_wifi): moving around roaming app code a bit 2025-04-11 15:46:25 +05:30
Kapil Gupta 7c94365ce9 fix(roaming_app): Add get set config params for the app 2025-04-11 15:46:25 +05:30
Kapil Gupta e296094b00 fix(wifi): Provide a config option to skip IP renew during roam 2025-04-11 15:46:25 +05:30
Kapil Gupta 84ae3dc848 fix(esp_wifi): Set minimum scan time to 30ms in roaming app 2025-04-11 15:46:25 +05:30
Kapil Gupta 516551adc4 fix(wifi): Fix some issues observed in roaming app 2025-04-11 15:46:25 +05:30
Kapil Gupta 0cb892d6a2 Merge branch 'feature/github_pull_15073_v5.4' into 'release/v5.4'
feat(wpa_supplicant): Add optimized PSK implementation (v5.4)

See merge request espressif/esp-idf!38104
2025-04-09 00:21:40 +08:00
Kapil Gupta 582c2d8d4c fix(esp_wifi): Flush PMK when EAP config is changed 2025-04-08 17:58:24 +05:30
Kapil Gupta c2fad24731 fix(esp_wifi): Code cleanup for PR#15550 PR#15551
Closes https://github.com/espressif/esp-idf/pull/15550
Closes https://github.com/espressif/esp-idf/pull/15551
2025-04-08 17:57:27 +05:30
Kapil Gupta 2a0866ac9f fix(ci): Update UT to verify fast psk calculations
Also update some comments
2025-04-07 14:02:48 +08:00
Kapil Gupta b9f2ca9068 fix(esp_wifi): Add some comments in github PR 15073
Closes https://github.com/espressif/esp-idf/pull/15073
2025-04-07 14:02:48 +08:00
Kapil Gupta 2863fe328c fix(esp_wifi): Add alternate SHA1 APIs in WiFi
Add alternate SHA1 APIs to handle cases when
`CONFIG_MBEDTLS_SHA1_C` is disabled.
2025-04-01 12:40:55 +05:30
Kapil Gupta a2d0171a17 ci(wifi): Add builds for FT, RRM and WNM configs 2025-03-19 12:43:30 +05:30
Kapil Gupta 24fed6d3c2 fix(wifi): Fixed compilation error when 11R is enabled without 11KV 2025-03-19 12:43:20 +05:30
Kapil Gupta 793fe61c81 fix(esp_wifi): Prevent flushing of FT data mistakenly 2025-03-05 12:41:10 +05:30
Kapil Gupta 2ed843bdd2 fix(esp_wifi): Correctly break 11kv config into wnm and rrm configs 2025-03-05 12:40:54 +05:30
Kapil Gupta 31b88484a6 fix(esp_wifi): Fix stack corruption in wpa3 task 2025-02-13 14:23:08 +05:30
Kapil Gupta 698392735c fix(esp_wifi): fixed Stack corruption in DPP task 2025-02-13 14:23:08 +05:30
Kapil Gupta a64056fac2 fix(esp_wifi): fixed Stack corruption in WPS processing 2025-02-13 14:23:08 +05:30
Kapil Gupta c3959700b3 fix(esp_wifi): Fixed memory corruption in wifi enterprise
Closes https://github.com/espressif/esp-idf/issues/15370
2025-02-13 14:23:08 +05:30
Kapil Gupta cd934c08ab fix(esp_wifi): Add review comments and some cleanup 2025-02-10 15:46:30 +05:30
Kapil Gupta 3c085db83e fix(esp_wifi): fix some analyzer issues
Closes https://github.com/espressif/esp-idf/issues/15097
Closes https://github.com/espressif/esp-idf/issues/15098
Closes https://github.com/espressif/esp-idf/issues/15099
2025-02-10 15:46:30 +05:30
Kapil Gupta 17032b875a fix(esp_wifi): Reduce scan frequency in WPS 2025-02-10 15:11:14 +05:30
Kapil Gupta 85156cceff fix(esp_wifi): Address some review comments 2025-01-20 14:18:14 +08:00
Kapil Gupta 5abadc5b38 fix(esp_wifi): Enable EAP workarounds by default
Enabling this will make sure our behavior is same as upstream
wpa_supplicant.
2025-01-03 17:42:53 +05:30
Kapil Gupta 234dce0e7f fix(wifi): Remove WPS IEs once WPS succeeds 2024-11-21 13:42:29 +05:30
Kapil Gupta bac76f0491 ci(docs): Add wifi code owners for wifi docs 2024-10-19 15:45:27 +08:00
Kapil Gupta 974eb7933d Merge branch 'feat/add_sbom_wpa_supplicant' into 'master'
feat(wpa_supplicant): Add sbom manifest file for wpa_supplicant

Closes IDF-8308

See merge request espressif/esp-idf!34193
2024-10-15 20:46:38 +08:00
Kapil Gupta 3f57872ff2 Merge branch 'bugfix/correct_typo_scan' into 'master'
fix(esp_wifi): Correct typos in example/scan.c

