Hardware Accelerated PBKDF2 for PIN and KEF Key Stretching - #151

Merged

odudex merged 10 commits into

Aug 28, 2026

Commits on Aug 28, 2026

fix(kef): detect base43-armored envelopes
odudex
committed
7a98f67
fix(kef): guarantee the idle watchdog is restored after crypto work
odudex
committed
18d659b
fix(kef): bound the work factor and reject empty payloads
odudex
committed
639cc4c
refactor(kef): share the hidden-auth check and skip a redundant copy
odudex
committed
725da7b
test(kef): cover all 12 versions with cross-implementation vectors
odudex
committed
213f009
feat(crypto): derive PBKDF2 on the SHA accelerator
odudex
committed
15b68b4
test(crypto): check and time both PBKDF2 paths on device
odudex
committed
173d3f7
feat(crypto): enable the PBKDF2 accelerator by default
odudex
committed
d35ab51
chore: bump version to 0.0.18
odudex
committed
ef83957
ci: install libmbedtls-dev for the KEF host tests
odudex
committed
908bec8