Commit Graph

1304 Commits

Author SHA1 Message Date
wuzhenghui
708f34bd16 fix(esp_system): support rom secure boot fast wake feature for esp32s31 2026-07-28 21:46:24 +08:00
nilesh.kale
3aea82e4b3 fix(esp_rom): correct ESP32-P4 secure boot signature block layout 2026-07-17 15:15:50 +05:30
Jiang Jiang Jian
9cf02d6dc4 Merge branch 'fix/fix_coex_iso_cache_error_v6.1' into 'release/v6.1'
fix(coex): Fixed BLE iso coex cache error (6.1)

See merge request espressif/esp-idf!50849
2026-07-17 11:43:27 +08:00
muhaidong
d2d858c78e fix(coex): fix coex status get issue 2026-07-17 10:49:42 +08:00
Xiao Xufeng
3e8389cc31 fix(mmap): fixed some API read wrong data via mmap when flash being erased/written while XIP on PSRAM
Before:

The cache won't be disabled when XIP on psram. But during flash
erasing/programming, read data will be courrupt.

When XIP in psram is enabled, the image is not mapped to the cache so
usually there will be no flash access. The only way to read from flash
is via the driver or use mmap. The driver has protection during erasing,
while th mmap region not.

Now:

Mmap APIs provide a flag to make mmap->unmap region mutually exclusive
to flash erase/programming when XIP from psram. SPI Flash write APIs
will benefit from this. When the flag is used, no concurrent access to
mapped region will happen while writing; otherwise the cache will be
disable to avoid data corruption.

Most ESP-IDF APIs calls mmap with this flag. As for users calling
mmap-like APIs directly, they can choose whether to enable this by a
flag.

Closes https://github.com/espressif/esp-idf/issues/14897
2026-07-15 18:57:08 +08:00
nilesh.kale
7cb0e4c70a feat: added call to aquire clock source for H4 and H21 AES crypto 2026-07-06 15:08:02 +05:30
yinqingzhao
e08a582209 fix(wifi): comment out functions from ld files 2026-06-30 15:13:26 +08:00
Mahavir Jain
7a2bb09375 Merge branch 'fix/secure_boot_bootloader_ecdsa_range_gate_v6.1' into 'release/v6.1'
Add ECDSA signature bounds check in bootloader before Secure Boot verify (v6.1)

See merge request espressif/esp-idf!49632
2026-06-30 07:15:59 +05:30
harshal.patil
0c2ebe3180 fix(secure_boot): range-check ECDSA r,s in bootloader before ROM verify 2026-06-16 10:38:59 +05:30
yinqingzhao
7ff847867e fix(wifi): comment out pm_process_tim from ld files for esp32c61 2026-06-15 15:21:51 +08:00
yinqingzhao
ced2dcf748 fix(wifi): fix scheduling issue when tasks have the same priority as the Wi-Fi task 2026-06-10 20:43:42 +08:00
Mahavir Jain
d460486ab4 Merge branch 'fix/ecdsa_ecc_hw_input_validation_v6.1' into 'release/v6.1'
Validate ECDSA signature range and harden ECC memory power-down (v6.1)

See merge request espressif/esp-idf!49427
2026-06-10 14:39:49 +05:30
Mahavir Jain
ab40e38287 Merge branch 'fix/remove_nonexistent_crypto_registers_c61_v6.1' into 'release/v6.1'
Remove non-existent crypto registers (ESP32-C61) (v6.1)

See merge request espressif/esp-idf!49449
2026-06-10 10:10:00 +05:30
Jiang Jiang Jian
895974c34d Merge branch 'feat/enable_sb_and_fe_support_for_esp32s31_v6.1' into 'release/v6.1'
feat: enable Secure Boot, Flash Encryption and Key Manager support in ESP32S31 (v6.1)

