Ashish Sharma
cde2fd4718
fix(esp_srp): reject SRP client public key when A mod N is zero
2026-04-17 15:21:21 +08:00
Ashish Sharma
6a36ec6d07
feat(esp_http_server): adds check for crlf in response creation
2026-04-13 10:32:24 +08:00
Ashish Sharma
ec72b956d2
feat(esp_https_server): adds support for user callback on handshake failure
...
Closes https://github.com/espressif/esp-idf/issues/18053
2026-04-12 18:37:23 +08:00
Ashish Sharma
90fe61fd0c
feat(esp_local_ctrl): adds basic test app
2026-04-12 18:18:25 +08:00
Ashish Sharma
28775ac4f6
fix(esp_local_ctrl): fixes a potential double free
2026-04-12 18:18:22 +08:00
Ashish Sharma
bda099031e
fix(mbedtls): reenable RSA 4096 bit key performance test
2026-04-09 10:26:10 +08:00
Ashish Sharma
9b4cacf9cb
fix(protocomm): fixes potential issues that can lead to crash during device provisioning
2026-04-07 11:09:37 +08:00
Ashish Sharma
6e08270b4a
Merge branch 'fix/fix_esp32p4_key_mgr_efuse_key_rev_le_3_v6.0' into 'release/v6.0'
...
fix(esp_hal_security): fixes failing hmac_hal_configure with efuse_key for p4 rev < 3 (v6.0)
See merge request espressif/esp-idf!46892
2026-03-25 10:38:30 +08:00
Ashish Sharma
0cac091538
fix(esp_hal_security): fixes failing hmac_hal_configure with efuse_key for p4 rev < 3
...
Closes https://github.com/espressif/esp-idf/issues/18370
2026-03-24 16:33:25 +05:30
Ashish Sharma
a519271c3e
fix: fixes memory leak with subprotocols
2026-03-23 18:41:42 +08:00
Ashish Sharma
0dc4ee7537
fix: fixes websocket server possible null dereference
2026-03-23 18:41:42 +08:00
Ashish Sharma
f40f9ac497
fix(secure_boot): marks 192 bit support curve legacy
2026-03-20 19:07:55 +05:30
Ashish Sharma
2eb3c1375f
feat(http_server): adds example to test server pong response
2026-03-20 15:10:52 +08:00
Ashish Sharma
a5f46aa6ee
docs(security): adds data partition verification docs
2026-03-20 15:08:54 +08:00
Ashish Sharma
8c6845bb96
feat(secure_boot): adds api to verify data partition integrity
...
Closes https://github.com/espressif/esp-idf/issues/17482
2026-03-20 15:08:54 +08:00
Ashish Sharma
532a8f4ee5
fix(mbedtls): fixes incorrect macro checks in PSA SHA driver
...
Closes https://github.com/espressif/esp-idf/issues/18354
2026-03-18 18:51:10 +08:00
Ashish Sharma
8a990805f6
fix(esp_http_client): delete Content-Length header when using Transfer-Encoding
...
Closes https://github.com/espressif/esp-idf/issues/18242
2026-03-17 12:20:58 +08:00
Ashish Sharma
6131f55136
feat(esp-tls): adds per ssl context state management
2026-03-17 10:45:32 +08:00
Ashish Sharma
d96e33375c
fix: removes deprecated http_crypto sources
2026-03-17 10:45:32 +08:00
Ashish Sharma
79fe9ff741
fix: fixes failing dynamic buffer tests
2026-03-17 10:45:32 +08:00
Ashish Sharma
9618e5cd77
docs: adds RSA DS docs for PSA Migration
2026-03-17 10:28:39 +08:00
Ashish Sharma
4e9367bc41
fix(esp_http_server): fix ws server subprotocol match
2026-03-12 17:03:21 +08:00
Ashish Sharma
222d470312
feat(http_server): improve websocket server handling
...
