Harshal Patil
876b9581bd
Merge branch 'fix/enable_key_mgr_clk_for_efuse_key_ops' into 'master'
...
Enable Key Manager clock even for efuses-based key operations
See merge request espressif/esp-idf!46740
2026-03-25 21:37:53 +05:30
hebinglin
474d89b4c2
fix(clk): update H21 ECO1 to use 64MHz clock for mspi
2026-03-25 15:38:49 +08:00
harshal.patil
28736a81fa
fix(esp_security): Enable Key Manager clocks even for efuse key operations
...
The Key Manager holds a key usage register, thus, the Key Manager peripheral
clock must be enabled even for efuses-based key operations to route the
crypto operations to correctly to the efuses (default is Key Manager)
2026-03-25 10:38:44 +05:30
harshal.patil
ccc48c3980
fix(esp_security): Fixes incorrect key manager configuration for ESP32-P4 rev < 3
2026-03-24 15:23:23 +05:30
harshal.patil
398d9ea9cd
fix(esp_security): Add more validation checks
2026-03-20 11:15:23 +05:30
harshal.patil
0db717b9ec
feat(esp_ds): Support using the AES key used by DS peripheral for encrypting params
2026-03-20 11:15:23 +05:30
harshal.patil
5f647c0ba3
docs(key-manager): Add Key-Manager peripheral related documentation
2026-03-18 16:27:39 +05:30
wuzhenghui
51cca0a88f
feat(esp_hw_support): support clock tree management for esp32p4
2026-03-04 20:10:54 +08:00
nilesh.kale
0fd1a4c9f8
test(esp_security): re-enable crypto drivers test app for ESP32P4
...
Also remove common_components dep for security-related tests
2026-02-10 17:48:55 +05:30
harshal.patil
6964de6f45
test(esp_security): Update the Key Manager test to support ESP32-P4
2026-02-10 17:48:52 +05:30
Xiao Xufeng
0a6c922059
fix(esp_system): limit CPU clock to 160MHz in ESP32-C5 for flash encryption
...
This reverts commit 7145fc9558
2026-01-28 11:15:30 +05:30
igor.udot
4c26ab876b
ci: update build-test-rules to use common_components
2026-01-23 10:14:09 +08:00
Aditya Patwardhan
eb4a871eca
refactor(esp_hal_security): Updated esp_hal_security build and includes
2026-01-21 10:02:44 +05:30
Song Ruo Jing
215c9993bf
fix(clk): update H4 to use 64MHz clock for mspi
...
And add pll clock ref count
2026-01-04 14:07:01 +08:00
Xiao Xufeng
7145fc9558
Revert "fix(esp_system): limit CPU clock to 160MHz in ESP32-C5 for flash encryption"
...
This reverts commit 3c5d2e6b58
2025-12-16 17:43:58 +08:00
C.S.M
0c4cf75c35
feat(esp32s31): Introduce esp32s31 hello world
2025-12-02 10:44:16 +08:00
Harshal Patil
b873a82d5b
Merge branch 'feat/generic_key_mgr_key_types' into 'master'
...
Store key_len field in the key_config
See merge request espressif/esp-idf!42692
2025-11-18 15:12:03 +05:30
C.S.M
961bd0cf78
Merge branch 'feat/introduce_esp32s31' into 'master'
...
feat(esp32s31): Introduce new target esp32s31
See merge request espressif/esp-idf!43316
2025-11-18 15:55:16 +08:00
harshal.patil
1c1bcf44be
feat(esp_security): Support ECDSA-P384 key deployment using Key Manager
2025-11-17 12:34:09 +05:30
harshal.patil
1f2cbde525
change(esp_key_mgr): Store key_len field in the key_info
...
- Update the Key Manager key types to be generic
- Define a new enum to determine the length of the keys
- Refactor the Key Manager driver support generic key types and key lengths
- Also store key deployment mode in the key recovery info
2025-11-17 12:34:09 +05:30
C.S.M
a90c93541c
feat(esp32s31): Introduce new target esp32s31
2025-11-17 14:48:55 +08:00
armando
b25ba4a0c1
ci(p4): disable p4 rev3 invalid tests temporarily
2025-11-17 12:11:39 +08:00
Mahavir Jain
4a53c4e651
Merge branch 'bugfix/esp32c5_encrypted_flash_write_v2' into 'master'
...
fix(esp_system): limit CPU clock to 160MHz in ESP32-C5 for flash encryption
See merge request espressif/esp-idf!43301
2025-11-13 18:01:04 +05:30
Harshal Patil
0debe71b3d
Merge branch 'feat/flash_enc_using_key_manager' into 'master'
...
Support Flash Encryption using Key Manager
Closes IDF-13462 and IDF-14278
See merge request espressif/esp-idf!41879
2025-11-13 07:55:15 +05:30
Mahavir Jain
3c5d2e6b58
fix(esp_system): limit CPU clock to 160MHz in ESP32-C5 for flash encryption
...
Encrypted flash write operation sometimes result in random corruption in
certain bytes. Root cause points to sudden current surge due to involvement of
encryption block overwhelming LDO supply. More details will be provided
in the ESP32-C5 SoC Errata document.
