Commit Graph
100 Commits
Author SHA1 Message Date
nilesh.kale e3a8feedcc fix(cpu_region_protect): set DROM mask PMP entry to read-only
PMP entry 3 (SOC_DROM_MASK_HIGH, TOR mode) in the memprot path
was incorrectly granted RW permission on esp32h21 and esp32c61.
The mask ROM data region is inherently read-only; remove the W bit.

Also added necessary tests to check voilations and re-enabled
tests for ESP32P4
2026-05-21 11:33:09 +05:30
nilesh.kale 7ff9f65a24 fix(bootloader_support): added ecdsa curve validation during secure boot
This commit added ECDSA key curve validation between
curve selected in menuconfig and key provided.
2026-03-05 10:31:22 +05:30
nilesh.kale afdb9e957d fix(mbedtls): software fallback for ECDSA verification for P4 version < 3.0 2026-02-24 11:56:30 +05:30
nilesh.kale b7ef04f701 fix(esp_https_ota): handle ota resumption if server dosent support range requests
This commit added check to see if server supports range requets,
and fallback to OTA without resumption accordingly.

Closes https://github.com/espressif/esp-idf/pull/17960
2026-02-17 11:20:07 +05:30
nilesh.kale d70b430796 fix(docs): alter the warning sequence for structs 2026-02-09 20:05:46 +08:00
nilesh.kale 6584b5adad feat: enabled ECDSA peripheral support for ESSP32-P4 2026-02-09 20:05:46 +08:00
nilesh.kale c181032205 feat: enable pesudo round functionality for AES in ESP32P4 ECO5 2026-01-16 11:29:04 +05:30
nilesh.kale d8885101cd feat: added support for pseudo round xts aes in esp32p4 eco5 2026-01-16 11:18:38 +05:30
nilesh.kale ab8f49823b feat: added testcase to check ota resumption if FE is enabled
This commit also added config option to set default buffer size for OTA.
This testcase mainly checks if OTA resumption fails if data written is
not 16 byte aligned when Flash Encryption is enabled.
2025-12-18 19:09:56 +08:00
nilesh.kale 88fe9e436d fix(esp_https_ota): align OTA resumption offset to 16-byte boundary 2025-12-18 19:09:56 +08:00
nilesh.kale 943b853746 Revert "fix: add check to ensure OTA buffer size for 16-byte aligned"
This reverts commit 873fd18c5a.
2025-12-18 19:09:56 +08:00
nilesh.kale 3e4bed2e4d feat(mbedtls): add ECC P-384 mbedtls support and test_cases 2025-12-04 12:48:32 +05:30
nilesh.kale cf98517de1 feat: added test_cases for ECC P-384 curve operations 2025-10-31 10:38:52 +05:30
nilesh.kale cf8068df75 feat(hal): add support for ESP32-P4 ECO5 ECC peripheral
This commit also enabled constant time mode for ECC.
2025-10-31 10:38:52 +05:30
nilesh.kale 4decd52e52 fix: add check to ensure OTA buffer size for 16-byte aligned
This commit added guide to, round off OTA written size to allowed
aignmnet when flash ecnryption enabled.
2025-10-17 10:48:58 +05:30
nilesh.kale 534b4be9cb feat(esp_https_ota): Support partial downloading of OTA over single connection
This commit added support to download OTA with partial download feature
over single HTTP connection if server supports persistent connection.
2025-10-17 10:38:52 +05:30
nilesh.kale 364adc79c3 feat: added config member to store block number for high part of ecdsa key 2025-10-16 14:48:13 +08:00
nilesh.kale ba0618b672 feat: added new config member to provide ecdsa curve type 2025-10-16 14:48:13 +08:00
nilesh.kale 851602ed8e feat: add ecdsa-p384 testcases and relative support for ESP32C5 ECO2
This commit adds testcases in crypto/hal and mbedtls testapps.
2025-10-16 14:48:13 +08:00
nilesh.kale 70ee6ed7e8 fix(esp-tls): removed unncessary log for certificate verification
This commit removed unnecessary and confusing log for
certificate verify if there is another issue during tls connection.
2025-10-09 11:22:25 +05:30
nilesh.kale adf5b7fc91 fix(esp-tls): added missing event tracker capture during mbedtls read operation
This commit fixed missing event tracker capture and
added new error code ESP_ERR_MBEDTLS_SSL_READ_FAILED.

