Commit Graph
168 Commits
Author SHA1 Message Date
Sudeep Mohanty 26b24ee2fa Merge branch 'task/buildv2_full_pipeline' into 'master'
Enable full buildv2 pipeline

Closes IDF-14180

See merge request espressif/esp-idf!49668
2026-07-03 11:28:57 +02:00
Laukik Hase e7261f57f5 ci(esp_tee): Fix tee_cli_app build failure due to heap size overflow
- Also fix the `unused variable` warning while builing the PSA
  AES tests with `tee_test_fw` app
2026-07-02 15:14:42 +05:30
Sudeep Mohanty b3951f4013 fix(test_apps): override config defaults unused by these tests
These tests enable features they do not use -- the VFS console, Wi-Fi task core pinning, and
the DS peripheral -- which shift memory layout, interrupt allocation, and peripheral access
enough to fail them. Override the unused options in each test's sdkconfig and ignore the
resulting unknown-symbol build warnings.
2026-07-01 13:17:25 +02:00
harshal.patil 9707272cda test(mbedtls): move AES test vectors to a dedicated header 2026-06-29 15:56:09 +05:30
Michael (XIAO Xufeng) c1b218b640 Merge branch 'fix/mmap_cache_flash_wr' into 'master'
fix(mmap): fixed mmap read data wrong when flash being erased/written and cache not disabled

Closes IDFGH-14084

See merge request espressif/esp-idf!29804
2026-06-29 11:44:10 +08:00
Alexey Lapshin e389f3e4df Merge branch 'feature/upgrade_toolchain_to_16.1.0_20260609' into 'master'
Upgrade GNU toolchain to 16.1.0_20260609

See merge request espressif/esp-idf!49523
2026-06-18 00:55:07 +04:00
Alexey Lapshin 4328dc28e2 fix(mbedtls): increase test limits 2026-06-17 17:24:24 +07:00
Xiao Xufeng 789ce684c9 fix(mmap): fixed some API read wrong data via mmap when flash being erased/written while XIP on PSRAM
Before:

The cache won't be disabled when XIP on psram. But during flash
erasing/programming, read data will be courrupt.

When XIP in psram is enabled, the image is not mapped to the cache so
usually there will be no flash access. The only way to read from flash
is via the driver or use mmap. The driver has protection during erasing,
while th mmap region not.

Now:

Mmap APIs provide a flag to make mmap->unmap region mutually exclusive
to flash erase/programming when XIP from psram. SPI Flash write APIs
will benefit from this. When the flag is used, no concurrent access to
mapped region will happen while writing; otherwise the cache will be
disable to avoid data corruption.

Most ESP-IDF APIs calls mmap with this flag. As for users calling
mmap-like APIs directly, they can choose whether to enable this by a
flag.

Closes https://github.com/espressif/esp-idf/issues/14897
2026-06-16 01:00:43 +08:00
Ashish Sharma e6f5f5ff63 fix(mbedtls/port): add additional hardening for PSA drivers 2026-06-15 16:10:09 +05:30
harshal.patil 554cce6937 fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down 2026-06-09 10:59:11 +05:30
harshal.patil 3cbd175d2b test(mbedtls/crt_bundle): Make weak-hash test self-contained
The "custom certificate bundle - weak hash" test relied on DigiCert
Global Root CA being present as a trust anchor in cacrt_all.pem (the
only SHA-1-self-signed root in the chain it loaded). The recent
cacrt_all.pem refresh moved that root to cacrt_deprecated.pem, so the
chain could no longer anchor and the test started failing.
2026-06-02 10:06:43 +05:30
harshal.patil a24bd0bf10 test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver 2026-05-26 11:01:57 +05:30
Jiang Guang Ming d5a712f1f8 feat(mbedtls): enable ROM mbedTLS pytest with esp32c2 rev2.0 2026-05-20 14:15:19 +08:00
harshal.patil 83ebd475c3 test(mbedtls/persistent_storage_format): Add ESP ITS NVS format-stability test app 2026-05-15 09:12:20 +05:30
harshal.patil 4821f331fe refactor(mbedtls/test): Move the mbedtls test app to support multiple test apps 2026-05-15 09:09:15 +05:30
Mahavir Jain 0419f8b991 Merge branch 'fix/memory_leak_cross_signed_cert_verify' into 'master'
fix(esp_crt_bundle): fixes verification failures with cross signed certificates