1. Adds post handshake callback
2. Removes requirement to handle HTTP_GET message in websocket handler
Closes https://github.com/espressif/esp-idf/issues/18215
2026-03-04 14:00:12 +08:00
Ashish Sharma
de9962fe33
feat(blufi): update to AES-CTR
2026-03-02 14:35:46 +08:00
Ashish Sharma
bd39f141ff
fix: enable HARDWARE_MPI by default
2026-03-02 14:33:21 +08:00
Ashish Sharma
cb91021678
fix(mbedtls): updates crypto performance numbers
2026-02-12 20:37:54 +08:00
Ashish Sharma
939be5c62f
fix(mbedtls): enable pthread threading by default
2026-02-12 20:37:54 +08:00
Ashish Sharma
397c689548
fix: make the PSA compile definitions public
2026-02-11 18:04:56 +08:00
Ashish Sharma
0aef47a07e
change(mbedtls): rename builtin to mbed-builtin
2026-02-11 18:04:56 +08:00
Ashish Sharma
4abcb123be
change(mbedtls): update mbedTLS default configs
...
1. Disables MBEDTLS_ARIA_C by default
2. SECP192R1 support is disabled by default
2026-02-11 18:04:56 +08:00
Ashish Sharma
762c4e9e65
fix(mbedtls): revert struct member name change esp_rsa_ds_data to esp_ds_data
2026-02-06 17:37:42 +08:00
Ashish Sharma
7418a91d3e
feat: adds DS Sign capabilities for ESP32S2
2026-02-06 16:09:41 +08:00
Ashish Sharma
b1f14d19d0
feat: adds new Kconfig variable for DS peripheral
2026-02-06 16:09:41 +08:00
Ashish Sharma
93349d05b2
feat: adds PSA DS driver support
2026-02-06 16:09:41 +08:00
Ashish Sharma
c8f1fa86a2
feat(esp_http_client): adds support to save response headers
...
Closes https://github.com/espressif/esp-idf/issues/17695
2026-02-03 14:40:08 +08:00
Ashish Sharma
539d62b8ba
fix: Skip writing to esp-idf directory when tfpsacrypto is built
...
Closes https://github.com/espressif/esp-idf/issues/18163
2026-01-29 13:46:44 +08:00
Ashish Sharma
1591d529fd
feat(esp_http_client): adds API to get transport socket
2026-01-22 18:24:31 +08:00
Ashish Sharma
0559222711
fix: stop reading ws data when peer closes the connection
...
Closes https://github.com/espressif/esp-idf/issues/17822
2026-01-22 18:16:26 +08:00
Ashish Sharma
63f3072c9c
fix: fixes potential ws server deadlock with blocking work queue
...
Closes https://github.com/espressif/esp-idf/issues/17591
2026-01-22 18:10:24 +08:00
Ashish Sharma
933dd7e02f
feat: adds PSA MD5 driver support
2026-01-09 13:56:03 +05:30
Ashish Sharma
54a72063ef
fix: fixes failing tee_basic example build
2026-01-09 13:55:59 +05:30
Ashish Sharma
1c74bf57dd
fix(esp_http_client): fix incorrect digest calculation for SHA256 auth digest
...
According to RFC 7616, nonce-prime and cnonce-prime is used for SHA-256-sess only and not for SHA-256.
This commit updates the check and uses nonce only for "-sess" algorithms.
Regression from 66995965e7
2026-01-07 10:17:51 +08:00
Ashish Sharma
4073c89471
fix: fixes failing pipeline with internal wifi mbedtls client
2026-01-06 17:11:34 +08:00
Ashish Sharma
12368d65bb
fix: enable SECP_R1_192 curve for ESP-TEE
2026-01-05 14:54:34 +05:30
Ashish Sharma
49876a19f7
fix: fixes coverity reported warnings
2026-01-05 14:54:34 +05:30
Ashish Sharma
246b052c93
fix(mbedtls): use ROM functions for md5
2026-01-05 14:54:33 +05:30
Ashish Sharma
b02538834c
fix: resolves MR comments
2025-12-20 23:02:25 +08:00
Ashish Sharma
5d5ba9d008
fix: migrate PSA SHA driver to be similar to parallel engine port
2025-12-19 11:06:41 +08:00
Ashish Sharma
646c9a994a
fix: revert fastpbkdf2 implementation from PSA to improve performace
2025-12-19 07:29:43 +08:00
Ashish Sharma
76287081ea
feat: code cleanup
2025-12-19 07:29:43 +08:00
Ashish Sharma
3dea3aae1d
fix: fixes coverity reported warnings
2025-12-19 07:29:43 +08:00
Ashish Sharma
88346ccec5
fix: revert back to using mbedtls sha implementation for espcoredump
2025-12-19 07:29:08 +08:00
Ashish Sharma
37f665ae8c
fix: improves some RSA key performances.
