nilesh.kale
fcb7e77e48
feat(mbedtls): add ECC P-384 mbedtls support and test_cases
2025-12-02 11:02:01 +05:30
harshal.patil
55fd8a5fb2
fix(mbedtls/port): Use internal buffers to perform chunkwise operations
...
when the external input and output buffers are unaligned.
This also fixes as a recursion loop that occurs when the size of the input
buffer is not aligned to dcache_line_size but is aligned to AES_BLOCK_BYTES
2025-12-01 14:43:10 +05:30
Laukik Hase and Harshal Patil
150418fb5d
feat(esp_tee): Enable GDMA burst mode for AES/SHA operations
...
Co-authored-by: Harshal Patil <harshal.patil@espressif.com >
2025-12-01 12:31:17 +05:30
Ashish Sharma
69ea28c886
feat: add Kconfig option for mbedTLS 4.x
2025-12-01 14:05:05 +08:00
Konstantin Kondrashov
c267c6245a
feat(efuse): Update depends_components
...
Where efuse is used as depends_components:
- to test efuse APIs:
- components/efuse/test_apps
- examples/system/efuse
- to test secuity APIs:
- components/hal/test_apps/crypto
- to test adc calib APIs:
- components/esp_adc/test_apps/adc
- examples/peripherals/adc/continuous_read
- examples/peripherals/adc/oneshot_read
2025-11-25 17:55:52 +02:00
morris
bc064a353a
refactor(hal_dma): move bitscrambler from hal component
...
because bitscrambler can't live without DMA, it's highly binded with the
GDMA peripheral.
2025-11-21 16:10:16 +08:00
Espressif BOT
96eb7ae213
change(mbedtls/crt_bundle): Update esp_crt_bundle certificates
2025-11-19 10:00:39 +08:00
Harshal Patil
b873a82d5b
Merge branch 'feat/generic_key_mgr_key_types' into 'master'
...
Store key_len field in the key_config
See merge request espressif/esp-idf!42692
2025-11-18 15:12:03 +05:30
morris
aa1fd9c611
refactor: avoid function calls inside MIN/MAX macros
2025-11-17 22:17:54 +08:00
harshal.patil
dac0bbfcc2
change(mbedtls): Generalize key source union for the hardware ECDSA context
2025-11-17 12:34:09 +05:30
harshal.patil
1f2cbde525
change(esp_key_mgr): Store key_len field in the key_info
...
- Update the Key Manager key types to be generic
- Define a new enum to determine the length of the keys
- Refactor the Key Manager driver support generic key types and key lengths
- Also store key deployment mode in the key recovery info
2025-11-17 12:34:09 +05:30
armando
b25ba4a0c1
ci(p4): disable p4 rev3 invalid tests temporarily
2025-11-17 12:11:39 +08:00
Mahavir Jain
da1ff709ce
Merge branch 'fix/axi_dma_ext_mem_alignment_c5' into 'master'
...
Align AES and SHA buffers to 16 when SPIRAM encryption is enabled
Closes DIG-754 and IDF-14344
See merge request espressif/esp-idf!43004
2025-11-11 17:14:47 +05:30
Mahavir Jain
437ddd1a45
Merge branch 'feat/update_mbedtls_3.6.5' into 'master'
...
feat(mbedtls): update to version 3.6.5
See merge request espressif/esp-idf!42623
2025-11-11 14:09:43 +05:30
Ashish Sharma
9fe50060e6
feat(mbedtls): update to version 3.6.5
2025-11-11 10:07:05 +08:00
Laukik Hase
f533502324
feat(esp_tee): Add support for TEE secure storage encryption for ESP32-C61
2025-11-07 14:54:16 +05:30
Laukik Hase
b9a503e9ec
feat(esp_tee): Support for ESP32-C61 - the rest of the components
2025-11-07 14:54:16 +05:30
harshal.patil
a6de2c79ed
fix(mbedtls/port): Align AES and SHA DMA buffers to 16 when SPIRAM encryption is enabled
...