See merge request espressif/esp-idf!34145
2024-10-14 19:42:10 +08:00
Kapil Gupta 1fa67f81f8 Merge branch 'fix/wifi_netif_null_deref' into 'master'
esp_wifi: Add null pointer checks to WiFi-netif APIs

Closes IDFGH-7092

See merge request espressif/esp-idf!33946
2024-10-01 21:34:18 +08:00
Kapil Gupta d2e0eb7a52 fix(esp_wifi): Prevent memory overflow in WPS 2024-09-21 14:38:09 +05:30
Kapil Gupta 5d792910be Merge branch 'bugfix/wps_timer_causing_disconnect' into 'master'
fix(esp_wifi): Disable WPS timers once WPS succeed

Closes WIFIBUG-393

See merge request espressif/esp-idf!33240
2024-09-21 15:03:19 +08:00
Kapil Gupta 0c9d7c9dd0 Merge branch 'bugfix/2g_5g_wnm_scan' into 'master'
fix(esp_wifi): Add changes to enable 5ghz scan

Closes WIFIBUG-773

See merge request espressif/esp-idf!33657
2024-09-20 22:20:26 +08:00
Kapil Gupta 3629909b11 fix(esp_wifi): Mask some error conditions in WPS
Mask some error conditions in WPS to increase the probability of
WPS success.
2024-09-20 22:08:01 +08:00
Kapil Gupta 3a35b26de1 fix(esp_wifi): Disable WPS timers once WPS succeed 2024-09-20 22:08:01 +08:00
Kapil Gupta b0712b6a2b Merge branch 'bugfix/deinitialize_wps_registrar' into 'master'
fix(esp_wifi): Deinit WPS registrar during hostapd deinit

Closes WIFIBUG-786 and WIFIBUG-695

See merge request espressif/esp-idf!33658
2024-09-20 17:40:57 +08:00
Kapil Gupta 1d7241acc1 fix(esp_wifi): Add changes to enable 5ghz scan 2024-09-20 12:58:14 +05:30
Kapil Gupta 903c11ff1a Merge branch 'bugfix/dpp_5ghz_chan_support' into 'master'
fix(esp_wifi): Add support for 5ghz channel list for easy connect

Closes WIFI-6420

See merge request espressif/esp-idf!32146
2024-09-20 14:46:05 +08:00
Kapil Gupta e24005c8db fix(esp_wifi): Add support for 5ghz channel list for easy connect 2024-09-20 14:46:05 +08:00
Kapil Gupta 1ac6043bce Merge branch 'bugfix/wps_wpa_connection' into 'master'
fix(esp_wifi): Allow connection with WPA mode in WPS

See merge request espressif/esp-idf!32360
2024-09-20 14:16:26 +08:00
Kapil Gupta 52002bf92d fix(esp_wifi): Allow connection with WPA mode in WPS 2024-09-20 14:16:01 +08:00
Kapil Gupta 28f12bfb47 fix(esp_wifi): Deinit WPS registrar during hostapd deinit 2024-09-19 23:10:08 +05:30
Kapil Gupta 27cf5267a1 fix(esp_wifi): Added prints in btm roam for error condition 2024-09-18 14:44:24 +08:00
Kapil Gupta b66f4444d7 fix(esp_wifi): Stop roaming app when station stops 2024-09-11 12:01:31 +05:30
Kapil Gupta 09b421674b fix(esp_wifi): Remove duplicate declaration of function 2024-09-11 10:03:38 +05:30
Kapil Gupta 2a222d437e Merge branch 'bugfix/deinit_roaming_app_crash' into 'master'
fix(esp_wifi): Fix crash in wifi deinit due to roaming neighbor list

Closes WIFIBUG-656

See merge request espressif/esp-idf!32418
2024-07-30 20:07:48 +08:00
Kapil Gupta 4c401905e0 Merge branch 'bugfix/dpp_auth_failure' into 'master'
Fix(wpa_supplicant):Deinit old dpp authentication when config is received.

Closes WIFIBUG-649

See merge request espressif/esp-idf!31924
2024-07-24 14:50:33 +08:00
Kapil Gupta 131dc6d1c0 fix(esp_wifi): cleanup for crypto_ec struct 2024-07-10 19:29:34 +08:00
Kapil Gupta 63386f34bf Merge branch 'bugfix/wpa3_init_crash' into 'master'
fix(wpa_supplicant): Fix wpa3 AP crash because of dangling pointer

Closes WIFIBUG-540

See merge request espressif/esp-idf!31358
2024-06-11 18:06:30 +08:00
Kapil Gupta b102277a12 Merge branch 'feat/add_itwt_teardown_status' into 'master'
feat(wifi): add itwt teardown status

See merge request espressif/esp-idf!30679
2024-05-19 02:37:11 +08:00
Kapil Gupta 79cea90dc1 fix(esp_wifi): Correct action frame type in send_mgmt_frame API 2024-04-22 16:08:18 +05:30
Kapil Gupta 617130a485 Merge branch 'feat/scan_set_params_api' into 'master'
Adds a new API to set default scan parameters

Closes WIFI-6238, WIFI-6344, WIFIBUG-254, and IDFGH-12419

See merge request espressif/esp-idf!27761
2024-04-19 12:03:10 +08:00