Mahavir Jain
05e149ea78
Merge branch 'feature/add_ecdsa_p384_support_and_testcases' into 'master'
...
feat: add ecdsa-p384 testcases and relative support for ESP32C5 ECO2
Closes IDF-13008 and IDF-12630
See merge request espressif/esp-idf!38857
2025-08-14 12:33:25 +05:30
nilesh.kale
68f06a94bd
feat: add ecdsa-p384 testcases and relative support for ESP32C5 ECO2
...
This commit adds testcases in crypto/hal and mbedtls testapps.
2025-08-11 16:01:01 +05:30
morris
afd35e411a
refactor(hal): use HAL_CONFIG() macro function
2025-08-08 18:25:24 +08:00
Aditya Patwardhan
96170ea10b
refactor(hal): Move CONFIG options used in ecdsa_hal.c under config.h
2025-07-23 15:34:05 +05:30
Aditya Patwardhan
662d793f37
feat(esp_security): Added support for key manager for esp32c5
2025-06-27 15:15:26 +05:30
nilesh.kale
148d31b659
feat: enable support for deterministic mode for esp32h2
2025-05-22 14:55:15 +05:30
nilesh.kale
f19e8e6970
fix: re-enabled ecdsa support for esp32c5-eco2
2025-04-28 20:58:09 +05:30
Aditya Patwardhan
d8d9ba3dc2
fix(soc): Fixed ECDSA register compatibility
2025-01-24 11:50:17 +08:00
Aditya Patwardhan
bef2a72ecb
fix(hal): Make the ECDSA countermeasure dynamically applicable
...
This commit makes the ECDSA countermeasure dynamically applicable
across different revisions of the ESP32H2 SoC.
2025-01-24 11:50:17 +08:00
Aditya Patwardhan
82db0feab2
fix(security): Update key manager specific initializations for esp32c5
2024-10-28 11:13:43 +08:00
Aditya Patwardhan
11128b73f5
feat(hal): Add countermeasure for ECDSA generate signature
...
The ECDSA peripheral before ECO5 of esp32h2 does not perform the ECDSA
sign operation in constant time. This allows an attacker to read the
power signature of the ECDSA sign operation and then calculate the
ECDSA key stored inside the eFuse. The commit adds a countermeasure
for this attack. In this case the real ECDSA sign operation is
masked under dummy ECDSA sign operations to hide its real power
signature
2024-09-23 18:55:43 +08:00
Aditya Patwardhan
d1c47835a2
fix(security): Fixed flash encryption for esp32p4
...
The flash encryption on esp32p4 was broken due to some code related
to key manager not being executed when key manager support was
disabled on esp32p4 target.
This commit fixes that behaviour
Additionally, the atomic env enablement for
key_mgr_ll_enable_peripheral_clock was fixed.
2024-09-02 14:00:55 +08:00
nilesh.kale
00fa28259b
feat: enabled ecdsa support for c5
...
This commit adds support for ECDSA for ESP32-C5
2024-05-28 17:33:05 +05:30
harshal.patil
cd98dfc3fd
feat(hal): Add LL and HAL layer support for deterministic ECDSA
2024-03-29 12:14:11 +05:30
harshal.patil
95fac15698
feat(hal/ecdsa): Add HAL API for operation successful check
2024-03-29 12:14:11 +05:30
Aditya Patwardhan
4dc2ace0b7
fix(esp_hw_support): Update key manager support
...
1) Added new Key Manager APIs
2) Added crypto locking layer for Key Manager
3) Remove support for deploying known key
4) Format key manager support
5) Fix build header error
6) Updated the key_mgr_types.h file
7) Added key manager tests
2024-01-23 10:24:39 +05:30
Mahavir Jain
f9501f6ea9
fix(ecdsa): remove unused k_mode from the ECDSA HAL/LL API
...
For ESP32-H2 case, the hardware k mode is always enforced through
efuse settings (done in startup code).
For ESP32-P4 case, the software k mode is not supported in the peripheral
itself and code was redundant.
2023-11-15 09:42:26 +05:30
harshal.patil
d86b320892
feat(ecdsa): add ECDSA peripheral support for esp32p4
2023-09-06 11:07:37 +05:30
Sachin Parekh
d634970ed1
ecdsa: Support multiple ECDSA keys
...
Add provision to choose which efuse block should be used as ECDSA
private key
2023-04-07 14:55:21 +05:30
Sachin Parekh
aa7660c9b4
ecdsa_hal.c: Add missing configuration for signature generation
2023-04-07 14:55:21 +05:30
Sachin Parekh
d345c684ba
esp32h2: Add support for ECDSA peripheral
2023-03-24 10:43:40 +05:30