...
This fixes watchdog reset on ESP32 in certain WiFi tests.
2025-12-19 07:29:08 +08:00
Ashish Sharma
1e6621d285
fix: increase default stack size for esp_eth test apps
2025-12-19 07:29:08 +08:00
Ashish Sharma
efee84f929
fix: use ROM APIs for espcoredump SHA operations
2025-12-19 07:29:08 +08:00
Ashish Sharma
98afd06c8f
fix(pytest): patch to test panic test failures
2025-12-19 07:29:08 +08:00
Ashish Sharma
aa88c81dfb
fix(wpa_supplicant): revert changes to dpp_crypto
2025-12-19 07:29:08 +08:00
Ashish Sharma
c2c31ba9d2
fix(wpa_supplicant): revert changes to dpp_crypto
2025-12-19 07:29:08 +08:00
Ashish Sharma and Mahavir Jain
06d03e1a12
feat: add NVS based secure storage layer for PSA
...
(cherry picked from commit 31c7bad7f74ce8e54ea0563b670df37a58215600)
Co-authored-by: Mahavir Jain <mahavir@espressif.com >
2025-12-19 07:29:00 +08:00
Ashish Sharma
f306dbea84
feat(mbedtls): migrates ESP-TEE with PSA APIs
2025-12-19 07:28:33 +08:00
Ashish Sharma
c47caf4f0a
feat(mbedtls): adds mbedtls alt drivers with PSA
2025-12-19 07:28:33 +08:00
Ashish Sharma
1d33cc26bd
feat(mbedtls): adds AES drivers with PSA
2025-12-19 07:28:32 +08:00
Ashish Sharma
b8a738e0c4
feat(mbedtls): adds SHA drivers with PSA
2025-12-19 07:28:32 +08:00
Ashish Sharma
7d17e8a024
feat(mbedtls): adds AES drivers with PSA
2025-12-19 07:28:28 +08:00
Ashish Sharma
e629ab299c
feat(mbedtls): adds SHA drivers with PSA
2025-12-19 07:27:59 +08:00
Ashish Sharma
bf46351fb0
feat(mbedtls): fix build errors with PSA migration
2025-12-19 07:27:54 +08:00
Ashish Sharma
d8e2e43f18
feat(wpa_supplicant): mbedtls PSA migration
2025-12-18 21:18:58 +08:00
Ashish Sharma
a088d2ccdc
feat(mbedtls): fix build errors with PSA migration
2025-12-18 21:18:58 +08:00
Ashish Sharma
b0da66f7e1
feat(bt): migrate mbedtls to PSA APIs
2025-12-18 21:18:58 +08:00
Ashish Sharma
b4fea9cccc
feat(lwip): migrate to to PSA API interface
2025-12-18 21:18:58 +08:00
Ashish Sharma
1d92b530cd
feat(wpa_supplicant): mbedtls PSA migration
...
feat(wpa_supplicant): mbedtls PSA migration
2025-12-18 21:18:58 +08:00
Ashish Sharma
efd24c27db
feat(mbedtls): update to version 3.6.5
2025-11-11 16:43:07 +08:00
Ashish Sharma
8f0a19d169
fix: fix the failing tcp_transport host test in the CI
2025-10-16 11:47:08 +08:00
Ashish Sharma
62f852a93b
feat(esp_tls): supports setting tls version and ciphersuite in server config
...