Closes https://github.com/espressif/esp-idf/issues/16239
2025-10-09 11:22:25 +05:30
nilesh.kale c09bb9fe46 fix(esp_http_client): fix dispatching of finish event condition
This commit updates the condition for dispatching of FINISH event.
With this, FINISH event will be dispatched after complete data is read.

Closes https://github.com/espressif/esp-idf/issues/17437
2025-09-12 10:20:16 +05:30
nilesh.kale f0ab806e7e feat(esp_http_client): handle error while reading data from server
This commit updated API esp_http_cleint_perform() to handle error and
dispatched error  event if any error occured whiling reading data from server.
2025-09-12 10:20:11 +05:30
nilesh.kale d9b99c42b3 feat(esp_http_client): avoid dispatching of spurious event while closing closes connection
This commit updated the client closing condition to avoid spurious
dispatching of event HTTP_EVENT_DISCONNECTED while closing closeed connection.

Closes https://github.com/espressif/esp-idf/issues/16070
2025-08-14 17:05:39 +05:30
nilesh.kale a65a86cf54 fix(esp_https_ota): fixed missing return check during setting range header
This commit added return value check during setting the range header
for partial download procedure of esp_https_ota
2025-08-12 15:21:15 +05:30
nilesh.kale 01481f08f9 fix(esp_http_client): fixed regression issue during enabling digest auth in client
This commit solved the issue introduced in commit a0bcffcce9
for enabling digest auth for esp_http_client.

Closes https://github.com/espressif/esp-idf/issues/17238
2025-08-08 09:47:36 +05:30
nilesh.kale 04f5e591c0 feat: enable support for deterministic mode for esp32h2 2025-06-16 13:13:03 +08:00
nilesh.kale 2d5d7b819f feat: enabled ECDSA-P192 support for ESP32H2 2025-06-16 13:13:03 +08:00
nilesh.kale 4722f49bc7 feat: update documentation for esp32h21
This also updated log files for other targets to make consistent.
2025-05-12 12:07:36 +05:30
nilesh.kale 944e3ec846 fix(esp_mm): Move cache-related sources out of pure RAM app check
This change resolves build issues when compiling with
CONFIG_APP_BUILD_TYPE_PURE_RAM_APP enabled.
2025-04-29 12:30:27 +05:30
nilesh.kale f19e8e6970 fix: re-enabled ecdsa support for esp32c5-eco2 2025-04-28 20:58:09 +05:30
nilesh.kale 8c67e3e998 fix: update efuse register files for esp32c5 eco2 2025-04-28 20:58:06 +05:30
nilesh.kale c65858287a feat: enabled secure boot support esp32h21 2025-04-25 17:48:25 +05:30
nilesh.kale d9f03d7f28 fix(hal): updated API description and added comments 2025-04-15 14:58:53 +05:30
nilesh.kale c454c91b35 feat: added documentation for ECDSA peripheral of ESP32H21 2025-04-14 10:29:58 +05:30
nilesh.kale aae4bfb6f3 feat: enable ecdsa support for esp32h21
This commit enabled suppot for ECDSA peripheral in ESP32H21.
2025-04-14 10:26:46 +05:30
nilesh.kale 44d5361821 feat: add efuses for esp32h21
This commit adds ecdsa efuses for esp32h21
2025-04-14 10:26:46 +05:30
nilesh.kale 34b7e7df63 fix(esp_https_ota): add component dependencies for esp_https_ota component
This commit added dependency of esp_bootloader_img and esp_partition
for component esp_https_ota.

