Commit Graph

236 Commits

Author SHA1 Message Date
Jin Cheng
c1fdcddac4 docs: update vulnerabilities guide to mention CVE-2025-68473 and CVE-2025-68474 2025-12-25 13:40:14 +08:00
Jin Cheng
bdf9592803 docs: update vulnerabilities guide to mention CVE-2025-66409 2025-12-11 14:10:54 +08:00
Mahavir Jain
81c961a656 Merge branch 'refactor/esp_tee_soc_cap' into 'master'
feat(esp_tee): Mark ESP32-H2 as a supported target for ESP-TEE

See merge request espressif/esp-idf!43434
2025-12-08 14:11:15 +05:30
Laukik Hase
90d6394911 feat(esp_tee): Support ECDSA secp384r1 keys in TEE secure storage 2025-12-04 11:16:29 +05:30
Zhang Shu Xian
9ced000ac2 Merge branch 'docs/fix_some_expressions_in_security_guide' into 'master'
docs: fix some description in security guide docs

See merge request espressif/esp-idf!42083
2025-12-01 14:24:51 +08:00
Zheng Zhong
0c0b9c7d89 docs: fix some description in security guide docs 2025-12-01 14:24:51 +08:00
Mahavir Jain
20b1b14c5d docs: update vulnerabilities guide to mention new CVEs 2025-11-26 10:08:12 +05:30
Laukik Hase
c88f9c3be1 feat(esp_tee): Mark ESP32-H2 as a supported target for ESP-TEE 2025-11-25 10:13:31 +05:30
Laukik Hase
7a1ab62cf7 docs(esp_tee): Enable ESP-TEE documentation for ESP32-C61 2025-11-12 12:48:27 +05:30
Laukik Hase
afe8fea489 docs(esp_tee): Enable ESP-TEE documentation for ESP32-C5 2025-10-06 18:49:01 +05:30
Peter Dragun
e3198fff3c feat: Update esptool to v5 2025-09-30 15:28:55 +02:00
Zhang Shuxian
ff8c82169f docs: Correct wrong description in secure-boot-v2.rst 2025-09-26 17:23:05 +08:00
WanqQixiang
6b503d0db5 component: Remove wifi_provisioning component and esp_prov tool 2025-09-26 09:48:50 +08:00
Mahavir Jain
4e082efc24 Merge branch 'fix/change_write_protection_bit_of_shared_security_efuses' into 'master'
Reorder write protection bits of some shared security efuses

See merge request espressif/esp-idf!41619
2025-09-22 14:38:21 +05:30
Shen Mengjing
71f8405742 docs: Add the updated CN translation 2025-09-19 17:01:29 +05:30
harshal.patil
5aa5366e7f fix(bootloader_support): Reorder write disabling ECDSA_CURVE_MODE 2025-09-19 17:01:23 +05:30
harshal.patil
d6c1184676 fix(bootloader_support): Reorder write protection bits of some shared security efuses 2025-09-19 13:02:00 +05:30
Laukik Hase
c152663408 feat(esp_tee): Added support for PBKDF2-based (HMAC) ECDSA signing 2025-09-19 12:06:02 +05:30
zhanghaipeng
1952f0333c docs(ble): add advisory for CVE-2025-55297 found in Blufi example 2025-08-25 14:04:39 +08:00
harshal.patil
60ff4bca9b refactor(esp_system): Update all references of the memory protection configs 2025-08-04 11:43:01 +05:30
Zhang Shuxian
b615ab5a40 docs: Update CN translation for secure boot 2025-07-22 19:14:46 +08:00
harshal.patil
dbcaddb745 docs(secure-boot-v2): Update the signature verification timings
- THe timings are calculated for the ROM verifying the bootloader's signature
2025-07-21 09:19:42 +05:30
harshal.patil
37e5c0701a docs(secure_boot_v2): Add documentation for Secure Boot V2 using ECDSA-P384 2025-07-21 09:19:42 +05:30
harshal.patil
130e72f82b feat(bootloader_support): Support Secure Boot using ECDSA-P384 curve 2025-07-21 09:19:42 +05:30
zhangyanjiao
8c8eced34a fix(wifi): Added CVE-2025-52471 to vulnerabilities list 2025-06-27 09:51:12 +08:00
Marius Vikhammer
f3d1717408 docs(esp32h4): support building esp32h4 docs 2025-05-13 11:09:15 +08:00
nilesh.kale
4722f49bc7 feat: update documentation for esp32h21
This also updated log files for other targets to make consistent.
2025-05-12 12:07:36 +05:30
Aditya Patwardhan
ec659cbe93 Merge branch 'docs/update_cn_translation_for_secure_boot' into 'master'
docs: Update CN translation for Secure Boot

