Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix(secure_boot): range-check ECDSA r,s in bootloader before ROM verify

Browse Source
This commit is contained in:
harshal.patil
2026-06-12 17:32:38 +05:30
parent 839352f836
commit 5f824c8683
15 changed files with 133 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/esp_rom/esp32p4/ld/esp32p4.rom.eco5.ld
+2 -3
View File
@@ -448,9 +448,8 @@ esp_rom_km_huk_risk = 0x4fc00710;
/* Functions */
ets_emsa_pss_verify = 0x4fc00714;
ets_rsa_pss_verify = 0x4fc00718;
ets_ecdsa_verify = 0x4fc0071c;
ets_secure_boot_verify_bootloader_with_keys = 0x4fc00720;
ets_secure_boot_verify_signature = 0x4fc00724;
_rom_ets_ecdsa_verify = 0x4fc0071c;
_rom_ets_secure_boot_verify_signature = 0x4fc00724;
ets_secure_boot_read_key_digests = 0x4fc00728;
ets_secure_boot_revoke_public_key_digest = 0x4fc0072c;
components/esp_rom/esp32p4/ld/esp32p4.rom.ld
+2 -3
View File
@@ -450,9 +450,8 @@ esp_rom_km_huk_risk = 0x4fc0071c;
/* Functions */
ets_emsa_pss_verify = 0x4fc00720;
ets_rsa_pss_verify = 0x4fc00724;
ets_ecdsa_verify = 0x4fc00728;
ets_secure_boot_verify_bootloader_with_keys = 0x4fc0072c;
ets_secure_boot_verify_signature = 0x4fc00730;
_rom_ets_ecdsa_verify = 0x4fc00728;
_rom_ets_secure_boot_verify_signature = 0x4fc00730;
ets_secure_boot_read_key_digests = 0x4fc00734;
ets_secure_boot_revoke_public_key_digest = 0x4fc00738;