netxduo.git/nx_secure/src/nx_secure_tls_process_certificate_verify.c, branch dev

Fixed the TLS 1.3 CertificateVerify transcript hash length (#417)

2026-08-13T14:09:24Z

* Fix TLS 1.3 CertificateVerify transcript hash length (use ciphersuite hash) Per RFC 8446 §4.4.3 the CertificateVerify content embeds Transcript-Hash(Handshake Context), whose length is fixed by the negotiated ciphersuite's hash — not by the signature scheme's hash. The dynamic length introduced during the #377 review keyed it to the signature scheme's hash; the two differ whenever the peer signs with a hash other than the suite's, e.g. an ECDSA P-384 certificate (ecdsa_secp384r1_sha384) with TLS_AES_128_GCM_SHA256 — the only TLS 1.3 suite currently enabled. In that case 48 bytes were copied from a 32-byte transcript hash slot, corrupting the signed content on the send side and rejecting valid peer signatures on the verify side. Key the transcript length to the session ciphersuite hash (with the same SHA-256 fallback as _nx_secure_tls_1_3_transcript_hash_save); the signature scheme's hash still digests the assembled content and parameterizes RSA-PSS. * Add a regression test for the TLS 1.3 CertificateVerify transcript hash length Calls _nx_secure_tls_send_certificate_verify and _nx_secure_tls_process_certificate_verify directly with a signature-scheme hash (SHA-384) that differs from the ciphersuite hash (SHA-256), and captures via a spy hash method the exact byte count copied into the CertificateVerify content. Asserts 32 bytes (the ciphersuite's SHA-256, correct per RFC 8446 §4.4.3), not 48 (the signature scheme's SHA-384, what the bug copied). * Documented why the SHA-384 test case cannot run end to end --------- Co-authored-by: Claude Fable 5

Added RSA-PSS signature verification support (TLS 1.3 with RSA cert) (#377)

2026-05-21T19:23:32Z

* Add RSA-PSS * Fix SHA-384/512 transcript hash truncation and add MGF1 bounds check Address review feedback on RSA-PSS PR: - Resize handshake_hash buffer from 130 to 162 bytes (64+34+64) in both nx_secure_tls_process_certificate_verify.c and nx_secure_tls_send_certificate_verify.c to fit SHA-512 transcript. - Replace hardcoded 32-byte transcript hash copy with dynamic length derived from hash_method->nx_crypto_ICV_size_in_bits. - Add bounds check in _nx_crypto_rsa_pss_mgf1 to reject hash_method whose output exceeds the local hash_buf size. * Fix RSA-PSS verify in TLS 1.2 ServerKeyExchange Extend RSA-PSS support to TLS 1.2 ServerKeyExchange signature verify: - nx_secure_process_server_key_exchange.c: detect RSA-PSS wire codes (0x0804/0805/0806) and dispatch to _nx_crypto_rsa_pss_verify after RSA decrypt; PKCS#1 v1.5 path kept for non-PSS signatures. - nx_secure_tls_process_clienthello_extensions.c: map RSA-PSS wire codes to the existing RSA SHA-256/384/512 internal IDs so the certificate cipher table lookup finds the right hash method.

Updated copyright headers and version strings. Removed version history

2026-03-06T23:14:18Z

Updated version numbers to 6.4.3

2025-03-18T14:24:08Z

Update copyright.

2024-01-29T03:03:49Z

Release 6.2.1 on 08 Mar 2023. Expand to see details.

2023-03-08T08:27:44Z

29eee6fe8 Update function header and version to 6.2.1 e22a02169 Fix compile errors in TLS 3e0a14c1c Fix network driver for regression test. 442f3adfa Fix compiler warnings in NetXDuo

Update on 18 Jan 2023. Expand to see details.

2023-01-18T08:40:56Z

5849a60fa Fix compile errors when NX_SECURE_DISABLE_X509 is defined. 775a624ac Remove internal deprecated files. fa4680237 Clear MQTT password while X509 authentication is selected 5cb6488b4 Add a notice for not released file. 7600d5747 Upgrade to the latest Container Images. 3fdcc4420 [ADU] Add secondary root key and remove testing key.

Release 6.2.0

2022-10-26T23:42:00Z

Release 6.1.11

2022-04-20T05:07:25Z

Release 6.1.8

2021-07-28T07:24:24Z