Add capabilities to properly show FIPS 140-3

[dgarske]

ZD 21780

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Adds explicit FIPS 140-3 support to the capabilities surface so callers can distinguish between FIPS 140-2 and FIPS 140-3 based on TPM_PT_MODES (TPMA_MODES).

Changes:

• Extend WOLFTPM2_CAPS with a fips140_3 flag and decode TPMA_MODES bit 1 in capability parsing.
• Introduce TPMA_MODES and masks in tpm2.h and use them in parsing/emission.
• Update test/example output to display FIPS 140-3 when indicated.

Reviewed changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
wolftpm/tpm2_wrap.h	Adds fips140_3 capability flag and clarifies FIPS 140-2 comment.
wolftpm/tpm2.h	Defines TPMA_MODES and bit masks for FIPS 140-2/140-3.
src/tpm2_wrap.c	Decodes TPM_PT_MODES using new masks into both fips140_2 and fips140_3.
src/fwtpm/fwtpm_command.c	Emits TPM_PT_MODES reflecting wolfCrypt FIPS level (140-2 vs 140-3).
tests/unit_tests.c	Updates debug print to prefer FIPS 140-3 when present.
examples/wrap/wrap_test.c	Updates capability output formatting for FIPS 140-2 vs 140-3.
examples/wrap/caps.c	Updates capability output formatting for FIPS 140-2 vs 140-3.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.