Closes https://github.com/espressif/esp-idf/issues/17660
2025-10-03 15:19:41 +08:00
Ashish Sharma
59f5bb4540
Merge branch 'contrib/github_pr_17652' into 'master'
...
fix(esp_tls_conn_new_sync): Fix `esp_tls_conn_new_sync`'s doc to reflect its implementation (GitHub PR)
Closes IDFGH-16528 and IDFGH-16475
See merge request espressif/esp-idf!42263
2025-09-30 16:46:37 +08:00
Ashish Sharma
9cb348789c
fix(esp_tls): limit ret code from esp_mbedtls_handshake
2025-09-24 09:36:38 +08:00
Ashish Sharma
030ba7d8cf
Merge branch 'contrib/github_pr_17470' into 'master'
...
fix(http_server): Corrected initialization value for lru_counter at h… (GitHub PR)
Closes IDFGH-16325
See merge request espressif/esp-idf!41639
2025-09-12 19:59:20 +08:00
Ashish Sharma
70d9308f16
change(cjson): update cjson version to 1.7.19
2025-09-10 18:29:18 +08:00
Ashish Sharma
08a4a2b506
docs(esp_tls): adds documentation regarding sni
2025-08-29 16:13:42 +08:00
Ashish Sharma
6acdf78438
Merge branch 'doc/add_tls_client_session_management_doc' into 'master'
...
docs: Adds doc for client session tickets
Closes IDF-13019
See merge request espressif/esp-idf!39521
2025-08-28 16:12:58 +08:00
Ashish Sharma
2b8703ef9f
fix(mbedtls): enable ssl cookie support by default
2025-08-14 12:05:02 +08:00
Ashish Sharma
414397c048
fix(esp_http_client): fix possible double memory free
2025-08-05 09:48:22 +08:00
Ashish Sharma
d9c431268a
feat(mbedtls): restructure mbedtls configuration page
2025-07-30 17:47:54 +08:00
Ashish Sharma
f7be43c83d
feat(mbedtls): adds more configuration options
2025-07-30 17:47:54 +08:00
Ashish Sharma
6259505f18
feat(mbedtls): disable unnecessary buffer allocation in dynamic buffer session reset
2025-07-30 17:45:16 +08:00
Ashish Sharma
6b02906822
fix(security): improve memory allocation handling in multiple components
2025-07-28 10:05:50 +08:00
Ashish Sharma
801ea1fc4e
fix(esp_http_client): fix memory leak in current_header_value buffer
...
Fixed memory leak in esp_http_client_cleanup() where current_header_value
buffer was not being freed when ESP_ERR_HTTP_FETCH_HEADER is returned
during header parsing failures.
2025-07-17 10:32:50 +08:00
Ashish Sharma
466a365a02
feat(mbedtls): adds support for RSA decryption with DS peripheral
2025-07-07 13:32:06 +08:00
Ashish Sharma
9c546002cb
feat(mbedtls): update to version 3.6.4
2025-07-03 11:23:34 +08:00
Ashish Sharma
0fa17c40a6
docs(system/esp_https_ota): adds ECIES-256 to pre-enc ota design doc
2025-06-30 16:04:45 +08:00
Ashish Sharma
cabb5009f2
feat(esp_crt): adds support for cross signed root certificates
2025-06-26 16:01:11 +08:00
Ashish Sharma
78af627857
fix(mbedtls): handle NULL ctx in ds rsa sign
2025-06-18 17:03:37 +08:00
Ashish Sharma
2ef09a7952
fix(esp_tls): fix failing build with TLS1.3 only and dynamic buffer
2025-06-02 09:14:03 +08:00
Ashish Sharma
f3da3ef9d4
docs(protocols/esp-tls): adds doc for client session tickets
2025-05-29 17:57:40 +08:00
Ashish Sharma
dbb846c348
fix(mbedtls): Fixes failing TLS 1.3 server handshake
...
Closes https://github.com/espressif/esp-idf/issues/15984
2025-05-26 17:16:21 +08:00
Ashish Sharma
87feca0350
change: adds CVE-2023-53154 to cJSON sbom exclude list
2025-05-26 10:27:54 +08:00
Ashish Sharma
1e0577ebd0
feat(cjson): update to latest upstream
2025-05-14 12:45:35 +08:00
Ashish Sharma
415e0f3c86
feat(mbedtls): add support for dynamic buffer for TLS1.3
...
Closes https://github.com/espressif/esp-idf/issues/15448
2025-04-24 12:05:36 +08:00
Ashish Sharma
0bad622a7a
fix(esp_tls): use correct sockaddr struct size when calling connect()
...
Closes https://github.com/espressif/esp-idf/issues/15812
2025-04-23 13:23:44 +08:00
Ashish Sharma
0de1429834
fix(mbedtls): remove logical dead code from mbedtls
2025-04-17 13:43:48 +08:00