Closes https://github.com/espressif/esp-idf/issues/15680
2025-04-08 15:14:23 +05:30
nilesh.kale 54eb749fd2 feat: updated check for chip revision and respective testcases
This commit have updated check for max chip revision along with min chip revision.
Also added qemu based pytest to verify chip revision while performing OTA.
2025-04-07 18:18:16 +08:00
nilesh.kale 9c4c366d61 fix(esp_http_client): Added test case to verify set header functionality
This commit added testcase to verify esp_http_client_set_header
allows header value as NULL. Setting this NULL will delete the header.

Closes https://github.com/espressif/esp-idf/issues/15714
2025-04-04 21:00:45 +05:30
nilesh.kale 79af9d0be0 fix(hal): use typedef esp_xts_aes_psuedo_rounds_state_t for pseudo rounds mode 2025-03-13 10:38:21 +05:30
nilesh.kale 652879ff06 feat: enable flash encryption support for esp32h21 2025-03-13 10:37:11 +05:30
nilesh.kale f794eb9b2d feat: enabled hmac and ds support in esp32h21
This commit enables support for HMAC and DS in ESP32H21
2025-03-13 10:23:11 +05:30
nilesh.kale 19ea12664d feat: added test for ota resumption through ethernet 2025-03-10 13:32:06 +05:30
nilesh.kale 49e1e22f72 fix(esp_rom): Remove AES-192 references for unsupported chips
Cleaned up references to AES-192 in ROM headers for chips that do not support it.
2025-03-06 17:48:17 +05:30
nilesh.kale a6979eba9c feat: enabled aes and sha support for esp32h21
This commit enabled AES and SHA support for ESP32H21
2025-03-06 17:44:13 +05:30
nilesh.kale 714ebfc0d1 feat(esp_https_ota): added check for revision check while performing OTA
This commit added check to verify revision while performing OTA process.
OTA with version greater than chip revision will be prohibited.
2025-02-28 17:00:47 +05:30
nilesh.kale 486f3cdb7b docs: update document to remove dependency of esp32 on secure element usage 2025-02-19 14:54:24 +05:30
Nilesh Kale 74d9e08d63 Merge branch 'feature/enable_rsa_support_for_esp32h21' into 'master'
feat: enabled rsa support for esp32h21

Closes IDF-11498

See merge request espressif/esp-idf!36309
2025-01-23 21:41:08 +08:00
nilesh.kale 5c5df89950 feat(esp_https_ota): added ota resumption feature
This commit enabled configurable OTA resumption feature in advanced ota example.
This resumes downloading OTA image from where it left off in case of
an error or reboot.

Closes https://github.com/espressif/esp-idf/issues/13127
2025-01-23 17:13:15 +05:30
nilesh.kale a241768916 feat: enabled rsa support for esp32h21 2025-01-23 17:49:46 +08:00
nilesh.kale 783ff22ebf fix(esp_http_client): update code format for API
This commit update code format as per IDF standard for API
esp_http_client_get_and_clear_last_tls_error().
2025-01-21 10:24:33 +05:30
nilesh.kale f638090179 fix(esp_http_client): Revert Deprecated Tag on Previously Marked Private API
This commit removes depcriacted tag marked on priavte APIs'
http_utils_get_string_between() and http_utils_get_string_after().
As these are not publick API, necessary changes been applied on these
APIs' directly withput adding new similar one and marking them as depricated.
2025-01-16 17:20:27 +05:30
nilesh.kale 5ff8cefb5b feat: enable ecc support for esp32h21
This commmit enabled support for ECC peripheral in ESP32H21.
2025-01-15 17:01:23 +05:30
nilesh.kale d065cc5ce4 fix(esp_http_client): fixed memory leak issue while preparing HTTP digest authentication
This commit avoid memory leak while preparing basic HTTP digest
authentication.
Closes https://github.com/espressif/esp-idf/issues/14885
2024-12-31 15:03:06 +05:30
nilesh.kale 92027a9039 fix(esp_http_client): updated API esp_http_client_get_url to get URL in correct format
This commit updates the API to include the port number in the URL,
which was previously missing.
2024-12-18 12:00:55 +05:30
nilesh.kale d5ccc60eb0 feat(esp_http_server): add support to handle HTTP 1.0 requests
This commit adds support to handle HTTP/1.0 requests alongside HTTP/1.1 for
legacy compliance purposes.
2024-12-11 15:32:32 +05:30
nilesh.kale a0bcffcce9 fix(esp_http_client): updated defination for macro mem_check
This commit replace macro MEM_CHECK with return on failure and
updated usage of reespctive APIs' in IDF.
This also update th prototype of API esp_http_client_add_auth().

