Commit Graph
933 Commits
Author SHA1 Message Date
Mahavir Jain f33672ea61 Merge branch 'bugfix/mbedtls_poly1305_build_v6.0' into 'release/v6.0'
fix(mbedtls): fix MBEDTLS_POLY1305_C build config (v6.0)

See merge request espressif/esp-idf!45941
2026-03-03 16:58:37 +05:30
Mahavir Jain bdd75fb32e fix(mbedtls): fix MBEDTLS_POLY1305_C build config
Closes https://github.com/espressif/esp-idf/issues/18243
2026-02-18 11:19:26 +05:30
Mahavir Jain a208625e7a Merge branch 'fix/mbedtls_enable_threading_pthread_v6.0' into 'release/v6.0'
fix(mbedtls): enable pthread threading by default (v6.0)

See merge request espressif/esp-idf!45838
2026-02-13 09:18:00 +05:30
Mahavir Jain 4367f08fc9 Merge branch 'fix/nvs_encr_use_hardware_aes_v6.0' into 'release/v6.0'
Use h/w accelerated AES-ECB for XTS-AES operations (v6.0)

See merge request espressif/esp-idf!45823
2026-02-13 07:43:27 +05:30
Ashish Sharma cb91021678 fix(mbedtls): updates crypto performance numbers 2026-02-12 20:37:54 +08:00
Ashish Sharma 939be5c62f fix(mbedtls): enable pthread threading by default 2026-02-12 20:37:54 +08:00
Mahavir Jain 63be46ed3d Merge branch 'fix/mbedtls_disable_default_configs_v6.0' into 'release/v6.0'
change(mbedTLS): update mbedTLS default configs (v6.0)

See merge request espressif/esp-idf!45699
2026-02-12 11:34:33 +05:30
Mahavir Jain 1dc0b26075 Merge branch 'fix/update_config_inclusion_for_hardware_ecdsa_verification_v6.0' into 'release/v6.0'
fix(mbedtls): Revised ECDSA verify HW config check (v6.0)

See merge request espressif/esp-idf!45807
2026-02-12 11:31:28 +05:30
Mahavir Jain 6d023865d2 Merge branch 'fix/support_truncated_hmac_v6.0' into 'release/v6.0'
Allow truncated ESP-PSA HMAC driver operations (v6.0)

See merge request espressif/esp-idf!45755
2026-02-12 11:31:16 +05:30
Mahavir Jain ad25b61af6 Merge branch 'fix/externsive_mbedtls_aes_sha_tests_v6.0' into 'release/v6.0'
Re-introduce the extensive mbedtls AES and SHA tests (v6.0)

See merge request espressif/esp-idf!45591
2026-02-12 09:49:09 +05:30
harshal.patil 9253fbadbc fix(nvs_flash): Use h/w accelerated AES-ECB for XTS-AES operations 2026-02-11 15:40:10 +05:30
Ashish Sharma 397c689548 fix: make the PSA compile definitions public 2026-02-11 18:04:56 +08:00
Ashish Sharma 0aef47a07e change(mbedtls): rename builtin to mbed-builtin 2026-02-11 18:04:56 +08:00
Ashish Sharma 4abcb123be change(mbedtls): update mbedTLS default configs
1. Disables MBEDTLS_ARIA_C by default
2. SECP192R1 support is disabled by default
2026-02-11 18:04:56 +08:00
nilesh.kale c64805aace fix(mbedtls): Revised ECDSA verify HW config check 2026-02-11 10:54:16 +05:30
harshal.patil 51956d766e fix(mbedtls): Support truncated HMAC 2026-02-10 14:09:33 +05:30
Ashish Sharma 762c4e9e65 fix(mbedtls): revert struct member name change esp_rsa_ds_data to esp_ds_data 2026-02-06 17:37:42 +08:00
Ashish Sharma 7418a91d3e feat: adds DS Sign capabilities for ESP32S2 2026-02-06 16:09:41 +08:00
Ashish Sharma b1f14d19d0 feat: adds new Kconfig variable for DS peripheral 2026-02-06 16:09:41 +08:00
Ashish Sharma 93349d05b2 feat: adds PSA DS driver support 2026-02-06 16:09:41 +08:00
harshal.patil 91c3738e81 test(mbedtls): Re-introduce the extensive AES, AES-GCM and the SHA tests
- Also extend the PSRAM encryption test to ESP32-S3
2026-02-03 13:04:32 +05:30
harshal.patil 00127bce0b fix(mbedtls/sha): Fix SHA-512 parallel engine driver to the use h/w engine 2026-02-03 11:46:51 +05:30
harshal.patil 4122e0e041 fix(mbedtls/psa_driver_aes_gcm): Support shortened tag length for AES-GCM 2026-02-02 10:51:31 +05:30
harshal.patil 556350eea9 fix(mbedtls/include): Fix include libs in the driver's public headers 2026-02-02 10:51:31 +05:30
harshal.patil de7f8c88b2 fix(mbedtls): Make the driver define macros public to allow application access
- Also, use the PSA HMAC opaque key interface for HMAC-PBKDF2
2026-02-02 10:51:31 +05:30
harshal.patil 82ff76eb41 feat(mbedlts/hmac): Support HMAC(MD5) using the MD5 driver 2026-02-02 10:51:31 +05:30
harshal.patil 086ba86c98 change(mbedtls): Remove legacy headers 2026-02-02 10:51:30 +05:30
harshal.patil 3163ed4167 feat(mbedtls): Introduce ESP-HMAC PSA opaque driver 2026-02-02 10:51:30 +05:30
harshal.patil 4d2e7fb4d3 fix(mbedtls): Enable h/w accel for CMAC and HMAC operations
- Refactor ESP-MAC drivers
2026-02-02 10:51:30 +05:30
harshal.patil 4bf3c3d20f fix(mbedtls/ecdsa): Improve build time efuse validation checks in the ecdsa driver 2026-01-31 10:59:22 +05:30
harshal.patil a9598b3304 feat(esp_tee): Support deterministic ECDSA signatures for ESP-TEE based keys 2026-01-31 10:59:16 +05:30
harshal.patil 5c55790f54 feat(mbedtls/ecdsa): Introduce PSA ECDSA driver 2026-01-31 10:59:11 +05:30
Mahavir Jain 78464dfab7 Merge branch 'refactor/create_esp_hal_security_v6.0' into 'release/v6.0'
refactor: Created esp_hal_security component (v6.0)

