Commit Graph
100 Commits
Author SHA1 Message Date
Ashish Sharma cde2fd4718 fix(esp_srp): reject SRP client public key when A mod N is zero 2026-04-17 15:21:21 +08:00
Ashish Sharma 6a36ec6d07 feat(esp_http_server): adds check for crlf in response creation 2026-04-13 10:32:24 +08:00
Ashish Sharma ec72b956d2 feat(esp_https_server): adds support for user callback on handshake failure
Closes https://github.com/espressif/esp-idf/issues/18053
2026-04-12 18:37:23 +08:00
Ashish Sharma 90fe61fd0c feat(esp_local_ctrl): adds basic test app 2026-04-12 18:18:25 +08:00
Ashish Sharma 28775ac4f6 fix(esp_local_ctrl): fixes a potential double free 2026-04-12 18:18:22 +08:00
Ashish Sharma bda099031e fix(mbedtls): reenable RSA 4096 bit key performance test 2026-04-09 10:26:10 +08:00
Ashish Sharma 9b4cacf9cb fix(protocomm): fixes potential issues that can lead to crash during device provisioning 2026-04-07 11:09:37 +08:00
Ashish Sharma 6e08270b4a Merge branch 'fix/fix_esp32p4_key_mgr_efuse_key_rev_le_3_v6.0' into 'release/v6.0'
fix(esp_hal_security): fixes failing hmac_hal_configure with efuse_key for p4 rev < 3 (v6.0)

See merge request espressif/esp-idf!46892
2026-03-25 10:38:30 +08:00
Ashish Sharma 0cac091538 fix(esp_hal_security): fixes failing hmac_hal_configure with efuse_key for p4 rev < 3
Closes https://github.com/espressif/esp-idf/issues/18370
2026-03-24 16:33:25 +05:30
Ashish Sharma a519271c3e fix: fixes memory leak with subprotocols 2026-03-23 18:41:42 +08:00
Ashish Sharma 0dc4ee7537 fix: fixes websocket server possible null dereference 2026-03-23 18:41:42 +08:00
Ashish Sharma f40f9ac497 fix(secure_boot): marks 192 bit support curve legacy 2026-03-20 19:07:55 +05:30
Ashish Sharma 2eb3c1375f feat(http_server): adds example to test server pong response 2026-03-20 15:10:52 +08:00
Ashish Sharma a5f46aa6ee docs(security): adds data partition verification docs 2026-03-20 15:08:54 +08:00
Ashish Sharma 8c6845bb96 feat(secure_boot): adds api to verify data partition integrity
Closes https://github.com/espressif/esp-idf/issues/17482
2026-03-20 15:08:54 +08:00
Ashish Sharma 532a8f4ee5 fix(mbedtls): fixes incorrect macro checks in PSA SHA driver
Closes https://github.com/espressif/esp-idf/issues/18354
2026-03-18 18:51:10 +08:00
Ashish Sharma 8a990805f6 fix(esp_http_client): delete Content-Length header when using Transfer-Encoding
Closes https://github.com/espressif/esp-idf/issues/18242
2026-03-17 12:20:58 +08:00
Ashish Sharma 6131f55136 feat(esp-tls): adds per ssl context state management 2026-03-17 10:45:32 +08:00
Ashish Sharma d96e33375c fix: removes deprecated http_crypto sources 2026-03-17 10:45:32 +08:00
Ashish Sharma 79fe9ff741 fix: fixes failing dynamic buffer tests 2026-03-17 10:45:32 +08:00
Ashish Sharma 9618e5cd77 docs: adds RSA DS docs for PSA Migration 2026-03-17 10:28:39 +08:00
Ashish Sharma 4e9367bc41 fix(esp_http_server): fix ws server subprotocol match 2026-03-12 17:03:21 +08:00
Ashish Sharma 222d470312 feat(http_server): improve websocket server handling
1. Adds post handshake callback
2. Removes requirement to handle HTTP_GET message in websocket handler