Closes https://github.com/espressif/esp-idf/issues/14463
2024-12-10 15:41:36 +05:30
nilesh.kale 28f056f8c8 fix(hal/test_apps): update efuse blcck numbers for ECDSA
This commit updates the efuse block numbers to be burnt for
hal/cryptp/test_apps
2024-12-05 17:14:25 +05:30
nilesh.kale 1e11340061 feat(bootloader_support): enabled RSA based secure boot scheme for ESP32C5 ECO1
This commit enabled RSA based secure boot scheme for ESP32C5 ECO1 module.
This update also adds a check to ensure the selected secure boot scheme is
valid for ECO0 modules.
2024-12-03 16:48:56 +05:30
nilesh.kale 0733de565f feat(esp_htttps_ota): handle case if server retured 304 not_modified during ota
This commit handles case for response code 304 (NOT_MODIFIED) during ota.

Closes https://github.com/espressif/esp-idf/issues/14839
2024-12-02 17:23:30 +08:00
nilesh.kale ea6e6cfcbd feat: enabled configurable session resumption support in ota examples
This commit added config option to enable session ticket support
while performing ota. This helps in optimizing latency while
downloading ota over multiple HTTP requests.

closes https://github.com/espressif/esp-idf/issues/14783
2024-11-27 14:20:47 +05:30
nilesh.kale 5db0c49b8c fix(tcp_tranport): Fix handling of select() return value
When both readset/writeset and errset are set for a single socket,
the HTTP client incorrectly handled the condition, causing premature termination.
Added a check to ensure readset/writeset is prioritized before errset.

Closes https://github.com/espressif/esp-idf/issues/14673
2024-11-27 13:19:13 +05:30
Nilesh Kale 57553ecf90 Merge branch 'bugfix/update_condition_to_verify_http_version' into 'master'
fix(esp_http_server): updated condition to verify http version

Closes IDFGH-13878

See merge request espressif/esp-idf!34208
2024-10-25 14:21:30 +08:00
nilesh.kale 3e1534e2f7 fix(esp_https_server): added default config for https_server example to set header size to 1024 2024-10-22 12:20:00 +05:30
nilesh.kale 854101959d feat: enable security related testcases for c5 and c61 2024-10-21 14:24:36 +05:30
nilesh.kale dacb9a57cb feat(mbedtls): update mbedtls version to 3.6.2 2024-10-18 11:59:31 +05:30
nilesh.kale d66442b74a fix(esp_http_server): updated condition to verify http version
Closes https://github.com/espressif/esp-idf/issues/14723
2024-10-15 17:56:13 +05:30
nilesh.kale 8d8b3fc0a2 fix(esp_http_client): Fix ota failure with openssl server
If the TLS server (e.g., openssl) closes connection with encrypted close-notify alert
then `errno` is not explicitly set on the socket by LwIP stack.
For this scenario, we must rely only on `ERR_TCP_TRANSPORT_CONNECTION_CLOSED_BY_FIN`
return value as the connection close case and do the graceful connection closure.

