Aditya Patwardhan 
							
						 
					 
					
						
						
							
						
						47f7c6a991 
					 
					
						
						
							
							esp32s2/esp_ds: Digital Signature software support  
						
						... 
						
						
						
						1)Added support for alt rsa sign implementation with DS peripheral (
through ESP-TLS - mbedTLS SSL/TLS stack) 
						
						
					 
					
						2020-09-22 18:31:31 +05:30 
						 
				 
			
				
					
						
							
							
								morris 
							
						 
					 
					
						
						
							
						
						61f89b97c6 
					 
					
						
						
							
							bringup esp32-s3 on FPGA  
						
						
						
						
					 
					
						2020-09-22 15:15:03 +08:00 
						 
				 
			
				
					
						
							
							
								Michal Vácha 
							
						 
					 
					
						
						
							
						
						e4820fc447 
					 
					
						
						
							
							Fixed TLS 1.1 still being enables even if disabled via config.  
						
						... 
						
						
						
						Fixed MBEDTLS_SSL_PROTO_TLS1_1 still being defined even ifCONFIG_MBEDTLS_SSL_PROTO_TLS1_1 is not
Signed-off-by: Aditya Patwardhan <aditya.patwardhan@espressif.com >
Merges https://github.com/espressif/esp-idf/pull/5675  
						
						
					 
					
						2020-08-05 03:38:51 +00:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						33bfe2393a 
					 
					
						
						
							
							Merge branch 'bugfix/wpa_supplicant_no_hw_mpi' into 'master'  
						
						... 
						
						
						
						wpa_supplicant: Allow building with mbedTLS integration but no hardware MPI
Closes IDFGH-3344
See merge request espressif/esp-idf!8822  
						
						
					 
					
						2020-06-01 14:48:06 +08:00 
						 
				 
			
				
					
						
							
							
								Aditya Patwardhan 
							
						 
					 
					
						
						
							
						
						423e600d46 
					 
					
						
						
							
							secure_element: atecc608_ecdsa example  
						
						... 
						
						
						
						* Replaced crypotoauthlib with esp-cryptoauthlib
* Added menuconfig option for esp-tls about using HSM
* Added error codes for HSM in esp-tls,
* Added support to select different type of ATECC608A chips
* Added README, updated docs
* tcp_transport: Added option to enable secure_element for ssl
Closes https://github.com/espressif/esp-idf/issues/4432  
						
						
					 
					
						2020-05-21 13:08:30 +05:30 
						 
				 
			
				
					
						
							
							
								Bryan Hunt 
							
						 
					 
					
						
						
							
						
						4553f6c95d 
					 
					
						
						
							
							Add cryptoauthlib as a component with mbedtls integration  
						
						... 
						
						
						
						* Add options to mbedtls for hardware acceleration
* Disable mbedtls EC curves if hardware acceleration is selected
since the hardware will have to define the curves supported
* Add a hardware ecdsa example 
						
						
					 
					
						2020-05-20 22:52:37 +05:30 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						0927ec029e 
					 
					
						
						
							
							wpa_supplicant: Allow building with mbedTLS integration but no hardware MPI  
						
						... 
						
						
						
						Also disable the relevant function in bignum.h based on config, so fails at
compile not link time.
Closes https://github.com/espressif/esp-idf/issues/5321  
						
						
					 
					
						2020-05-20 12:06:07 +10:00 
						 
				 
			
				
					
						
							
							
								Shubham Kulkarni 
							
						 
					 
					
						
						
							
						
						ca3daa50de 
					 
					
						
						
							
							mbedtls: Add configuration options  
						
						
						
						
					 
					
						2020-05-15 11:27:44 +05:30 
						 
				 
			
				
					
						
							
							
								Piyush Shah 
							
						 
					 
					
						
						
							
						
						43b3def711 
					 
					
						
						
							
							mbedtls_hkdf: Add a config option to enable HKDF  
						
						
						
						
					 
					
						2020-05-11 11:49:14 +05:30 
						 
				 
			
				
					
						
							
							
								Piyush Shah 
							
						 
					 
					
						
						
							
						
						62e1d6712b 
					 
					
						
						
							
							mbedtls: Add config options for chacha20, poly1305 and chachapoly  
						
						
						
						
					 
					
						2020-05-05 16:41:31 +00:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						433c1c9ee1 
					 
					
						
						
							
							Merge branch 'bugfix/ds_mpi_lock' into 'master'  
						
						... 
						
						
						
						crypto: DS uses RSA peripheral, added shared lock
See merge request espressif/esp-idf!8274  
						
						
					 
					
						2020-04-15 15:15:25 +08:00 
						 
				 
			
				
					
						
							
							
								kangping 
							
						 
					 
					
						
						
							
						
						4883010f40 
					 
					
						
						
							
							mbedtls: add configuration options for EC-JPAKE  
						
						... 
						