See merge request espressif/esp-idf!49161
2026-06-10 11:13:43 +08:00
harshal.patil
6bdaf2a293 fix(soc): Remove non-existent crypto registers (ESP32-C61) 2026-06-09 18:16:33 +05:30
harshal.patil
a15edceb89 fix(esp_rom): Patch ets_ecdsa_verify() to include signature bounds check 2026-06-09 18:12:03 +05:30
sibeibei
2f0b9ebb82 fix(phy): fix wifi tx failed when sta wake from deepsleep 2026-06-09 19:16:38 +08:00
Song Ruo Jing
c9f52c7ca7 feat(spi_flash): Add exclusive support for ESP32H4
Add 32bit addr support for esp32s31 as well
2026-06-09 15:27:41 +08:00
C.S.M
01a9cbe421 fix(spi_flash): Fix suspend issue on esp32s31, and add trs timing on other target 2026-06-08 14:39:47 +08:00
nilesh.kale
ae1ec76e82 feat: enable Secure Boot, Flash Encryption and Key Manager support for S31 2026-06-02 13:09:44 +05:30
muhaidong
ba9785be7d fix(wifi): fix som rom func ld issue 2026-05-28 16:06:01 +08:00
wanglei
b846228512 fix(esp_rom): Cache_WriteBack_All patch should skip bootloader 2026-05-26 18:56:03 +08:00
Konstantin Kondrashov
7dab1d313e Merge branch 'feature/efuse_esp32h21' into 'master'
feat(efuse): Update efuse table for ESP32H21

Closes IDF-11556

See merge request espressif/esp-idf!48762
2026-05-22 09:39:18 +03:00
Jiang Jiang Jian
90ec41a9f7 Merge branch 'feat/support_rom_psa_mbedtls' into 'master'
feat(mbedtls): enable ESP32-C2(Rev2.0) ROM mbedTLS crypto for PSA

Closes IDF-15012

See merge request espressif/esp-idf!48211
2026-05-22 11:24:42 +08:00
Jiang Jiang Jian
fff1564266 Merge branch 'fix/for_cache_after_p4_wb_loss_issue' into 'master'
fix(esp_rom): avoid critical issue in writeback

See merge request espressif/esp-idf!48498
2026-05-21 22:10:00 +08:00
Konstantin Kondrashov
f870ed9d61 feat(efuse): Update efuse table for ESP32H21 2026-05-21 16:29:09 +03:00
wanglei
c7032e78aa fix(esp_rom): both addr and size need align to cache line size 2026-05-21 14:01:16 +08:00
He Binglin
a7b070f306 Merge branch 'bugfix/esp_idf_h4_ci_issues' into 'master'
fix(esp_rom): fix RTC_SLEEP_MODE_REG addr mismatch

Closes IDFCI-11614, IDFCI-11613, IDFCI-11611, IDFCI-11609, IDFCI-11498, IDFCI-11497, IDFCI-11496, IDFCI-11495, IDFCI-11493, IDFCI-11492, IDFCI-11491, IDFCI-11490, IDFCI-11489, IDFCI-11488, IDFCI-11487, IDFCI-11486, and IDFCI-11485

See merge request espressif/esp-idf!48758
2026-05-21 11:42:39 +08:00
Jack
a7fecc1e19 add some fix in the RTC STORE REG comments 2026-05-21 10:41:20 +08:00
hebinglin
84a3cfc0c1 fix(esp_rom): fix RTC_SLEEP_MODE_REG addr mismatch 2026-05-20 19:58:18 +08:00
Jiang Jiang Jian
0f2674f616 Merge branch 'bugfix/fix_ble_coded_phy_rx_bug' into 'master'
fix(coex): fix ble coded phy rx issue when aborted by coex

Closes BT-4291 and BT-4251

See merge request espressif/esp-idf!46962
2026-05-20 19:02:39 +08:00
Nilesh Kale
d8dbc83e7e Merge branch 'feat/enable_ds_hmac_ecdsa_support_for_esp32s31' into 'master'
feat(hal): add ECDSA,  HMAC and Digital Signature support for esp32s31

Closes IDF-14623, IDF-14624, IDF-14621, and IDF-13062

See merge request espressif/esp-idf!48134
2026-05-20 17:44:14 +08:00
wanglei
a52b484faf fix(cache): remove strong symbols in p4 eco0_4 ld
add return value for p4/s31 sync all functions
2026-05-20 17:43:43 +08:00
wanglei
751a75a982 fix(esp_rom): implement cache writeback related apis in iram
avoid critical issues caused by manual cache writeback and conflicting
writes. The issue exist on chips after esp32p4
2026-05-20 17:43:43 +08:00
Jiang Guang Ming
1ac137860c feat(mbedtls): enable PSA threading alt with ROM mbedTLS 2026-05-20 14:15:23 +08:00
Jiang Guang Ming
48418f58a2 feat(esp_rom): merge rom.mbedtls.ld to rom.mbedtls.eco4.ld 2026-05-20 14:15:22 +08:00
Jiang Guang Ming
5d5b8200dc feat(mbedtls): enable ESP32-C2(Rev2.0) ROM crypto for PSA 2026-05-20 14:10:14 +08:00
nilesh.kale
a530aab0a6 feat: enable key manager and HUK support for S31 2026-05-20 10:17:34 +05:30
Aditya Patwardhan
e9a9091b59 feat(hal): add HMAC and Digital Signature support for esp32s31
Co-authored-by: Nilesh Kale <nilesh.kale@espressif.com>
2026-05-20 10:17:34 +05:30
linruihao
df492d5c2f fix(coex): fix ble coded phy rx issue when aborted by coex 2026-05-19 17:52:07 +08:00
Sarvesh Bodakhe
94f226d73b feat(wifi): NAN encrypted datapath (Wi-Fi Aware M1-M4 handshake)
Implement the NAN Data Path encrypted datapath per Wi-Fi Aware v4.0
(§7.1.3.5, §9.5.16):

