Laukik Hase
9b1aaa2778
fix(esp_tee): Fix coverity issues from the attestation component
...
- Also fix the incorrect marker set for TEE OTA tests
2025-06-23 11:45:12 +05:30
Aditya Patwardhan
8d0527d7bf
Merge branch 'feat/support_sha512_for_esp32c5' into 'master'
...
Support SHA 512 for ESP32-C5
See merge request espressif/esp-idf!39421
2025-06-09 09:42:37 +05:30
Laukik Hase
0d8a1f5427
refactor(hal): Refactor the APM LL/HAL APIs
2025-06-06 18:28:47 +05:30
harshal.patil
fe78370ec9
feat(mbedtls/sha): New API for setting SHA mode
2025-06-06 14:51:44 +05:30
Laukik Hase
a1c6d2a458
fix(esp_tee): Fix failing SPI1 flash protection test-cases
2025-05-22 17:35:09 +08:00
Laukik Hase
b8e48fbfc0
ci(esp_tee): Enable the tee_test_fw test app for ESP32-H2
2025-05-20 16:31:23 +05:30
Laukik Hase
958f4b8900
feat(esp_tee): Support for ESP32-H2 - the esp_tee component
2025-05-20 16:31:22 +05:30
Laukik Hase
c16fc04c2d
docs(esp_tee): Revise TEE secure storage and related documentation
2025-05-04 18:22:22 +05:30
Laukik Hase
033397b877
fix(esp_tee): Add standard newlib function stubs to resolve build warnings
...
- Disable C++ exceptions for TEE build to reduce flash footprint
2025-05-04 18:03:30 +05:30
Laukik Hase
3bb3f9362e
refactor(esp_tee): Update TEE secure storage examples and test-apps
2025-05-04 18:03:30 +05:30
Laukik Hase
41bf07e6ce
refactor(esp_tee): Remove the deprecated TEE secure storage partition subtype
2025-05-04 18:03:30 +05:30
Laukik Hase
d116567a66
refactor(esp_tee): Update TEE secure storage interface APIs
2025-05-04 18:03:29 +05:30
Laukik Hase
c9f7bcd452
feat(esp_tee): Support the nvs_flash for the ESP-TEE build
2025-05-04 18:03:28 +05:30
Laukik Hase
a0031cff9f
refactor(esp_tee): Remove the redudant eFuse-related service calls
2025-04-17 11:04:29 +05:30
Laukik Hase
832124f198
fix(esp_tee): Place APM HAL in TEE IRAM when SPI1 protection is enabled
...
- Place the APM HAL into TEE IRAM when `CONFIG_SECURE_TEE_EXT_FLASH_MEMPROT_SPI1`
is enabled, as APM violations related to SPI1 can occur with the flash cache disabled.
- Also fix an issue where flash protection tests were passing due to incorrect checks
2025-04-17 11:03:50 +05:30
Laukik Hase
a845be0149
refactor(esp_tee): Reduce the default TEE DRAM size
...
- Decreased from 32KB to 24KB, keeping in mind the current maximum TEE heap
usage and some overhead
- Make the TEE panic handler logs concise, saving some DRAM
2025-04-17 11:03:17 +05:30
Laukik Hase
8e27be344b
refactor(esp_tee): Place the secure services _ss_ layer in the flash by default
2025-04-17 11:03:16 +05:30
Laukik Hase
4a4d63d36e
feat(esp_tee): Protect the ECC peripheral from REE access
2025-04-16 19:19:04 +05:30
Laukik Hase
fc4802c0d6
feat(esp_tee): Protect the HMAC and DS peripherals from REE access
2025-04-16 19:19:04 +05:30
Laukik Hase
d7d78f6238
fix(esp_tee): Correct the input validation checks for secure services
2025-04-16 19:19:04 +05:30
Laukik Hase
13aff0b216
fix(security): Fixed coverity warnings related to the esp_tee component
...
- Also, disable the SECP192R1 curve (Mbed TLS config) when TEE Secure Storage
does not require it
2025-04-14 10:12:51 +05:30
Laukik Hase
d26e18cb49
ci(esp_tee): Verify the malloc-write-free cycle in the TEE heap
2025-04-08 19:50:27 +05:30
Laukik Hase
223c0d5f9d
feat(esp_tee): Use the ROM TLSF implementation for the TEE build
2025-04-08 19:50:27 +05:30
Laukik Hase
d442886918
refactor(esp_tee): Refactor the TEE heap-related APIs
2025-04-08 19:50:26 +05:30
Chen Ji Chang
f407fab479
Merge branch 'feat/support_gptimer_on_h4' into 'master'
...