Closes https://github.com/espressif/esp-idf/issues/18215
2026-03-04 14:00:12 +08:00
Ashish Sharma de9962fe33 feat(blufi): update to AES-CTR 2026-03-02 14:35:46 +08:00
Ashish Sharma bd39f141ff fix: enable HARDWARE_MPI by default 2026-03-02 14:33:21 +08:00
Ashish Sharma cb91021678 fix(mbedtls): updates crypto performance numbers 2026-02-12 20:37:54 +08:00
Ashish Sharma 939be5c62f fix(mbedtls): enable pthread threading by default 2026-02-12 20:37:54 +08:00
Ashish Sharma 397c689548 fix: make the PSA compile definitions public 2026-02-11 18:04:56 +08:00
Ashish Sharma 0aef47a07e change(mbedtls): rename builtin to mbed-builtin 2026-02-11 18:04:56 +08:00
Ashish Sharma 4abcb123be change(mbedtls): update mbedTLS default configs
1. Disables MBEDTLS_ARIA_C by default
2. SECP192R1 support is disabled by default
2026-02-11 18:04:56 +08:00
Ashish Sharma 762c4e9e65 fix(mbedtls): revert struct member name change esp_rsa_ds_data to esp_ds_data 2026-02-06 17:37:42 +08:00
Ashish Sharma 7418a91d3e feat: adds DS Sign capabilities for ESP32S2 2026-02-06 16:09:41 +08:00
Ashish Sharma b1f14d19d0 feat: adds new Kconfig variable for DS peripheral 2026-02-06 16:09:41 +08:00
Ashish Sharma 93349d05b2 feat: adds PSA DS driver support 2026-02-06 16:09:41 +08:00
Ashish Sharma c8f1fa86a2 feat(esp_http_client): adds support to save response headers
Closes https://github.com/espressif/esp-idf/issues/17695
2026-02-03 14:40:08 +08:00
Ashish Sharma 539d62b8ba fix: Skip writing to esp-idf directory when tfpsacrypto is built
Closes https://github.com/espressif/esp-idf/issues/18163
2026-01-29 13:46:44 +08:00
Ashish Sharma 1591d529fd feat(esp_http_client): adds API to get transport socket 2026-01-22 18:24:31 +08:00
Ashish Sharma 0559222711 fix: stop reading ws data when peer closes the connection
Closes https://github.com/espressif/esp-idf/issues/17822
2026-01-22 18:16:26 +08:00
Ashish Sharma 63f3072c9c fix: fixes potential ws server deadlock with blocking work queue
Closes https://github.com/espressif/esp-idf/issues/17591
2026-01-22 18:10:24 +08:00
Ashish Sharma 933dd7e02f feat: adds PSA MD5 driver support 2026-01-09 13:56:03 +05:30
Ashish Sharma 54a72063ef fix: fixes failing tee_basic example build 2026-01-09 13:55:59 +05:30
Ashish Sharma 1c74bf57dd fix(esp_http_client): fix incorrect digest calculation for SHA256 auth digest
According to RFC 7616, nonce-prime and cnonce-prime is used for SHA-256-sess only and not for SHA-256.
This commit updates the check and uses nonce only for "-sess" algorithms.

