Commit Graph

7920 Commits

Author SHA1 Message Date
Aditya Patwardhan
94be07050f change(secure_boot): mark ECDSA based Secure Boot V2 as insecure on affected SoCs
ECDSA based Secure Boot V2 is not functional for certain input vectors on
ESP32-C5/C61/H2/P4 and on the preview targets ESP32-H4/H21. RSA based Secure
Boot V2 is the recommended scheme where the SoC supports it. This issue will be
fixed in a future hardware ECO revision; more details will be shared through the
hardware errata document.

A new hidden Kconfig option SECURE_BOOT_V2_ECDSA_INSECURE marks the affected
mass-production SoCs (ESP32-C5/C61/H2/P4). On these SoCs, when hardware Secure
Boot V2 is enabled, the ECDSA (V2) signing scheme is no longer offered by
default; it must be turned on explicitly via SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
under "Allow potentially insecure options" (CONFIG_SECURE_BOOT_INSECURE). App
signing without hardware Secure Boot is not affected. Note that ESP32-C61 has no
RSA based Secure Boot V2, so it has no Secure Boot scheme enabled by default.

The preview targets ESP32-H4 and ESP32-H21 mark ECDSA Secure Boot V2 as not
supported in their SoC capabilities instead of using the option above. As
ESP32-H4 has no other Secure Boot V2 scheme, Secure Boot is disabled entirely on
it; ESP32-H21 retains RSA based Secure Boot V2.

The security documentation keeps the ECDSA Secure Boot V2 content visible and
adds a warning describing the limitation (including that ECDSA Secure Boot V2 on
ESP32-C61 is not recommended for production). CI apps that exercise ECDSA Secure
Boot V2 on the affected SoCs set CONFIG_SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
accordingly.
2026-06-10 18:06:48 +05:30
Jiang Jiang Jian
83a088da13 Merge branch 'feat/support_persistent_esp_rsa_ds_keys_v6.0' into 'release/v6.0'
Support persistent ESP RSA DS keys (v6.0)

See merge request espressif/esp-idf!48523
2026-05-15 15:46:46 +08:00
harshal.patil
513efdf89a refactor(mbedtls/test): Move the mbedtls test app to support multiple test apps 2026-05-15 09:28:42 +05:30
harshal.patil
1d6b5f219e feat(mbedtls/psa_esp_rsa_ds): Support persistent ESP-RSA DS driver 2026-05-15 09:17:09 +05:30
renpeiying
f54b53d86c docs: Update CN translation for security docs 2026-05-15 11:31:41 +08:00
muhaidong
e000bfd1b7 fix(doc): gate 5 GHz min-channel note on SOC_WIFI_SUPPORT_5G 2026-05-12 19:22:54 +08:00
muhaidong
b565b34f3f fix(wifi): fix max connection number issue 2026-05-12 19:22:54 +08:00
Jiang Jiang Jian
9cf982000d Merge branch 'feat/add_auto_lightsleep_example_6.0' into 'release/v6.0'
feat(example): add power management example (v6.0)

See merge request espressif/esp-idf!48369
2026-05-12 18:11:28 +08:00
Jiang Jiang Jian
1d922e9c48 Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20260424_v6.0' into 'release/v6.0'
feat(tools): update openocd version to v0.12.0-esp32-20260424 (v6.0)

See merge request espressif/esp-idf!48230
2026-05-12 18:06:19 +08:00
Jim
f25d49fbdc feat(esp_http_client): Add API to support set event handler 2026-05-12 13:59:01 +08:00
wuzhenghui
68eeb5606d feat(example): implement power management example for ESP chips 2026-05-12 10:13:50 +08:00
Mahavir Jain
3f3568e211 Merge branch 'feat/key_manager_ecdh1_key_deployment_mode_v6.0' into 'release/v6.0'
Key Manager ECDH1 key deployment mode (v6.0)