feat(gptimer): support gptimer on esp32h4
Closes IDF-12373 and IDF-12374
See merge request espressif/esp-idf!38168
2025-04-08 13:46:49 +08:00
Chen Jichang
2cbc297969
refactor(gptimer): use group_id in clock ctrl functions
2025-04-08 10:20:48 +08:00
Laukik Hase
bd314c2460
refactor(esp_tee): Update the SHA clock configuration service call
2025-04-04 10:31:28 +05:30
Laukik Hase
3fd107aa04
feat(mbedtls): Add support for ECDSA signing with TEE secure storage
2025-04-03 15:35:15 +05:30
Laukik Hase
1e8933d296
feat(esp_tee): Add support for SECP192R1 curve in TEE secure storage
2025-04-03 15:35:14 +05:30
Laukik Hase
6e5513b8ad
refactor(esp_tee): Component dependency cleanup for the TEE build
2025-03-19 14:30:52 +05:30
igor.udot
daf2d31008
test: format all test scripts
2025-03-05 12:08:48 +08:00
Laukik Hase
873409da6b
refactor(esp_tee): Simplify service call ASM routine
...
- Remove `mret` for jumping to the service call dispatcher; instead, enable
interrupts and execute directly
- Fix potential corruption of the `t3` register when returning from a service
call
- Simplify the secure service dispatcher function
2025-02-25 17:18:08 +05:30
Laukik Hase
5c4a527750
refactor(esp_tee): Remove explicit setting of the HP_CPU APM/TEE security mode
2025-02-25 16:49:08 +05:30
Laukik Hase
26fa7109f3
fix(esp_tee): Protect the AES/SHA clock registers from REE access
2025-02-25 16:49:08 +05:30
Mahavir Jain
870a1846b1
Merge branch 'feature/esp_tee_flash_prot_spi1' into 'master'
...
feat(esp_tee): Add support for flash memory isolation and protection (SPI1)
Closes IDF-10481, IDF-10083, and IDF-8915
See merge request espressif/esp-idf!36454
2025-02-12 18:35:49 +08:00
Laukik Hase
1f6d450d19
fix(security): Fixed coverity warnings from nvs_sec_provider and esp_tee components
2025-02-11 13:01:13 +05:30
Laukik Hase
7d49f696c1
ci(esp_tee): Add tests for verifying behaviour for illegal flash accesses (SPI1)
2025-02-11 12:30:06 +05:30
Laukik Hase
c23714f775
feat(esp_tee): Add support for flash memory isolation and protection (SPI1)
2025-02-11 12:30:05 +05:30
Laukik Hase
37525c605d
refactor(esp_tee): Migrate secure services list from TBL to YAML
2025-02-11 10:15:20 +05:30
Laukik Hase
8f117c7f4c
refactor(esp_tee): Add local components in TEE examples via idf_component.yml
2025-02-11 10:15:19 +05:30
Mahavir Jain
f428a1e784
Merge branch 'bugfix/coverity_issues' into 'master'
...
Fix some coverity reported issues
Closes IDF-12188, IDF-12197, and IDF-12193
See merge request espressif/esp-idf!36719
2025-02-10 22:05:30 +08:00
harshal.patil
7d8211bf87
feat(mbedtls): Support both SHA block and DMA modes during runtime
...
Dynamically switch the SHA operation modes based on the buffer operating length
2025-02-04 16:49:30 +05:30
Mahavir Jain
074852664d
fix(esp_tee): fix some coverity warnings
2025-02-04 11:40:22 +05:30
Laukik Hase
c4eec756f3
refactor(esp_tee): Revised the secure service ID numbering scheme
...
Also:
- Split the secure service table into two parts: one DRAM-resident and the
other DROM-resident. The former holds the services invoked when the cache is
disabled or suspended while the latter holds rest of the services.
2025-01-23 12:39:19 +05:30
Laukik Hase
a745100bef
refactor(esp_tee): Add argument count checks for secure services in the dispatcher
...
Also:
- Unified the TEE build system-related scripts into a single script
2025-01-23 12:39:18 +05:30
Laukik Hase
a91f89026c
feat(esp_tee): Make the attestation service configurable
2025-01-23 12:39:17 +05:30
Laukik Hase
4d9358703a
refactor(esp_tee): Move the REE address validation check to a separate header
2025-01-23 12:39:16 +05:30
Sachin Billore
9ea01eb7c4
fix(esp_tee): Input validation for secure services
2025-01-15 16:29:38 +05:30
Laukik Hase
86125aeb98
ci(esp_tee): Add tests for verifying behaviour for illegal flash accesses (SPI0)
2025-01-03 11:44:27 +05:30
Laukik Hase
1499c65754
feat(esp_tee): Add support for flash memory isolation and protection (SPI0)
2025-01-03 11:44:01 +05:30