Regression from 66995965e7
2026-01-07 10:17:51 +08:00
Ashish Sharma 4073c89471 fix: fixes failing pipeline with internal wifi mbedtls client 2026-01-06 17:11:34 +08:00
Ashish Sharma 12368d65bb fix: enable SECP_R1_192 curve for ESP-TEE 2026-01-05 14:54:34 +05:30
Ashish Sharma 49876a19f7 fix: fixes coverity reported warnings 2026-01-05 14:54:34 +05:30
Ashish Sharma 246b052c93 fix(mbedtls): use ROM functions for md5 2026-01-05 14:54:33 +05:30
Ashish Sharma b02538834c fix: resolves MR comments 2025-12-20 23:02:25 +08:00
Ashish Sharma 5d5ba9d008 fix: migrate PSA SHA driver to be similar to parallel engine port 2025-12-19 11:06:41 +08:00
Ashish Sharma 646c9a994a fix: revert fastpbkdf2 implementation from PSA to improve performace 2025-12-19 07:29:43 +08:00
Ashish Sharma 76287081ea feat: code cleanup 2025-12-19 07:29:43 +08:00
Ashish Sharma 3dea3aae1d fix: fixes coverity reported warnings 2025-12-19 07:29:43 +08:00
Ashish Sharma 88346ccec5 fix: revert back to using mbedtls sha implementation for espcoredump 2025-12-19 07:29:08 +08:00
Ashish Sharma 37f665ae8c fix: improves some RSA key performances.
This fixes watchdog reset on ESP32 in certain WiFi tests.
2025-12-19 07:29:08 +08:00
Ashish Sharma 1e6621d285 fix: increase default stack size for esp_eth test apps 2025-12-19 07:29:08 +08:00
Ashish Sharma efee84f929 fix: use ROM APIs for espcoredump SHA operations 2025-12-19 07:29:08 +08:00
Ashish Sharma 98afd06c8f fix(pytest): patch to test panic test failures 2025-12-19 07:29:08 +08:00
Ashish Sharma aa88c81dfb fix(wpa_supplicant): revert changes to dpp_crypto 2025-12-19 07:29:08 +08:00
Ashish Sharma c2c31ba9d2 fix(wpa_supplicant): revert changes to dpp_crypto 2025-12-19 07:29:08 +08:00
Ashish SharmaandMahavir Jain 06d03e1a12 feat: add NVS based secure storage layer for PSA
(cherry picked from commit 31c7bad7f74ce8e54ea0563b670df37a58215600)

Co-authored-by: Mahavir Jain <mahavir@espressif.com>
2025-12-19 07:29:00 +08:00
Ashish Sharma f306dbea84 feat(mbedtls): migrates ESP-TEE with PSA APIs 2025-12-19 07:28:33 +08:00
Ashish Sharma c47caf4f0a feat(mbedtls): adds mbedtls alt drivers with PSA 2025-12-19 07:28:33 +08:00
Ashish Sharma 1d33cc26bd feat(mbedtls): adds AES drivers with PSA 2025-12-19 07:28:32 +08:00
Ashish Sharma b8a738e0c4 feat(mbedtls): adds SHA drivers with PSA 2025-12-19 07:28:32 +08:00
Ashish Sharma 7d17e8a024 feat(mbedtls): adds AES drivers with PSA 2025-12-19 07:28:28 +08:00
Ashish Sharma e629ab299c feat(mbedtls): adds SHA drivers with PSA 2025-12-19 07:27:59 +08:00
Ashish Sharma bf46351fb0 feat(mbedtls): fix build errors with PSA migration 2025-12-19 07:27:54 +08:00
Ashish Sharma d8e2e43f18 feat(wpa_supplicant): mbedtls PSA migration 2025-12-18 21:18:58 +08:00
Ashish Sharma a088d2ccdc feat(mbedtls): fix build errors with PSA migration 2025-12-18 21:18:58 +08:00
Ashish Sharma b0da66f7e1 feat(bt): migrate mbedtls to PSA APIs 2025-12-18 21:18:58 +08:00
Ashish Sharma b4fea9cccc feat(lwip): migrate to to PSA API interface 2025-12-18 21:18:58 +08:00
Ashish Sharma 1d92b530cd feat(wpa_supplicant): mbedtls PSA migration
feat(wpa_supplicant): mbedtls PSA migration
2025-12-18 21:18:58 +08:00
Ashish Sharma efd24c27db feat(mbedtls): update to version 3.6.5 2025-11-11 16:43:07 +08:00
Ashish Sharma 8f0a19d169 fix: fix the failing tcp_transport host test in the CI 2025-10-16 11:47:08 +08:00
Ashish Sharma 62f852a93b feat(esp_tls): supports setting tls version and ciphersuite in server config
Closes https://github.com/espressif/esp-idf/issues/17660
2025-10-03 15:19:41 +08:00
Ashish Sharma 59f5bb4540 Merge branch 'contrib/github_pr_17652' into 'master'
fix(esp_tls_conn_new_sync): Fix `esp_tls_conn_new_sync`'s doc to reflect its implementation (GitHub PR)

Closes IDFGH-16528 and IDFGH-16475

See merge request espressif/esp-idf!42263
2025-09-30 16:46:37 +08:00
Ashish Sharma 9cb348789c fix(esp_tls): limit ret code from esp_mbedtls_handshake 2025-09-24 09:36:38 +08:00
Ashish Sharma 030ba7d8cf Merge branch 'contrib/github_pr_17470' into 'master'
fix(http_server): Corrected initialization value for lru_counter at h… (GitHub PR)