Closes IDFGH-17582 and IDFGH-17627

See merge request espressif/esp-idf!47966
2026-05-12 11:03:52 +05:30
Ashish Sharma 0e03327f69 fix(esp_crt_bundle): fixes verification with cross signed cert 2026-05-11 17:44:16 +08:00
Chen Jichang 3c3b9a6a4e ci(esp32h4): disable tests which cannot pass 2026-05-11 16:48:58 +08:00
Ashish Sharma 7a1ba8f4ca feat(mbedtls): update to version 4.1.1 2026-04-30 18:02:06 +08:00
harshal.patil 7eb44576be test(mbedtls): Add a test for opaque HMAC driver verification 2026-04-22 10:11:27 +05:30
harshal.patil f195d183be fix(mbedtls): Flash compatibility across multiple key sources (ECDSA, HMAC) 2026-04-22 10:11:12 +05:30
Ashish Sharma a858f1683d fix(mbedtls): reenable RSA 4096 bit key performance test 2026-04-08 14:54:04 +08:00
harshal.patil 28736a81fa fix(esp_security): Enable Key Manager clocks even for efuse key operations
The Key Manager holds a key usage register, thus, the Key Manager peripheral
clock must be enabled even for efuses-based key operations to route the
crypto operations to correctly to the efuses (default is Key Manager)
2026-03-25 10:38:44 +05:30
nilesh.kale 31c88b7a4d fix(mbedtls): disable cert bundle tests in FPGA env 2026-03-23 13:53:54 +08:00
harshal.patil b5550281b9 change(mbedtls): Change the ESP-DS-RSA key lifetime name to include the VOLATILE keyword 2026-03-06 15:00:38 +05:30
harshal.patil 30a120c7cb feat(mbedtls/esp_ecdsa): Support Key Manager key using the ESP-ECDSA PSA interface 2026-03-03 18:40:31 +05:30
harshal.patil aa63487d9f feat(mbedtls/esp_rsa_ds): Introduce ESP-RSA DS opaque key context 2026-03-03 18:36:18 +05:30
hrushikesh.bhosale 7b2bd0453a fix(mbedtls/test_apps): Enabling psram test for esp32p4 2026-02-18 11:55:06 +05:30
Mahavir Jain ba61b8300f Merge branch 'feat/reenabling_test_for_esp32p4' into 'master'
feat(tests): Reenabled the app_update and crypto driver test for esp32p4

Closes IDF-14367

See merge request espressif/esp-idf!43719
2026-02-17 11:01:32 +05:30
hrushikesh.bhosale 8124c2e2cf refactor(protocols): Removed the common_component dependency
- Removed the common_component build dependency from protocols test_apps
and examples
2026-02-16 15:07:37 +05:30
Mahavir Jain 5225e6a3e6 Merge branch 'fix/failed_test_ds_key_deployment_in_aes_mode' into 'master'
Re-enable crypto drivers test app for ESP32-P4

Closes IDF-14418

See merge request espressif/esp-idf!45724
2026-02-12 13:38:53 +05:30
Ashish Sharma 0b6843f2ed fix(mbedtls): updates crypto performance numbers 2026-02-11 23:35:59 +08:00
nilesh.kale 0fd1a4c9f8 test(esp_security): re-enable crypto drivers test app for ESP32P4
Also remove common_components dep for security-related tests
2026-02-10 17:48:55 +05:30
harshal.patil b4542bf748 fix(mbedtls): Support truncated HMAC 2026-02-10 14:08:46 +05:30
hrushikesh.bhosale e957e4801b feat(tests): Reenabled the app_update. mbedtls and FE tests for esp32p4 2026-02-06 15:34:19 +05:30
Ashish Sharma b3e1c03d97 fix(mbedtls): revert struct member name change esp_rsa_ds_data to esp_ds_data 2026-02-06 17:33:17 +08:00
Ashish Sharma 6f5b078ed6 feat: adds DS Sign capabilities for ESP32S2 2026-02-05 10:12:25 +08:00
Ashish Sharma e06a7dd791 feat: adds new Kconfig variable for DS peripheral 2026-02-05 10:12:25 +08:00
Ashish Sharma 1d185a6548 feat: adds PSA DS driver support 2026-02-05 10:12:25 +08:00
Mahavir Jain f2635f98d9 Merge branch 'fix/externsive_mbedtls_aes_sha_tests' into 'master'
Re-introduce the extensive mbedtls AES and SHA tests

Closes SHA-512

See merge request espressif/esp-idf!45489
2026-02-04 18:33:57 +05:30
Ashish Sharma 523194465b change(mbedtls): rename builtin to mbed-builtin 2026-02-03 14:55:44 +08:00
harshal.patil 2bc49effb4 test(mbedtls): Re-introduce the extensive AES, AES-GCM and the SHA tests
- Also extend the PSRAM encryption test to ESP32-S3
2026-02-02 16:58:01 +05:30
harshal.patil b450664e2b fix(mbedtls/include): Fix include libs in the driver's public headers 2026-01-31 13:30:57 +05:30
harshal.patil ae459b5204 feat(mbedtls): Introduce ESP-HMAC PSA opaque driver 2026-01-31 00:45:11 +05:30
harshal.patil 53072bfa9d fix(mbedtls): Enable h/w accel for CMAC and HMAC operations
- Refactor ESP-MAC drivers
2026-01-31 00:45:11 +05:30
igor.udot 4c26ab876b ci: update build-test-rules to use common_components 2026-01-23 10:14:09 +08:00
harshal.patil e9ea55bea2 feat(mbedtls/ecdsa): Introduce PSA ECDSA driver 2026-01-19 09:14:37 +05:30
Ashish Sharma 3d5775e22b feat: adds PSA MD5 driver support 2026-01-07 10:41:33 +08:00
Michael (XIAO Xufeng) c299c0b749 Merge branch 'refactor/remove_idf_test_component' into 'master'
refactor: Remove idf_test component

Closes IDF-12578

See merge request espressif/esp-idf!43733
2026-01-06 16:20:20 +08:00
harshal.patil e91d50ed1e fix(mbedtls): Support partial hardware AES-GCM and s/w fallback for non-AES ciphers
- Support software-fallback for unsupported hardware AES lengths
2026-01-03 12:17:50 +05:30