[PATCH] wolfSSL: Reject ECDH peer keys with unexpected length
Jouni Malinen
j at w1.fi
Sat Oct 24 02:14:04 PDT 2026
On Tue, Oct 13, 2026 at 11:37:51AM -0700, Paul Adelsbach wrote:
> crypto_ecdh_set_peerkey() ignored any bytes past the expected key
> length. Require an exact length match, as the OpenSSL implementation
> does. This fixes the owe_invalid_assoc_resp test case where a 33-octet
> key was accepted.
Thanks, applied.
--
Jouni Malinen PGP id EFC895FA
More information about the Hostap
mailing list