This fix limits the CPU clock to 160MHz for flash encryption enabled
case. Failing encrypted flash write tests could successfully pass in
this configuration. Going ahead, a dynamic clock adjustment in flash
driver will be considered to mitigate this issue.
2025-11-12 19:14:55 +05:30
Mahavir Jain
619cbb85b3
Merge branch 'fix/disallow_enabling_sb_sha384_when_sb_sha256_is_enabled_p4' into 'master'
...
fix(efuse): Disallow enabling SB using SHA-384 when SB using SHA-256 is enabled (ESP32-P4 ECO5)
Closes IDF-14063
See merge request espressif/esp-idf!42884
2025-11-11 17:11:47 +05:30
harshal.patil
540c719c66
change(esp_key_mgr): Make Key Manager driver bootloader compatible
...
- Independent of heap
2025-11-11 12:23:26 +05:30
harshal.patil
8abea3c537
feat(bootloader_support): Support Flash Encryption using Key Manager
2025-11-11 12:23:25 +05:30
harshal.patil
304bd1c77b
fix(esp_security/esp_key_mgr): Fix missed error codes and some cleanup
2025-11-11 12:22:08 +05:30
Laukik Hase
b9a503e9ec
feat(esp_tee): Support for ESP32-C61 - the rest of the components
2025-11-07 14:54:16 +05:30
harshal.patil
3090e91e60
fix(esp_security): Set WR_DIS_SECURE_BOOT_SHA384_EN by default when
...
Flash Encryption Release mode is enabled and Secure Boot P384 scheme not is enabled.
2025-11-05 08:39:55 +05:30
harshal.patil
7168b9f7d3
fix(esp_security): Fix undefined efuse build failure in case of ESP32-P4
...
- The `wr_dis` efuse bit corresponding to `SECURE_BOOT_SHA384_EN` is absent in P4
2025-11-05 08:39:55 +05:30
harshal.patil
609d52c6bf
feat(esp32p4): Support newer Key Manager key sources for ESP32-P4 V3
2025-10-15 15:49:20 +05:30
Harshal Patil
fd7d9c9ee9
Merge branch 'fix/key_mgr_use_default_efuse_key' into 'master'
...
Configure the Key Manager to use XTS-AES efuse key by-default
Closes IDFCI-3135 and IDFCI-3136
See merge request espressif/esp-idf!42032
2025-09-26 12:34:19 +05:30
harshal.patil
8b663ebe4d
fix(esp_security): Configure the Key Manager to use XTS-AES efuse key by-default
2025-09-22 12:22:07 +05:30
harshal.patil
5aa5366e7f
fix(bootloader_support): Reorder write disabling ECDSA_CURVE_MODE
2025-09-19 17:01:23 +05:30
harshal.patil
d6c1184676
fix(bootloader_support): Reorder write protection bits of some shared security efuses
2025-09-19 13:02:00 +05:30
harshal.patil
854ec3590f
fix(esp_key_mgr): Fix incorrect key manager state management
2025-09-12 11:02:45 +05:30
Marek Fiala
9d35d63651
feat(cmake): Update minimum cmake version to 3.22 (whole repository)
2025-08-19 14:44:32 +02:00
harshal.patil
9e87b50307
change(mbedtls/ecdsa): The ECDSA module of ESP32-H2 ECO5 does not use MPI module
2025-08-11 12:08:51 +05:30
harshal.patil
55e0730a8d
change(esp_hw_support): Move security-related modules to the esp_security component
...
- Also adds support to whitelist target specific expected dependency violations
in check_dependencies.py
2025-08-04 11:43:01 +05:30
Marius Vikhammer
bf84ab652a
change(test_utils): moved test_utils component to tools/test_apps/components/
2025-07-21 14:05:50 +08:00
harshal.patil
dce0925f40
fix(esp_security/esp_key_mgr): Incorrect overlapping comparisons
2025-07-03 15:05:50 +05:30
harshal.patil
bba1448128
feat(esp_key_mgr): Support PSRAM XTS-AES key deployments using Key Manager
2025-06-27 15:15:26 +05:30
harshal.patil
eb7c5654f6
test(esp_security): Extend the key manager tests
2025-06-27 15:15:26 +05:30
harshal.patil
50c41c3b59
change(esp_key_mgr): Refactor Key Manager driver to reduce logs
2025-06-27 15:15:26 +05:30
harshal.patil
a7af364112
fix(esp_security): Power up MPI memory registers when enabling MPI
...
Co-authored-by: Li HongXi <lihongxi@espressif.com >
2025-06-27 15:15:26 +05:30
harshal.patil
33d8c05d95
feat(esp_key_mgr): Support Digital Signature key deployments using Key Manager
2025-06-27 15:15:26 +05:30
harshal.patil
265b0d7579
feat(esp_key_mgr): Support HMAC key deployments using Key Manager
2025-06-27 15:15:26 +05:30
harshal.patil
8ab6b4d694
fix(esp_security/esp_key_mgr): Recharge HUK before the first usage
2025-06-27 15:15:26 +05:30
