Commit Graph

212 Commits

Author SHA1 Message Date
zhangyanjiao
8c8eced34a fix(wifi): Added CVE-2025-52471 to vulnerabilities list 2025-06-27 09:51:12 +08:00
Marius Vikhammer
f3d1717408 docs(esp32h4): support building esp32h4 docs 2025-05-13 11:09:15 +08:00
nilesh.kale
4722f49bc7 feat: update documentation for esp32h21
This also updated log files for other targets to make consistent.
2025-05-12 12:07:36 +05:30
Aditya Patwardhan
ec659cbe93 Merge branch 'docs/update_cn_translation_for_secure_boot' into 'master'
docs: Update CN translation for Secure Boot

Closes DOC-10935

See merge request espressif/esp-idf!38862
2025-05-08 17:24:08 +08:00
Laukik Hase
c16fc04c2d docs(esp_tee): Revise TEE secure storage and related documentation 2025-05-04 18:22:22 +05:30
Zhang Shuxian
111e453c4d docs: Update CN translation for Secure Boot 2025-04-30 14:20:45 +08:00
nilesh.kale
c65858287a feat: enabled secure boot support esp32h21 2025-04-25 17:48:25 +05:30
harshal.patil
75fd14efbc fix(docs): Fix unterminated quotes in secure-boot-v2.rst 2025-04-21 11:18:22 +05:30
Laukik Hase
4a4d63d36e feat(esp_tee): Protect the ECC peripheral from REE access 2025-04-16 19:19:04 +05:30
Laukik Hase
fc4802c0d6 feat(esp_tee): Protect the HMAC and DS peripherals from REE access 2025-04-16 19:19:04 +05:30
Laukik Hase
a5eca671c3 docs(esp_tee): Add the ESP-TEE logo to the user-guide 2025-03-28 09:54:46 +05:30
Laukik Hase
c23714f775 feat(esp_tee): Add support for flash memory isolation and protection (SPI1) 2025-02-11 12:30:05 +05:30
Laukik Hase
37525c605d refactor(esp_tee): Migrate secure services list from TBL to YAML 2025-02-11 10:15:20 +05:30
Laukik Hase
8f117c7f4c refactor(esp_tee): Add local components in TEE examples via idf_component.yml 2025-02-11 10:15:19 +05:30
Marius Vikhammer
85ec6a41f9 Merge branch 'feature/build_docs_h21' into 'master'
docs(build): add support for building H21 docs

Closes IDF-12105

See merge request espressif/esp-idf!36632
2025-02-06 11:25:36 +08:00
Marius Vikhammer
1e72b10b26 docs(build): add support for building H21 docs 2025-01-26 11:44:28 +08:00
Laukik Hase
a91f89026c feat(esp_tee): Make the attestation service configurable 2025-01-23 12:39:17 +05:30
Mahavir Jain
e1a737e401 refactor(docs): re-organize security docs for better navigation 2025-01-09 09:35:12 +05:30
Laukik Hase
cb84119600 docs(esp_tee): Added documentation for the ESP-TEE framework
- Co-authored-by: Shen Meng Jing <shenmengjing@espressif.com>
2025-01-08 11:37:42 +05:30
shenmengjing
29a7146b12 docs: Update CN translation for secure-boot-v2.rst 2024-12-20 11:24:49 +08:00
zhangyanjiao
4784b5aad8 fix(wifi): Added CVE-2024-53845 to vulnerabilities list 2024-12-12 14:07:20 +08:00
Mahavir Jain
6a4a124d65 Merge branch 'feature/enable_rsa_based_secure_boot_for_c5_eco1' into 'master'
feat(bootloader_support): enabled RSA based secure boot scheme for ESP32C5 ECO1

Closes IDF-10453 and IDF-11441

See merge request espressif/esp-idf!35104
2024-12-04 18:00:34 +08:00
nilesh.kale
1e11340061 feat(bootloader_support): enabled RSA based secure boot scheme for ESP32C5 ECO1
This commit enabled RSA based secure boot scheme for ESP32C5 ECO1 module.
This update also adds a check to ensure the selected secure boot scheme is
valid for ECO0 modules.
2024-12-03 16:48:56 +05:30
renpeiying
fb1105f449 docs: Update CN trans for security docs 2024-12-03 11:17:55 +05:30
harshal.patil
f02dc64ce6 feat(bootloader_support): Permanently enable pseudo rounds function for XTS-AES during start-up 2024-12-03 11:17:54 +05:30
harshal.patil
c6ea979efa feat(hal/aes): Enable pseudo rounds function during AES operations 2024-12-03 11:17:54 +05:30
shenmengjing
6f86f70f0a docs: Sync CN and EN files 2024-11-05 18:03:42 +08:00
renpeiying
46770a50a6 docs: standardize the names of bootloaders in esp-idf 2024-10-23 11:29:24 +08:00
Aditya Patwardhan
6dc8fe3db3 Merge branch 'docs/update_cn_trans_for_secure_boot_v2' into 'master'
docs: Update CN translation for secure-boot-v2.rst