- Responder + initiator sides of the M1-M4 Shared-Key Descriptor
  exchange, with MIC compute/verify, PTK derivation, and PMK/PMKID
  derivation via PBKDF2-SHA256 over passphrase or pre-shared PMK.
- CSIA / SCIA attribute build + parse, NCS-SK-128 cipher suite.
- Per-NDL security context on ndl_info::security_ctx; per-svc PMK cache.
- ndp_response_indication callback for initiator peer-NDI binding.
- host<->blob ABI migrated from 27 direct esp_nan_* externs to a single
  nan_secure_dp_funcs callback struct in esp_private/wifi.h.
- nan_security.c split out of nan_app.c (~340 lines de-duplicated into
  shared M1-M4 helpers).
- CONFIG_ESP_WIFI_NAN_ENCRYPTED_DATAPATH gates the secure path so non-
  security builds compile out the crypto/handshake code.
- ROM patch (esp32s31): mask ieee80211_encap_esfbuf to match the
  c5/c6/c61 pattern for NAN-capable chips.

Hardening: PMK stack copies zeroized on every return, NDP attribute
parsers bounds-checked, CSID range-checked before shifting, NDL slot
reuse only when handshake state is IDLE, get_csia/scia_len aligned with
their builders on empty input.

API surface: NDP security types moved out of esp_wifi_types_generic.h
into esp_private/wifi.h (internal-only). security pointer dropped from
struct ndp_cb_peer_info. Discovery-side wifi_nan_security_type_t and
the NDP Info callbacks removed (subsumed by csid_bitmap and SSI
respectively).
2026-05-19 11:07:06 +05:30
Mahavir Jain
cee71ceb39 Merge branch 'feat/enable_secure_boot_support_for_esp32h4' into 'master'
feat: enable support for secure boot in esp32h4

Closes IDF-12262 and IDF-12966

See merge request espressif/esp-idf!45603
2026-05-13 19:07:25 +05:30
Mahavir Jain
c9fe519dcb Merge branch 'feat/enable_ecdsa_support_for_esp32h4' into 'master'
Feat/enable ecdsa support for esp32h4

Closes IDF-12259

See merge request espressif/esp-idf!45493
2026-05-13 18:56:10 +05:30
Marius Vikhammer
aaf7d8c722 fix(esp_rom): fixed esp-rom not compiling in g0 build
CONFIG_BOOTLOADER_OFFSET_IN_FLASH comes from the bootloader kconfigs and
is not available in g0 builds.
2026-05-13 14:21:06 +08:00
Konstantin Kondrashov
485ab9aa29 Merge branch 'feature/recovery_bootloader_support' into 'master'
feat(bootloader): Support recovery bootloader for ESP32P4

Closes IDF-15653 and IDF-13165

See merge request espressif/esp-idf!48215
2026-05-12 23:24:40 +03:00
nilesh.kale
f400c78d42 feat(hal): enable ecdsa support in esp32h4 2026-05-12 15:26:17 +05:30
nilesh.kale
76e2e6d53f feat: enable support for secure boot in esp32h4 2026-05-11 16:26:01 +05:30
Chen Jichang
645ff40cde ci(esp32h4): enable ci target test 2026-05-11 16:48:58 +08:00
Konstantin Kondrashov
e8609f59a8 feat(bootloader): Support recovery bootloader for ESP32S31 and ESP32P4 2026-05-08 16:45:14 +03:00
Konstantin Kondrashov
c9ce65f6c1 Merge branch 'fix/bootloader-hooks-log-v2' into 'master'
fix(bootloader_hooks): Fix log_v2 support in bootloader hooks

Closes IDFGH-17547

See merge request espressif/esp-idf!47907
2026-05-07 09:56:44 +03:00