Closes DOC-10935

See merge request espressif/esp-idf!38862
2025-05-08 17:24:08 +08:00
Laukik Hase
c16fc04c2d docs(esp_tee): Revise TEE secure storage and related documentation 2025-05-04 18:22:22 +05:30
Zhang Shuxian
111e453c4d docs: Update CN translation for Secure Boot 2025-04-30 14:20:45 +08:00
nilesh.kale
c65858287a feat: enabled secure boot support esp32h21 2025-04-25 17:48:25 +05:30
harshal.patil
75fd14efbc fix(docs): Fix unterminated quotes in secure-boot-v2.rst 2025-04-21 11:18:22 +05:30
Laukik Hase
4a4d63d36e feat(esp_tee): Protect the ECC peripheral from REE access 2025-04-16 19:19:04 +05:30
Laukik Hase
fc4802c0d6 feat(esp_tee): Protect the HMAC and DS peripherals from REE access 2025-04-16 19:19:04 +05:30
Laukik Hase
a5eca671c3 docs(esp_tee): Add the ESP-TEE logo to the user-guide 2025-03-28 09:54:46 +05:30
Laukik Hase
c23714f775 feat(esp_tee): Add support for flash memory isolation and protection (SPI1) 2025-02-11 12:30:05 +05:30
Laukik Hase
37525c605d refactor(esp_tee): Migrate secure services list from TBL to YAML 2025-02-11 10:15:20 +05:30
Laukik Hase
8f117c7f4c refactor(esp_tee): Add local components in TEE examples via idf_component.yml 2025-02-11 10:15:19 +05:30
Marius Vikhammer
85ec6a41f9 Merge branch 'feature/build_docs_h21' into 'master'
docs(build): add support for building H21 docs

Closes IDF-12105

See merge request espressif/esp-idf!36632
2025-02-06 11:25:36 +08:00
Marius Vikhammer
1e72b10b26 docs(build): add support for building H21 docs 2025-01-26 11:44:28 +08:00
Laukik Hase
a91f89026c feat(esp_tee): Make the attestation service configurable 2025-01-23 12:39:17 +05:30
Mahavir Jain
e1a737e401 refactor(docs): re-organize security docs for better navigation 2025-01-09 09:35:12 +05:30
Laukik Hase
cb84119600 docs(esp_tee): Added documentation for the ESP-TEE framework
- Co-authored-by: Shen Meng Jing <shenmengjing@espressif.com>
2025-01-08 11:37:42 +05:30
shenmengjing
29a7146b12 docs: Update CN translation for secure-boot-v2.rst 2024-12-20 11:24:49 +08:00
zhangyanjiao
4784b5aad8 fix(wifi): Added CVE-2024-53845 to vulnerabilities list 2024-12-12 14:07:20 +08:00
Mahavir Jain
6a4a124d65 Merge branch 'feature/enable_rsa_based_secure_boot_for_c5_eco1' into 'master'
feat(bootloader_support): enabled RSA based secure boot scheme for ESP32C5 ECO1

Closes IDF-10453 and IDF-11441

See merge request espressif/esp-idf!35104
2024-12-04 18:00:34 +08:00
nilesh.kale
1e11340061 feat(bootloader_support): enabled RSA based secure boot scheme for ESP32C5 ECO1
This commit enabled RSA based secure boot scheme for ESP32C5 ECO1 module.
This update also adds a check to ensure the selected secure boot scheme is
valid for ECO0 modules.
2024-12-03 16:48:56 +05:30
renpeiying
fb1105f449 docs: Update CN trans for security docs 2024-12-03 11:17:55 +05:30
harshal.patil
f02dc64ce6 feat(bootloader_support): Permanently enable pseudo rounds function for XTS-AES during start-up 2024-12-03 11:17:54 +05:30
harshal.patil
c6ea979efa feat(hal/aes): Enable pseudo rounds function during AES operations 2024-12-03 11:17:54 +05:30