Closes IDFGH-16325

See merge request espressif/esp-idf!41639
2025-09-12 19:59:20 +08:00
Ashish Sharma 70d9308f16 change(cjson): update cjson version to 1.7.19 2025-09-10 18:29:18 +08:00
Ashish Sharma 08a4a2b506 docs(esp_tls): adds documentation regarding sni 2025-08-29 16:13:42 +08:00
Ashish Sharma 6acdf78438 Merge branch 'doc/add_tls_client_session_management_doc' into 'master'
docs: Adds doc for client session tickets

Closes IDF-13019

See merge request espressif/esp-idf!39521
2025-08-28 16:12:58 +08:00
Ashish Sharma 2b8703ef9f fix(mbedtls): enable ssl cookie support by default 2025-08-14 12:05:02 +08:00
Ashish Sharma 414397c048 fix(esp_http_client): fix possible double memory free 2025-08-05 09:48:22 +08:00
Ashish Sharma d9c431268a feat(mbedtls): restructure mbedtls configuration page 2025-07-30 17:47:54 +08:00
Ashish Sharma f7be43c83d feat(mbedtls): adds more configuration options 2025-07-30 17:47:54 +08:00
Ashish Sharma 6259505f18 feat(mbedtls): disable unnecessary buffer allocation in dynamic buffer session reset 2025-07-30 17:45:16 +08:00
Ashish Sharma 6b02906822 fix(security): improve memory allocation handling in multiple components 2025-07-28 10:05:50 +08:00
Ashish Sharma 801ea1fc4e fix(esp_http_client): fix memory leak in current_header_value buffer
Fixed memory leak in esp_http_client_cleanup() where current_header_value
buffer was not being freed when ESP_ERR_HTTP_FETCH_HEADER is returned
during header parsing failures.
2025-07-17 10:32:50 +08:00
Ashish Sharma 466a365a02 feat(mbedtls): adds support for RSA decryption with DS peripheral 2025-07-07 13:32:06 +08:00
Ashish Sharma 9c546002cb feat(mbedtls): update to version 3.6.4 2025-07-03 11:23:34 +08:00
Ashish Sharma 0fa17c40a6 docs(system/esp_https_ota): adds ECIES-256 to pre-enc ota design doc 2025-06-30 16:04:45 +08:00
Ashish Sharma cabb5009f2 feat(esp_crt): adds support for cross signed root certificates 2025-06-26 16:01:11 +08:00
Ashish Sharma 78af627857 fix(mbedtls): handle NULL ctx in ds rsa sign 2025-06-18 17:03:37 +08:00
Ashish Sharma 2ef09a7952 fix(esp_tls): fix failing build with TLS1.3 only and dynamic buffer 2025-06-02 09:14:03 +08:00
Ashish Sharma f3da3ef9d4 docs(protocols/esp-tls): adds doc for client session tickets 2025-05-29 17:57:40 +08:00
Ashish Sharma dbb846c348 fix(mbedtls): Fixes failing TLS 1.3 server handshake
Closes https://github.com/espressif/esp-idf/issues/15984
2025-05-26 17:16:21 +08:00
Ashish Sharma 87feca0350 change: adds CVE-2023-53154 to cJSON sbom exclude list 2025-05-26 10:27:54 +08:00
Ashish Sharma 1e0577ebd0 feat(cjson): update to latest upstream 2025-05-14 12:45:35 +08:00
Ashish Sharma 415e0f3c86 feat(mbedtls): add support for dynamic buffer for TLS1.3
Closes https://github.com/espressif/esp-idf/issues/15448
2025-04-24 12:05:36 +08:00
Ashish Sharma 0bad622a7a fix(esp_tls): use correct sockaddr struct size when calling connect()
Closes https://github.com/espressif/esp-idf/issues/15812
2025-04-23 13:23:44 +08:00
Ashish Sharma 0de1429834 fix(mbedtls): remove logical dead code from mbedtls 2025-04-17 13:43:48 +08:00