See merge request espressif/esp-idf!48344
2026-05-11 17:44:45 +05:30
Zhang Shuxian
744a55ac4a docs: Update CN translation for jtag-debugging 2026-05-11 12:17:00 +02:00
Samuel Obuch
a363781a0a docs(jtag-debugging): update OpenOCD flashing documentation 2026-05-11 12:17:00 +02:00
harshal.patil
98bbe26aea feat(esp_security): add ECDH1 deployment mode to Key Manager driver 2026-05-11 09:38:00 +05:30
Ashish Sharma
04ec0ab538 feat(bootloader_support): remove P192 curve support 2026-05-10 19:16:12 +08:00
Konstantin Kondrashov
12f88ef87a fix(esp32): Fix IRAM_AS_8BIT_ACCESSIBLE_MEMORY accessible from ISR1 2026-05-01 18:17:51 +03:00
Jiang Jiang Jian
21ca296627 Merge branch 'docs/fix-bitscrambler-output-bit-range-idfgh-17533_v6.0' into 'release/v6.0'
docs(bitscrambler): fix output bit range in documentation (IDFGH-17533) (v6.0)

See merge request espressif/esp-idf!47693
2026-04-30 16:29:35 +08:00
Jiang Jiang Jian
6a18d93382 Merge branch 'docs/clarify_sdkconfig_defaults_example_v6.0' into 'release/v6.0'
docs: clarify how SDKCONFIG_DEFAULTS cache variable works (v6.0)

See merge request espressif/esp-idf!47189
2026-04-30 16:26:09 +08:00
Marius Vikhammer
430b404637 Merge branch 'fix/issue-18391-psram-default-docs_v6.0' into 'release/v6.0'
docs: clarify PSRAM default allocation behavior (v6.0)

See merge request espressif/esp-idf!47053
2026-04-29 11:22:07 +08:00
Martin Vychodil
193cb862a1 Merge branch 'docs/update_fatfs_config_docs_v6.0' into 'release/v6.0'
docs(storage/fatfs): Refactor fatfs docs (v6.0)

See merge request espressif/esp-idf!47188
2026-04-28 23:27:25 +08:00
Island
791b3de2ed Merge branch 'feat/support_ble_uart_service_v6.0' into 'release/v6.0'
Feat/support ble uart service (6.0)

See merge request espressif/esp-idf!48000
2026-04-28 13:26:39 +08:00
Marius Vikhammer
d11267de2b Merge branch 'docs/refresh-broken-links_v6.0' into 'release/v6.0'
docs: refresh broken documentation links (v6.0)

See merge request espressif/esp-idf!47493
2026-04-28 09:03:01 +08:00
Marius Vikhammer
626aac6aea Merge branch 'feature/activate_api_hover_v6.0' into 'release/v6.0'
docs(api): Enable hover api preview feature (v6.0)

See merge request espressif/esp-idf!47194
2026-04-28 09:02:47 +08:00
Zhang Shuxian
d01df69c75 docs: Update CN translation for idf-py 2026-04-27 22:04:34 +08:00
Marek Fiala
46cc126c50 feat(tools): Restrict loading extension components to trusted sources 2026-04-27 22:04:34 +08:00
Roland Dobai
aaf08e09ec Merge branch 'docs/clarify_renames_v6.0' into 'release/v6.0'
docs(kconfig): clarify how multiple renames work in sdkconfig.renames (v6.0)

See merge request espressif/esp-idf!47631
2026-04-27 16:03:21 +02:00
Euripedes Rocha
c10c02297f Merge branch 'fix/remove_asio_v6.0' into 'release/v6.0'
fix(configs): Remove mentions of ASIO from configs files (v6.0)

