[PATCH] wolfSSL: Reject ECDH peer keys with unexpected length

Jouni Malinen j at w1.fi
Sat Oct 24 02:14:04 PDT 2026


On Tue, Oct 13, 2026 at 11:37:51AM -0700, Paul Adelsbach wrote:
> crypto_ecdh_set_peerkey() ignored any bytes past the expected key
> length. Require an exact length match, as the OpenSSL implementation
> does. This fixes the owe_invalid_assoc_resp test case where a 33-octet
> key was accepted.

Thanks, applied.
 
-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list