- Targets that support GDMA and MSPI encryption module need data and addresses aligned to 16
2025-11-06 12:28:19 +05:30
Roland Dobai
a0b589c147
Merge branch 'feat/cmakev2' into 'master'
...
feat(cmakev2): introduce cmake-based build system v2
See merge request espressif/esp-idf!42691
2025-11-04 02:53:36 +01:00
Frantisek Hrbata
070590986a
fix(mbedtls/cmake): handle lwip dependency in cmakev2
...
Currently, the lwip is linked to mbedtls if CONFIG_LWIP_ENABLE is set.
This approach works in cmakev1 because only the configuration for
BUILD_COMPONENTS is available during component evaluation. However, this
is not the case in cmakev2, where the configuration for all components
is available. This means that even if CONFIG_LWIP_ENABLE is set, it does
not guarantee that the lwip component is included in the build. For
cmakev2, modify the check to use a generator expression to ensure that
lwip is linked to mbedtls only if lwip is actually included in the
build.
Signed-off-by: Frantisek Hrbata <frantisek.hrbata@espressif.com >
2025-10-30 17:17:49 +08:00
Ashish Sharma
acf89924c8
feat(esp_http): migrate esp_http to PSA API
2025-10-26 10:13:14 +08:00
Zhang Shu Xian
e8ce6566d5
Merge branch 'docs/update_reference_to_esp32_errata' into 'master'
...
docs: Update reference to the specific section in ESP32 Errata
Closes DOC-10080
See merge request espressif/esp-idf!42514
2025-10-20 17:54:19 +08:00
Mahavir Jain
1b8994c739
Merge branch 'feat/esp32p4_eco5_support_km_memprot' into 'master'
...
Support newer Key Manager key sources for ESP32-P4 V3
Closes IDF-13524, IDF-13527, IDF-13528, and IDF-12233
See merge request espressif/esp-idf!42360
2025-10-17 17:33:02 +05:30
Mahavir Jain
fcc01f872b
Merge branch 'fix/allign_hal_crypto_ecdsa_test_parameters_with_mbedtls_tests' into 'master'
...
feat(hal/test_apps): Align hal/crypto ECDSA test parameters to mbedtls test_apps
See merge request espressif/esp-idf!42226
2025-10-17 08:25:49 +05:30
Zhang Shuxian
52aa593617
docs: Update reference to the specific section in ESP32 Errata
2025-10-16 10:08:16 +08:00
harshal.patil
609d52c6bf
feat(esp32p4): Support newer Key Manager key sources for ESP32-P4 V3
2025-10-15 15:49:20 +05:30
Laukik Hase
6e51fac96e
Merge branch 'fix/esp_tee_flash_op_bound_checks' into 'master'
...
fix(esp_tee): Correct flash operation bound checks to handle all overlap cases
Closes IDF-14129
See merge request espressif/esp-idf!41946
2025-10-13 13:31:03 +05:30
Peter Dragun
e3198fff3c
feat: Update esptool to v5
2025-09-30 15:28:55 +02:00
Laukik Hase
8b92f3603f
fix(esp_tee): Correct flash operation bound checks to handle all overlap cases
...
- Ensure bound checks correctly handle all scenarios, including
when a requested operation's (SPI0/1) range fully contains the
TEE-protected region.
- Disable delegation of INTWDT timeout and Cache error interrupts as they reset
the device after the panic handler
2025-09-30 12:22:25 +05:30
nilesh.kale
5bad8496dc
feat(hal/test_apps): Aligh hal/crypto ECDSA test parameters to mbedtls test_apps
...
Updated the hal/crypto ECDSA test parameters to match the configuration used
mbedtls/ test applications for consistency and easier maintenance.
2025-09-26 15:09:22 +05:30
Akiyama Kohane
4358d21a06
fix(mbedtls): prevent vectorization fault in clang O2 optimization
...
Closes https://github.com/espressif/esp-idf/pull/17582
2025-09-25 13:22:12 +08:00
Harshal Patil
c6e65586e3
Merge branch 'feat/support_aes_block_and_dma_modes_during_runtime' into 'master'
...