See merge request espressif/esp-idf!47644
2026-04-27 15:52:03 +02:00
Zhi Wei Jian
4dd5e85749 feat(ble): Support nimble uart service
(cherry picked from commit 9de3eea3de)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-04-27 20:58:44 +08:00
David Cermak
06a7c0c6c6 feat(esp_netif): Add support for custom got-ip/lost-ip events 2026-04-22 19:50:29 +08:00
David Cermak
c69fb1bfe4 fix(configs): Remove mentions of ASIO from configs files 2026-04-17 16:14:53 +08:00
Xorlent
01410c26c1 Fix output bit range in bitscrambler documentation
Destination bit range incorrect in `Sub-instructions` example
2026-04-17 10:10:23 +08:00
Zhang Shuxian
fbd1fab6b8 docs: Provide translation for configuration_structure.rst 2026-04-15 10:51:11 +02:00
Jan Beran
7b81b8e482 docs(kconfig): clarify how multiple renames work in sdkconfig.renames
Describe how multiple renames of one deprecated option to several new
options work.
2026-04-15 10:48:10 +02:00
Marius Vikhammer
2baddb3295 docs: refresh broken documentation links 2026-04-13 09:47:46 +08:00
Jiang Jiang Jian
d4bf404df6 Merge branch 'docs/c5_storage_docs_v6.0' into 'release/v6.0'
docs(storage): removed non-updated docs refs for C5 (v6.0)

See merge request espressif/esp-idf!47107
2026-04-07 16:42:14 +08:00
Mahavir Jain
64c744abb7 docs: update PSRAM and flash encryption docs with per-page and separate key capabilities 2026-04-02 12:20:24 +05:30
Mahavir Jain
49231ec638 Merge branch 'bugfix/docs_anti_rollback_v6.0' into 'release/v6.0'
docs: clarify anti-rollback secure version bits for c2/c5 (v6.0)

See merge request espressif/esp-idf!47123
2026-04-02 11:29:30 +05:30
Tomáš Rohlínek
5d71113a3d docs(storage/fatfs): Remove undefined references left over from backporting 2026-04-01 09:33:47 +02:00
Marius Vikhammer
6216649f4c docs(api): add hover preview for API references 2026-04-01 10:15:41 +08:00
renpeiying
b6cb59f4fe docs: Add CN translation 2026-03-31 15:14:14 +02:00
Jan Beran
9f1cb88d2f docs: clarify how SDKCONFIG_DEFAULTS cache variable works 2026-03-31 15:14:14 +02:00
Zhang Shuxian
bd97dbb85c docs: Provide translation for fatfs docs 2026-03-31 14:15:37 +02:00
Tomáš Rohlínek
f44bd4546f docs(storage/fatfs): Fix problem with FatFs refactor 2026-03-31 14:15:34 +02:00
Tomáš Rohlínek
7601f9b829 docs(storage/fatfs): Refactor FatFs documentation
# Conflicts:
#	docs/en/api-reference/storage/fatfs.rst
2026-03-31 14:15:31 +02:00
Tomáš Rohlínek
e1179037ad docs(storage/fatfs): Update LFN default and dynamic buffers docs 2026-03-31 14:10:38 +02:00
Mahavir Jain
830e39ca68 docs: clarify anti-rollback secure version bits for c2/c5 2026-03-30 10:33:55 +05:30
Martin Vychodil
2dd577c171 docs(storage): removed non-updated docs refs for C5 2026-03-27 18:46:09 +01:00
Marius Vikhammer
d09e551417 docs: clarify PSRAM default allocation behavior
Clarify that MALLOC_CAP_DEFAULT describes a memory capability
rather than the malloc() placement policy, so PSRAM-backed
capability allocations are documented correctly when malloc()
remains internal-only by default.

Closes https://github.com/espressif/esp-idf/issues/18391

Made-with: Cursor
2026-03-27 10:05:28 +08:00
Martin Vychodil
f560502e5e Merge branch 'feat/unify_vfs_api_v6.0' into 'release/v6.0'
feat(storage/vfs): Unify VFS API by removing context-less APIs (v6.0)

See merge request espressif/esp-idf!46747
2026-03-24 22:49:06 +08:00