Closes DOC-9082

See merge request espressif/esp-idf!33895
2024-10-08 15:13:59 +08:00
Mahavir Jain
27bcb047b4 Merge branch 'feature/qemu_doc_guide_updates' into 'master'
docs: misc updates to qemu guide, now enabled for ESP32-S3

See merge request espressif/esp-idf!33854
2024-10-08 12:45:23 +08:00
Zhang Shuxian
808a82de81 docs: Update CN translation for secure-boot-v2.rst 2024-10-08 11:09:40 +08:00
Mahavir Jain
c90dd52974 Merge branch 'feat/newlib-sbom-exclude_cve-2024-30949' into 'master'
fix(newlib): sbom: add CVE-2024-30949 to cve-exclude-list

See merge request espressif/esp-idf!33947
2024-10-03 12:30:44 +08:00
Alexey Lapshin
c4acf3faad fix(newlib): sbom: add CVE-2024-30949 to cve-exclude-list 2024-10-02 18:01:14 +07:00
Aditya Patwardhan
2c11c2ab81 fix(docs): Fix secure boot v2 documentation
Update the secure boot v2 documentation
    about the limitation of read-protection
    when secure boot is enabled

    Closes https://github.com/espressif/esp-idf/issues/14587
2024-10-01 11:56:37 +08:00
Mahavir Jain
1e94096e16 docs: update qemu guide for efuse commands
- add mention of qemu guide in security related chapters
- also added a note about secure boot v2 config in qemu workflow
2024-09-27 13:36:15 +05:30
Lucas Dekker
232f219321 docs: Explain revocation of unused but compromised keys
Explain the revocation of unused but compromised keys.

docs: Apply updates from code review

Add some nitpicks from AdityaHPatwardhan.

Closes  https://github.com/espressif/esp-idf/pull/14563

Co-authored-by: Aditya Patwardhan <aditya.patwardhan@espressif.com>
2024-09-23 12:23:28 +05:30
Mahavir Jain
2b806c9772 Merge branch 'feature/update_security_docs_for_c61' into 'master'
feat: update security documents for ESP32C61

Closes IDF-10154, IDF-10155, IDF-10156, IDF-10157, and IDF-10158

See merge request espressif/esp-idf!31959
2024-09-03 19:11:09 +08:00
nilesh.kale
3550e36a68 feat: updated security docs for ESP32C5
This commit modified document files for ESP32C5.
This revised chnages for security components, RNG, provisioning and
some minor changes in sample output for flash encryption example.
2024-09-02 11:50:07 +05:30
nilesh.kale
1011cee7a7 feat: udpate security docs for c61 and c5
This commit update security documents for ESP32C61.
2024-09-02 11:04:38 +05:30
harshal.patil
e5f22521da docs(secure_boot_v2): Mention idf.py and openssl commands to generate and verify signatures
- Adds support for verify_signature command in idf.py

Closes https://github.com/espressif/esptool/issues/942
2024-08-27 15:44:05 +05:30
harshal.patil
03a15664ee change(bootloader_support/secure_boot): Improve description of the config SECURE_BOOT_V2_ALLOW_EFUSE_RD_DIS
Co-authored-by: Zhang Shuxian <zhangshuxian@espressif.com>
2024-08-21 16:32:54 +05:30
Mahavir Jain
3ec400b332 docs(security): fix ESP32-C3 minimum supported revision for secure boot v2
Closes https://github.com/espressif/esp-idf/issues/14377
2024-08-16 15:04:28 +05:30
renpeiying
afd3179ae8 docs: Provide Chinese translation for host-based-security-workflows.rst 2024-08-08 11:03:24 +08:00
nilesh.kale
3aa448ee0d fix: disable config for RSA during secure boot
support for RSA secure boot is disabled for ESP32-ECO0 due to
hardware issue. It will be re-enabled in future version ECO1.

For ESP32C5- ECO0 , ECDSA secure boot is the recommended option.
2024-07-12 12:40:11 +05:30
Mahavir Jain
f5f85803a2 docs(security): use target specific macro for bootloader flash offset 2024-07-09 09:43:16 +05:30
shenmengjing
3cb4880d02 docs: Add often used espefuse subcommands to idf.py 2024-07-03 17:55:26 +08:00
Jiang Jiang Jian
15219e2a7e Merge branch 'docs/phase2_auth_update' into 'master'
docs: Adds document for wifi PEAP phase 2 authentication security advisory.

See merge request espressif/esp-idf!31829
2024-07-02 10:36:44 +08:00
kindaTall
4259df3d56 docs(security): fix typo for key purpose field in flash encryption guide 2024-07-01 12:21:49 +00:00
aditi
df9680b827 docs: Adds document for wifi PEAP phase 2 authentication security advisory. 2024-07-01 14:50:13 +05:30
harshal.patil
4d6cb7bf23 docs(secure_boot): Add secure boot signature verification time for esp32p4 2024-06-21 21:59:55 +05:30