						
						
						Closes https://github.com/espressif/esp-idf/pull/5106  
						
						
					 
					
						2020-04-14 12:22:16 +00:00 
						 
				 
			
				
					
						
							
							
								Marius Vikhammer 
							
						 
					 
					
						
						
							
						
						a2a204c2b9 
					 
					
						
						
							
							crypto: DS uses RSA peripheral, added shared lock  
						
						
						
						
					 
					
						2020-04-09 11:11:04 +00:00 
						 
				 
			
				
					
						
							
							
								Jakob Hasse 
							
						 
					 
					
						
						
							
						
						ea47bbb118 
					 
					
						
						
							
							HMAC: adding upstream message support  
						
						
						
						
					 
					
						2020-03-26 19:00:27 +08:00 
						 
				 
			
				
					
						
							
							
								Marius Vikhammer 
							
						 
					 
					
						
						
							
						
						ffb9010cbe 
					 
					
						
						
							
							aes: Fixed tag sometime being wrong for HW GCM  
						
						... 
						
						
						
						The GCM hardware accelerated algorithm for S2 would sometimes output
the wrong tag.
Added additional tests for AES and GCM
Re-enable HW GCM as default option 
						
						
					 
					
						2020-03-18 08:44:38 +08:00 
						 
				 
			
				
					
						
							
							
								Marius Vikhammer 
							
						 
					 
					
						
						
							
						
						7e824508a9 
					 
					
						
						
							
							mpi: refactor bignum into common and hw specific components  
						
						... 
						
						
						
						Closes IDF-1174 
						
						
					 
					
						2020-03-16 19:44:30 +08:00 
						 
				 
			
				
					
						
							
							
								Marius Vikhammer 
							
						 
					 
					
						
						
							
						
						e21bef3f28 
					 
					
						
						
							
							mpi: active hw accel for S2  
						
						... 
						
						
						
						Actives MPI/RSA hardware acceleratio for ESP32 S2.
Closes IDF-803 
						
						
					 
					
						2020-03-13 18:33:18 +08:00 
						 
				 
			
				
					
						
							
							
								Marius Vikhammer 
							
						 
					 
					
						
						
							
						
						3351376a11 
					 
					
						
						
							
							AES: optimize AES-GCM  
						
						... 
						
						
						
						HW acceleration for GCM is now enabled by default
Closes IDF-1443 
						
						
					 
					
						2020-03-12 10:20:24 +08:00 
						 
				 
			
				
					
						
							
							
								Marius Vikhammer 
							
						 
					 
					
						
						
							
						
						37369a8a57 
					 
					
						
						
							
							crypto: SHA and AES accelerator bring up for S2  
						
						... 
						
						
						
						Brings up, fixes and enables AES and SHA hardware acceleration.
Closes IDF-714
Closes IDF-716 
						
						
					 
					
						2020-03-11 15:09:45 +08:00 
						 
				 
			
				
					
						
							
							
								morris 
							
						 
					 
					
						
						
							
						
						e30cd361a8 
					 
					
						
						
							
							global: rename esp32s2beta to esp32s2  
						
						
						
						
					 
					
						2020-01-22 12:14:38 +08:00 
						 
				 
			
				
					
						
							
							
								morris 
							
						 
					 
					
						
						
							
						
						1c2cc5430e 
					 
					
						
						
							
							global: bring up esp32s2(not beta)  
						
						
						
						
					 
					
						2020-01-16 17:41:31 +08:00 
						 
				 
			
				
					
						
							
							
								Marius Vikhammer 
							
						 
					 
					
						
						
							
						
						c63684cf6c 
					 
					
						
						
							
							hw crypto: activated hardware acceleration for esp32s2beta  
						
						... 
						
						
						
						Activated AES, RSA and SHA hardware acceleration for esp32s2 and enabled related unit tests.
Updated with changes made for ESP32 from 0a04034961f59fcaea288 
						
						
					 
					
						2019-12-12 12:37:29 +08:00 
						 
				 
			
				
					
						
							
							
								Ryan Kurte 
							
						 
					 
					
						
						
							
						
						4ee78f8496 
					 
					
						
						
							
							added KConfig option to allow loading CA certs with unsupported extensions  
						
						... 
						
						
						
						Close https://github.com/espressif/esp-idf/pull/4445  
						
						
					 
					
						2019-12-10 08:47:26 +05:30 
						 
				 
			
				
					
						
							
							
								Ivan Grokhotkov 
							
						 
					 
					
						
						
							
						
						5830f529d8 
					 
					
						
						
							
							Merge branch 'master' into feature/esp32s2beta_merge  
						
						
						
						
					 
					
						2019-10-02 19:01:39 +02:00 
						 
				 
			
				
					
						
							
							
								Prasad Alatkar 
							
						 
					 
					
						
						
							
						
						fe08f435dc 
					 
					
						
						
							
							NimBLE: Add optional mbedTLS support to NimBLE  
						
						... 
						
						
						
						- Additional menuconfig option to select either mbedTLS or Tinycrypt from NimBLE.
- Addition of `CMAC` and `ECP_RESTARTABLE` to mbedTLS menuconfig option and
  `esp_config.h`.
- Changes NimBLE `component.mk` and `CMakeLists.txt` to support mbedTLS option.
- Minor changes to `app_mesh.c` application. 
						
						
					 
					
						2019-09-30 14:15:43 +08:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						adfc06a530 
					 
					
						
						
							
							Merge branch 'master' into feature/esp32s2beta_merge  
						
						
						
						
					 
					
						2019-09-20 10:28:37 +10:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						c41b2b0415 
					 
					
						
						
							
							mbedtls: Remove esp_aes_encrypt/decrypt  
						
						... 
						
						
						
						Deprecated in ESP-IDF V3.1
Anyone reading this should please include mbedtls/aes.h and use mbedTLS APIs,
not the ESP-specific APIs. 
						
						
					 
					
						2019-09-13 09:44:07 +10:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						6990a7cd54 
					 
					
						
						
							
							Merge branch 'master' into feature/esp32s2beta_update  
						
						
						
						
					 
					
						2019-08-19 15:03:43 +10:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						caea2889c8 
					 
					
						
						
							
							aes: Add fault injection checks when writing key to hardware  
						
						... 
						
						
						
						Vulnerability reported by LimitedResults under Espressif Bug Bounty Program. 
						
						
					 
					
						2019-08-11 11:16:33 +10:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						24d26fccde 
					 
					
						
						
							
							Merge branch 'master' into feature/esp32s2beta_update  
						
						
						
						
					 
					
						2019-08-08 13:44:24 +10:00 
						 
				 
			
				
					
						
							
							
								hemal.gujarathi 
							
						 
					 
					
						
						
							
						
						1dec976fba 
					 
					
						
						
							
							Update esp_config and add new feature  
						
						... 
						
						
						
						Closes https://github.com/espressif/esp-idf/issues/3372  
						
						
					 
					
						2019-07-12 11:42:48 +05:30 
						 
				 
			
				
					
						
							
							
								suda-morris 
							
						 
					 
					
						
						
							
						
						84b2f9f14d 
					 
					
						
						
							
							build and link hello-world for esp32s2beta  
						
						
						
						
					 
					
						2019-06-11 13:07:37 +08:00 
						 
				 
			
				
					
						
							
							
								suda-morris 
							
						 
					 
					
						
						
							
						
						b146104885 
					 
					
						
						
							
							add esp32s2beta component  
						
						
						
						
					 
					
						2019-06-11 13:06:32 +08:00 
						 
				 
			
				
					
						
							
							
								Stephen Bird 
							
						 
					 
					
						
						
							
						
						058c6afd3c 
					 
					
						
						
							
							Add option to disable server side SSL session tickets as well as client  
						
						... 
						
						
						
						Closes https://github.com/espressif/esp-idf/pull/2570  
						
						
					 
					
						2019-05-29 18:02:18 +05:30 
						 
				 
			
				
					
						
							
							
								morris 
							
						 
					 
					
						
						
							
						
						709a320f33 
					 
					
						
						
							
							move hwcrypto from esp32 to mbedtls  
						
						
						
						
					 
					
						2019-03-26 16:24:22 +08:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						b7ee11231d 
					 
					
						
						
							
							mbedtls: Fix esp_debug not including its dependencies  
						
						... 
						
						
						
						As reported on forum: https://esp32.com/viewtopic.php?f=13&t=9782&p=40464#p40464  
						
						
					 
					
						2019-03-21 10:48:55 +11:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						96cd3b75cd 
					 
					
						
						
							
							Merge branch 'feature/mbedtls_mem_alloc_options' into 'master'  
						
						... 
						
						
						
						mbedtls: configurable options for controlling dynamic memory allocations
See merge request idf/esp-idf!3343  
						
						
					 
					
						2018-09-25 08:24:29 +08:00 
						 
				 
			
				
					
						
							
							
								Sagar Bijwe 
							
						 
					 
					
						
						
							
						
						48fccbf5dd 
					 
					
						
						
							
							nvs_flash: Add support for nvs encryption  
						
						
						
						
					 
					
						2018-09-24 11:25:21 +05:30 
						 
				 
			
				
					
						
							
							
								Mahavir Jain 
							
						 
					 
					
						
						
							
						
						54382277b6 
					 
					
						
						
							
							mbedtls: configurable options for controlling dynamic memory allocations  
						
						... 
						
						
						
						Modifies https://github.com/espressif/esp-idf/pull/2237  
						
						
					 
					
						2018-09-24 11:17:48 +05:30 
						 
				 
			
				
					
						
							
							
								Jason von Nieda 
							
						 
					 
					
						
						
							
						
						d7a17ac941 
					 
					
						
						
							
							Adds a Kconfig option for mbedtls' MBEDTLS_PLATFORM_MEMORY define. This makes it possible to override the mbedtls allocator with your own.  
						
						... 
						
						
						
						Merges https://github.com/espressif/esp-idf/pull/2237  
						
						
					 
					
						2018-08-01 11:28:28 +10:00 
						 
				 
			
				
					
						
							
							
								Ivan Grokhotkov 
							
						 
					 
					
						
						
							
						
						dbc919eff5 
					 
					
						
						
							
							mbedtls: update usage of mbedtls_aes_encrypt/decrypt  
						
						
						
						
					 
					
						2018-05-09 23:15:28 +08:00 
						 
				 
			
				
					
						
							
							
								Ivan Grokhotkov 
							
						 
					 
					
						
						
							
						
						aad51ea8a0 
					 
					
						
						
							
							mbedtls/port: don’t re-declare mbedtls_shaX functions  
						
						... 
						
						
						
						ALT header files for sha1, sha256, sha512 are only supposed to declare
mbedtls_sha1_context data structure. Function prototypes should come
from original header files. 
						
						
					 
					
						2018-05-09 23:15:28 +08:00 
						 
				 
			
				
					
						
							
							
								Paul Reimer 
							
						 
					 
					
						
						
							
						
						8a47679d04 
					 
					
						
						
							
							Add #include guards and __cplusplus guards to esp_debug.h  
						
						... 
						
						
						
						Merges https://github.com/espressif/esp-idf/pull/1358  
						
						
					 
					
						2017-12-07 10:25:57 +11:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						ae382b3bfa 
					 
					
						
						
							
							mbedtls: Update to 2.6.0 release (without IDF-specific patches)  
						
						
						
						
					 
					
						2017-09-07 18:02:26 +10:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						2624e10055 
					 
					
						
						
							
							esp32 hwcrypto: Use AES registers directly  
						
						
						
						
					 
					
						2017-08-25 16:08:03 +10:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						2c0ff0c1e1 
					 
					
						
						
							
							mbedtls: Add a shim header to account for including "mbedtls/config.h" directly in program  
						
						... 
						
						
						
						Previously this resulted in a config mismatch between default config and esp_config.h
Closes https://github.com/espressif/esp-idf/issues/711  
						
						
					 
					
						2017-08-21 12:37:53 +10:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						66ad84d318 
					 
					
						
						
							
							mbedtls: Add more config options to disable Elliptic Curve features  
						
						... 
						
						
						
						Can save up to an additional 20KB when not using EC in TLS, or disable
unwanted features as needed. 
						
						
					 
					
						2017-08-18 17:44:33 +10:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						c0f65f6680 
					 
					
						
						
							
							mbedtls: Expose compile-time config, disable some things by default  
						
						... 
						
						
						
						* Disables 3DES, Camellia, Blowfish, RC4, RIPEMD160, SSLv3, TLS-PSK modes, DTLS by default
* Saves about 40KB from the default TLS client code size
* Defaults no longer get "Bad" howsmyssl.com rating (no more vulnerable 3DES)
  (ping https://github.com/espressif/arduino-esp32/issues/575  )
* Allows up to another 20-30KB code size to be trimmed without security
  implications if using DER formatted certificates, RSA ciphersuites only,
  etc.
* Can save up to another 8KB by setting the TLS Role to Server or Client only. 
						
						
					 
					
						2017-08-18 17:15:08 +10:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						74817c35f3 
					 
					
						
						
							
							mbedtls: Enable filesystem support  
						
						
						
						
					 
					
						2017-03-08 09:55:31 +11:00 
						 
				 
			
				
					
						
							
							
								Angus Gratton 
							
						 
					 
					
						
						
							
						
						0b7058d8ef 
					 
					
						
						
							
							mbedTLS: Add generic support for mbedTLS debug output via the esp_log functionality  
						
						
						
						
					 
					
						2017-03-07 10:18:47 +11:00