See merge request espressif/esp-idf!45349
2026-01-31 10:28:48 +05:30
Mahavir Jain ee2da28726 Merge branch 'feat/esp_tee_backports_v6.0' into 'release/v6.0'
feat(esp_tee): Feature/fixes backports to `release/v6.0`

See merge request espressif/esp-idf!45095
2026-01-31 10:27:34 +05:30
Aditya Patwardhan 4d3cfefc2e refactor(esp_hal_security): Updated esp_hal_security build and includes 2026-01-30 17:12:54 +05:30
morris 799e366cee Merge branch 'feat/esp_driver_dma_v6.0' into 'release/v6.0'
feat(dma): graduate the dma driver from esp_hw_support to esp_driver_dma (v6.0)

See merge request espressif/esp-idf!45387
2026-01-30 12:40:39 +08:00
Aditya Patwardhan f6fbbd94df Merge branch 'feat/enable_ecdsa_support_for_esp32p4_eco5_v6.0' into 'release/v6.0'
feat(esp32p4_eco5): enabled ECDSA peripheral support for ESP32P4 ECO5 (v6.0)

See merge request espressif/esp-idf!45350
2026-01-30 07:47:55 +05:30
morris db750dc1a0 feat(dma): graduate the dma driver from esp_hw_support to esp_driver_dma 2026-01-29 14:41:14 +08:00
Laukik Hase a9e20a0715 feat(esp_tee): Remove unused components from the PSA Crypto library 2026-01-29 11:49:17 +05:30
Laukik Hase f18697b544 refactor(esp_tee): Remove support for ECDSA secp192r1 keys in TEE secure storage 2026-01-29 11:49:16 +05:30
Laukik Hase 1752290f02 feat(esp_tee): Migrate TEE attestation to the PSA interface 2026-01-29 11:49:15 +05:30
Laukik HaseandHarshal Patil 17b98b7a29 feat(esp_tee): Enable GDMA burst mode for AES/SHA operations
- Fix the compile-time minimum chip revision check for patching
  the `ets_delay_us` API

Co-authored-by: Harshal Patil <harshal.patil@espressif.com>
2026-01-29 11:49:14 +05:30
Laukik Hase 39f392f943 feat(esp_tee): Support ECDSA secp384r1 keys in TEE secure storage 2026-01-29 11:49:13 +05:30
nilesh.kale 2ab4d5cf48 feat: enabled ECDSA peripheral support for ESSP32-P4 2026-01-29 11:24:47 +05:30
Ashish Sharma 539d62b8ba fix: Skip writing to esp-idf directory when tfpsacrypto is built
Closes https://github.com/espressif/esp-idf/issues/18163
2026-01-29 13:46:44 +08:00
Mahavir Jain 2ef6d7eb3d Merge branch 'fix/aes-dma-psram-output-cache-operation-change_v6.0' into 'release/v6.0'
Cache invalidate the output buffer before the AES-DMA operation (v6.0)

See merge request espressif/esp-idf!45169
2026-01-29 09:47:51 +05:30
Mahavir Jain ec6c8158d5 Merge branch 'contrib/github_pr_18121_v6.0' into 'release/v6.0'
Set CMake CACHE variables for mbedtls correctly (GitHub PR) (v6.0)

See merge request espressif/esp-idf!45178
2026-01-29 09:46:19 +05:30
Ferdinand Bachmann f4efb00ecd fix(cmake): Set CACHE variables correctly
The syntax for setting cache variables is actually
set(<variable> <value> CACHE <type> <docstring>) and not
set(<variable> CACHE <type> <value>).

The previous code silently set the variables to the empty string.
2026-01-23 11:40:16 +05:30
harshal.patil f8d81bf701 fix(mbedtls/aes): Cache invalidate the output buffer before the AES-DMA operation
Instead of performing the cache-to-memory (C2M) operation on the output buffer,
even a cache invalidate (M2C) is sufficient to ensure that no write-back occurs
during the DMA write operation
2026-01-19 07:22:19 +00:00
morris 1b258fc8c5 refactor: remove gdma_trigger_peripheral_t 2026-01-13 18:00:11 +08:00