Skip to content

Conversation

@NordicBuilder
Copy link

Backport 8b2d04c~3..8b2d04c from #483.

The MAC tag of encryption key has been incorrectly using only
32 bytes of HKDF for HMAC-SHA512 keyword.

Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 32db788)
(cherry picked from commit 31c8554)
HMAC-SHA512 has been incorrectly fed only 32 bytes of password.

Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 94d85f9)
(cherry picked from commit 2128ae5)
ECIES-X25519 key exchange on NRF54L will be using HMAC-SHA512
for MAC tagging encryption key.

Signed-off-by: Dominik Ermel <[email protected]>
(cherry picked from commit 8b2d04c)
@sonarqubecloud
Copy link

sonarqubecloud bot commented Aug 7, 2025

@nvlsianpu nvlsianpu added this to the ncs-3.1.0 milestone Aug 8, 2025
@nvlsianpu nvlsianpu added the bugfix Fixes a known bug label Aug 8, 2025
@carlescufi carlescufi merged commit 05a6339 into ncs-v3.1-branch Aug 11, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Backport bugfix Fixes a known bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants