Mahavir Jain
8b239ab605
Merge branch 'fix/remove_mbedtls_logical_dead_code' into 'master'
...
fix(mbedtls): remove logical dead code from mbedtls
Closes IDF-12866
See merge request espressif/esp-idf!38498
2025-04-23 12:21:20 +08:00
harshal.patil
b0d9ccf6e3
fix(mbedtls): Fix config dependencies when ROM mbedtls is used
2025-04-21 13:38:29 +05:30
Ashish Sharma
0de1429834
fix(mbedtls): remove logical dead code from mbedtls
2025-04-17 13:43:48 +08:00
Laukik Hase
4a4d63d36e
feat(esp_tee): Protect the ECC peripheral from REE access
2025-04-16 19:19:04 +05:30
Laukik Hase
1c4969bc47
feat(esp_security): Add a TEE-specific crypto lock layer with stub implementations
2025-04-16 19:19:03 +05:30
Mahavir Jain
c8f790078b
Merge branch 'feature/enable_ecdsa_support_for_esp32h21' into 'master'
...
feat: add ECDSA support for esp32h21
Closes IDF-11496
See merge request espressif/esp-idf!36591
2025-04-16 17:58:52 +08:00
Laukik Hase
1c6405eb9b
Merge branch 'fix/esp_tee_coverity_bugs' into 'master'
...
fix(security): Fixed coverity warnings related to the `esp_tee` component
Closes IDF-12803, IDF-12804, and IDF-12826
See merge request espressif/esp-idf!38360
2025-04-14 15:05:27 +08:00
nilesh.kale
aae4bfb6f3
feat: enable ecdsa support for esp32h21
...
This commit enabled suppot for ECDSA peripheral in ESP32H21.
2025-04-14 10:26:46 +05:30
Laukik Hase
13aff0b216
fix(security): Fixed coverity warnings related to the esp_tee component
...
- Also, disable the SECP192R1 curve (Mbed TLS config) when TEE Secure Storage
does not require it
2025-04-14 10:12:51 +05:30
Ashish Sharma
b62e486247
fix(component/mbedtls): Fix failing cert verification with TLS1.3 and DS peripheral
2025-04-11 18:34:16 +08:00
Laukik Hase
bd314c2460
refactor(esp_tee): Update the SHA clock configuration service call
2025-04-04 10:31:28 +05:30
Laukik Hase
3e95020c59
refactor(esp_security): Introduce dedicated APIs for crypto clock configuration
2025-04-04 10:31:27 +05:30
Laukik Hase
3fd107aa04
feat(mbedtls): Add support for ECDSA signing with TEE secure storage
2025-04-03 15:35:15 +05:30
Laukik Hase
1e8933d296
feat(esp_tee): Add support for SECP192R1 curve in TEE secure storage
2025-04-03 15:35:14 +05:30
Mahavir Jain
21f59bd030
Merge branch 'feat/update_mbedtls_3.6.3' into 'master'
...
feat(component/mbedtls): update to upstream v3.6.3
Closes IDF-12730
See merge request espressif/esp-idf!38041
2025-04-01 18:38:12 +08:00
Ashish Sharma
b126ebb596
feat(mbedtls): new config to allow weak cert verification
2025-03-28 15:46:48 +08:00
Chen Jichang
c34b4eb882
feat(esp32h4): enable ESP32H4 ci build
2025-03-28 14:41:28 +08:00
Ashish Sharma
0291bee0ff
feat(mbedtls): update to version 3.6.3
2025-03-28 13:03:12 +08:00
Mahavir Jain
8e4cbdfe36
Merge branch 'feat/configurable_mbedtls_sha1' into 'master'
...
feat(mbedtls): Make mbedtls SHA1 support configurable
See merge request espressif/esp-idf!37795
2025-03-24 17:38:05 +08:00
Laukik Hase
6b1f4fe46c
fix(esp_tee): Utilize the SHA H/W for hashing operations in the TEE
2025-03-22 10:02:24 +05:30
Mahavir Jain
ce7ec7f19f
Merge branch 'feature/enable_hmac_and_ds_support_for_esp32h21' into 'master'
...
feat: enabled hmac and ds support in esp32h21
Closes IDF-11495 and IDF-11497
See merge request espressif/esp-idf!37085
2025-03-21 17:23:46 +08:00
Laukik Hase
98e16412a7
refactor(esp_tee): Use the AES-GCM port layer for operations in the TEE
2025-03-19 14:30:52 +05:30
Laukik Hase
6e5513b8ad
refactor(esp_tee): Component dependency cleanup for the TEE build
2025-03-19 14:30:52 +05:30
harshal.patil
e442f11320
feat(mbedtls): Make mbedtls SHA1 support configurable
2025-03-19 14:28:40 +05:30
Ashish Sharma
2fc151d2a9
fix(component/mbedtls): Adds github root cert to cmn_crt_authorities.csv
2025-03-17 14:32:06 +08:00
nilesh.kale
f794eb9b2d
feat: enabled hmac and ds support in esp32h21
...
This commit enables support for HMAC and DS in ESP32H21
2025-03-13 10:23:11 +05:30
Mahavir Jain
2c68d2d266
Merge branch 'update/update_certs_bundle' into 'master'
...
Update esp_crt_bundle certificates
See merge request espressif/esp-idf!37278
2025-03-05 15:47:21 +08:00
igor.udot
daf2d31008
test: format all test scripts
2025-03-05 12:08:48 +08:00
Espressif BOT
a39d8d43ee
change(mbedtls/crt_bundle): Update esp_crt_bundle certificates
2025-03-05 10:44:47 +08:00
Laukik Hase
26fa7109f3
fix(esp_tee): Protect the AES/SHA clock registers from REE access
2025-02-25 16:49:08 +05:30
harshal.patil
d403005afc
change(mbedtls/sha): Change the legacy formatting in the SHA port layers
2025-02-11 11:04:57 +05:30
harshal.patil
2717e5b62e
fix(mbedtls/sha): Fix some local variable's types to avoid any substraction overflow error
...
- Though such a case would not occur given the way it is used the driver layer
2025-02-11 10:58:16 +05:30
Gao Xu
1e8a48db74
Merge branch 'feat/h21_enable_ci_build_test' into 'master'
...
feat(esp32h21): enable ESP32H21 ci build
Closes IDF-11561
See merge request espressif/esp-idf!36197
2025-02-07 14:10:54 +08:00
gaoxu
5ef4f20778
feat(esp32h21): disable unsupported build test
2025-02-06 15:47:51 +08:00
harshal.patil
7d8211bf87
feat(mbedtls): Support both SHA block and DMA modes during runtime
...
Dynamically switch the SHA operation modes based on the buffer operating length
2025-02-04 16:49:30 +05:30
harshal.patil
37de702e97
feat(nvs_flash): Enable the usage of mbedtls from ROM for bootloader NVS decryption
...
Bootloader NVS decryption uses hardware ROM APIs to decrypt the NVS contents,
but for targets that do not support AES hardware we could benefit by using the
software mbedtls library that is present in the ROM directly.
2025-01-29 18:51:29 +05:30
Aditya Patwardhan
839c18c762
feat(docs): Update minimizing binary size
...
The ESP32-H2 software countermeasure may not be necessary
for ESP32-H2 v1.2 and above, this commit updates
the relevant documentation
2025-01-24 11:50:17 +08:00
Aditya Patwardhan
d8d9ba3dc2
fix(soc): Fixed ECDSA register compatibility
2025-01-24 11:50:17 +08:00
Aditya Patwardhan
bef2a72ecb
fix(hal): Make the ECDSA countermeasure dynamically applicable
...
This commit makes the ECDSA countermeasure dynamically applicable
across different revisions of the ESP32H2 SoC.
2025-01-24 11:50:17 +08:00
Mahavir Jain
6875cbf022
feat(ecc): enable ECC constant time mode for ESP32-H2 ECO5
2025-01-24 11:50:17 +08:00
Espressif BOT
7c45809b39
change(mbedtls/crt_bundle): Update esp_crt_bundle certificates
2025-01-01 10:00:39 +08:00
Mahavir Jain
849ce255aa
fix(esp_crt_bundle): remove expired DST Root CA X3 from bundle
2024-12-19 08:40:16 +05:30
Espressif BOT
24be50e71d
change(mbedtls/crt_bundle): Update esp_cmn_crt_bundle certificates
2024-12-18 14:52:09 +05:30
Espressif BOT
001247a29a
change(mbedtls/crt_bundle): Update esp_crt_bundle certificates
2024-12-13 14:29:37 +08:00
harshal.patil
c6ea979efa
feat(hal/aes): Enable pseudo rounds function during AES operations
2024-12-03 11:17:54 +05:30
Alexey Lapshin
888b5f7e8d
feat(newlib): add picolibc support
2024-12-02 21:35:56 +07:00
Laukik Hase
05e31e5148
feat(esp_tee): Support for ESP-TEE - mbedtls component
2024-12-02 12:20:02 +05:30
harshal.patil
2560484e4a
fix(mbedtls/port): Fixed overflowed constant in esp_mpi_exp_mpi_mod_hw_op()
2024-11-27 11:39:42 +05:30
harshal.patil
f62bb46b48
fix(mbedtls/aes): Fix external memory corruption caused due to unaligned length cache sync
...
Fixes the memory corruption issue that arises due to external memory cache sync of unaligned
length bytes when L2 cache line size is greater than the L1 cache line size
2024-11-14 15:03:19 +05:30
harshal.patil
7786cbe2c8
docs(mem_alloc): Fix typo to make a section visible for non-esp32 spiram targets
2024-11-05 10:56:20 +05:30
