Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(secure_boot): range-check ECDSA r,s in bootloader before ROM verify

Browse Source
This commit is contained in:
harshal.patil
2026-06-16 10:38:59 +05:30
committed by Harshal Patil
parent 85081d2414
commit 0c2ebe3180
19 changed files with 133 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/esp_rom/esp32p4/ld/esp32p4.rom.eco0_4.ld
+1 -2
View File
@@ -451,8 +451,7 @@ esp_rom_km_huk_risk = 0x4fc0071c;
ets_emsa_pss_verify = 0x4fc00720;
ets_rsa_pss_verify = 0x4fc00724;
_rom_ets_ecdsa_verify = 0x4fc00728;
ets_secure_boot_verify_bootloader_with_keys = 0x4fc0072c;
ets_secure_boot_verify_signature = 0x4fc00730;
_rom_ets_secure_boot_verify_signature = 0x4fc00730;
ets_secure_boot_read_key_digests = 0x4fc00734;
ets_secure_boot_revoke_public_key_digest = 0x4fc00738;
components/esp_rom/esp32p4/ld/esp32p4.rom.ld
+1 -2
View File
@@ -449,8 +449,7 @@ esp_rom_km_huk_risk = 0x4fc00710;
ets_emsa_pss_verify = 0x4fc00714;
ets_rsa_pss_verify = 0x4fc00718;
_rom_ets_ecdsa_verify = 0x4fc0071c;
ets_secure_boot_verify_bootloader_with_keys = 0x4fc00720;
ets_secure_boot_verify_signature = 0x4fc00724;
_rom_ets_secure_boot_verify_signature = 0x4fc00724;
ets_secure_boot_read_key_digests = 0x4fc00728;
ets_secure_boot_revoke_public_key_digest = 0x4fc0072c;