aliro-project

Go to file

michael 5521503258 fix(applet): CoseVerifier scratch 768B->384B for J3R452 transient pool fit (M2G.2)

The M2 verdict run on J3R452 04555A4A0B2190 tripped SW=0x6FC4 on
AUTH0 (AliroCrypto.expandScratch makeTransientByteArray failure).
Summed CLEAR_ON_DESELECT allocations exceeded the ~3,120 B pool:
- PersonalizationApplet/CoseVerifier scratch: 768 B
- AliroApplet: 838 B (sessionState + scratch + derivedKeys + saltVolatile + kdh)
- StepUpApplet + StepUpSession: ~893 B (responseBuffer + scratchPlaintext + ...)
- AliroGcm + AliroCrypto (lazy, at first AUTH0): 720 B
Total ~3,220 B vs ~3,120 B cap.

CoseVerifier's 768 B was M2A.2's conservative sizing for up to 512 B COSE
payload. Aliro's IssuerAuth payload is ~188 B today. Tighten:
- MAX_PAYLOAD 512 -> 256 (still 36% headroom over actual)
- scratch 768 -> 384 (Sig_structure ~310 B + DER sig 72 B = ~382 B)

Saved 384 B, brings total to ~2,836 B. CAP rebuilt (100,990 B),
reinstalled + repersonalized + bench-test re-run -- GREEN.

Verdict log: docs/verdicts/2026-06-12-m2-pcsc-verdict.log
  RESULT: OK -- applet round-trip on real hardware
    0x5E signaling_bitmap: 0x0005
    APDU latencies: select 23 ms, auth0 667 ms, auth1 3,258 ms
  STEP-UP M2: OK -- EXCHANGE + ENVELOPE Access Document round-trip

2026-06-17 18:05:16 -07:00

applet

fix(applet): CoseVerifier scratch 768B->384B for J3R452 transient pool fit (M2G.2)

2026-06-17 18:05:16 -07:00

docs

fix(applet): CoseVerifier scratch 768B->384B for J3R452 transient pool fit (M2G.2)

2026-06-17 18:05:16 -07:00

harness

feat: EXCHANGE Reader Status request validation + spec-shape response (M2E.1, M2E.2)

2026-06-17 16:50:47 -07:00

reader

build(reader): WTX cap bump 20→255 + AUTH1 wrap instrumentation