Support AES block and DMA modes during runtime
Closes IDFGH-15251 and IDF-2594
See merge request espressif/esp-idf!40917
2025-09-23 19:46:49 +05:30
Mahavir Jain
4c8833b6b6
Merge branch 'fix/ecdsa_efuse_purpose_check' into 'master'
...
fix(ecdsa): Fixed ECDSA efuse purpose check condition
See merge request espressif/esp-idf!41926
2025-09-21 19:41:10 +05:30
harshal.patil
c36aef9c19
change(mbedtls/port): Wrap headers with relevant soc_caps
...
- Needed to fix builds for the targets that are yet to supported
2025-09-20 10:55:07 +05:30
harshal.patil
8992f08bef
feat(mbedtls/aes): Add config to support AES block and DMA modes during runtime
...
- Dynamically switch the AES operation modes based on the buffer operating length
- Shorter AES and SHA operations can now run faster and concurrently as well
Closes https://github.com/espressif/esp-idf/issues/15914
2025-09-20 10:55:07 +05:30
Laukik Hase
c152663408
feat(esp_tee): Added support for PBKDF2-based (HMAC) ECDSA signing
2025-09-19 12:06:02 +05:30
Aditya Patwardhan
b0cdc82996
fix(ecdsa): Fixed ECDSA efuse purpose check condition
2025-09-18 15:29:25 +05:30
Kapil Gupta
88d71da23f
fix(mbedtls): Addressed comments on PR15679
2025-09-16 22:10:53 +05:30
Deomid rojer Ryabkov
aa581523c9
feat(mbedtls): Add mbedtls_esp_random()
...
Suitable for passing as f_rng to various Mbed-TLS APIs that require it
2025-09-15 11:09:21 +08:00
Alexey Lapshin
28ced4efad
fix(config): actualize newlib Kconfig options
2025-08-28 12:25:09 +08:00
Mahavir Jain
42914e01ee
feat: remove some deprecated APIs from 6.0 release
2025-08-20 14:20:37 +05:30
Marek Fiala
9d35d63651
feat(cmake): Update minimum cmake version to 3.22 (whole repository)
2025-08-19 14:44:32 +02:00
Mahavir Jain
758939caec
Merge branch 'fix/enable_ssl_cookie_support_by_default' into 'master'
...
fix(mbedtls): enable ssl cookie support by default
See merge request espressif/esp-idf!41235
2025-08-18 11:42:24 +05:30
harshal.patil
da5dda1131
fix(esp_tee): Fix build failure due to ECDSA-P384
2025-08-15 12:10:36 +05:30
Mahavir Jain
74da6d7a2f
Merge branch 'feature/esp_tee_c5' into 'master'
...
feat(esp_tee): Initial support for ESP32-C5
Closes IDF-10426, IDF-10427, IDF-10428, IDF-10429, and IDF-10430
See merge request espressif/esp-idf!38807
2025-08-14 17:44:12 +05:30
Mahavir Jain
05e149ea78
Merge branch 'feature/add_ecdsa_p384_support_and_testcases' into 'master'
...
feat: add ecdsa-p384 testcases and relative support for ESP32C5 ECO2
Closes IDF-13008 and IDF-12630
See merge request espressif/esp-idf!38857
2025-08-14 12:33:25 +05:30
Ashish Sharma
2b8703ef9f
fix(mbedtls): enable ssl cookie support by default
2025-08-14 12:05:02 +08:00
Aditya Patwardhan
286f7fe082
Merge branch 'change/ecdsa_does_not_use_mpi_esp32h2_eco5' into 'master'
...
The ECDSA module of ESP32-H2 ECO5 does not use the MPI module
See merge request espressif/esp-idf!41156
2025-08-13 23:22:51 +05:30
Laukik Hase
340de9823a
feat(esp_tee): Support for ESP32-C5 - the rest of the components
2025-08-13 14:08:59 +05:30
harshal.patil
16873520fd
ci(flash_enc): Extend flash encryption and mbedtls test case to test PSRAM encryption
2025-08-12 11:29:00 +05:30