Aditya Patwardhan 138ebe2d85 fix(mbedtls): use constant-time compare and zeroize key material ...

Replace memcmp with mbedtls_ct_memcmp in PSA MAC verify_finish entries
(CMAC, HMAC-transparent, HMAC-opaque) to prevent timing side-channel
MAC forgery, and unconditionally zeroize the locally-computed MAC on
the stack before return so a later stack-disclosure primitive cannot
recover the valid MAC.

Replace bzero with mbedtls_platform_zeroize in AES context free paths.

2026-05-19 12:15:28 +05:30

..

config

fix(mbedtls): bring back deprecated config MBEDTLS_ECJPAKE_C

2026-05-13 14:25:28 +08:00

esp_crt_bundle

fix(esp_crt_bundle): fixes verification with cross signed cert

2026-05-11 17:44:16 +08:00

esp_tee

fix(esp_tee): optimise build size by removing unused configs

2026-04-30 18:02:07 +08:00

mbedtls @ 6cc42afad3

feat(mbedtls/psa_esp_rsa_ds): Support persistent ESP-RSA DS driver

2026-05-15 09:09:15 +05:30

port

fix(mbedtls): use constant-time compare and zeroize key material

2026-05-19 12:15:28 +05:30

test_apps

test(mbedtls/persistent_storage_format): Add ESP ITS NVS format-stability test app

2026-05-15 09:12:20 +05:30

CMakeLists.txt

fix(build): fix Clang 21 build warnings/errors

2026-05-07 17:42:38 +03:00

Kconfig

fix(mbedtls): bring back deprecated config MBEDTLS_ECJPAKE_C

2026-05-13 14:25:28 +08:00