Closes https://github.com/espressif/esp-idf/issues/14724
2024-10-15 16:37:32 +05:30
nilesh.kale 0797f580bc fix: updated pytest for https_server example as per config option 2024-10-09 15:56:42 +05:30
Nilesh Kale fcdbff5039 Merge branch 'feature/update_mbedtls_version_to_3.6.1' into 'master'
feat(mbedtls): updated mbedtls version to 3.6.1

Closes IDF-10980

See merge request espressif/esp-idf!33282
2024-09-29 22:33:45 +08:00
nilesh.kale f9961fda62 fix(esp_http_client): added initial argument checking for APIs'
This MR added checks for arguments passed in APIS' of esp_http_client.c
2024-09-27 17:05:04 +05:30
nilesh.kale 0216236d0c feat(mbedtls): updated mbedtls version to 3.6.1 2024-09-26 10:26:29 +05:30
nilesh.kale 12fc7a677e feat: enable support for sha peripheral in esp32c61 2024-09-11 14:49:01 +05:30
nilesh.kale 70d4414eeb feat(esp_https_ota): added API to get last status code logged from http resonse
Closes https://github.com/espressif/esp-idf/issues/14302
2024-09-06 15:09:42 +05:30
nilesh.kale 3550e36a68 feat: updated security docs for ESP32C5
This commit modified document files for ESP32C5.
This revised chnages for security components, RNG, provisioning and
some minor changes in sample output for flash encryption example.
2024-09-02 11:50:07 +05:30
nilesh.kale 1011cee7a7 feat: udpate security docs for c61 and c5
This commit update security documents for ESP32C61.
2024-09-02 11:04:38 +05:30
nilesh.kale 214974b038 fix: update https server starting instructions in ota README
This commit updates sequence for methods of starting HTTPS servers
in ota README file.
2024-08-14 15:45:23 +05:30
Nilesh Kale 6028332164 Merge branch 'feature/enable_secure_boot_in_esp32c61' into 'master'
feat: enable secure boot feature for esp32c61

Closes IDF-9233

See merge request espressif/esp-idf!31420
2024-08-13 19:23:53 +08:00
nilesh.kale e74dcb1fab feat: remove support for aes and rsa peripherals in esp32c61 2024-08-06 15:06:16 +05:30
nilesh.kale bedfe0fe3b feat: remove suppport for ds and hmac in esp32c61
This commit remove support for DS and HMAC peripheral
in ESP32C61.
2024-08-06 15:06:08 +05:30
nilesh.kale 5cc0110958 feat: enabled support for ecdsa in esp32c61
This commit add ECDSA peripheral support in ESP32C61.
2024-08-05 09:29:31 +05:30
nilesh.kale 849726a3b7 feat: enable secure boot feature for esp32c61 2024-08-05 09:23:27 +05:30
nilesh.kale 2bf74cf86d feat: enable flash encyption support in esp32c61
This commit add support for flash ecnyrption in ESP32C61.
2024-07-19 17:23:11 +05:30
nilesh.kale 55bbd9c95a feat: add config option under partition menu to support large size ota
This commit adds one more config option under partition table menu
to support large size image during ota

This also updates the default config for simple ota example.
2024-07-12 14:49:16 +05:30
nilesh.kale 3aa448ee0d fix: disable config for RSA during secure boot
support for RSA secure boot is disabled for ESP32-ECO0 due to
hardware issue. It will be re-enabled in future version ECO1.

For ESP32C5- ECO0 , ECDSA secure boot is the recommended option.
2024-07-12 12:40:11 +05:30
nilesh.kale b839bf95aa feat: Uncomment UART bootloader cache code in FE for ESP32C5 2024-07-04 16:27:32 +05:30
nilesh.kale a87636cca7 feat: enable ecc support in esp32c61
This commit enable ecc peripheral support in ESP32C61
It also corrects power up sequence for ecc peripheral.
2024-07-04 13:37:16 +05:30
nilesh.kale 469942225b fix(hal): updated naming style for power up and down api for mpi peripheral
This commit updated APIs' naming style to ensure consistency throughout
all other peripherals.
2024-07-03 10:49:20 +05:30
nilesh.kale 96d011cdfc fix(hal): updated ecdsa reset api to execute correctly
This commit updated API to ensure ECDSA peripheral resets
and waits until the state returns to idle.
2024-07-03 10:48:36 +05:30
nilesh.kale 1eaa8288a2 feat: enable DPA protection for c5
This commit enabled DPA protection for ESP32C5.
This reflect updating documentation for C5.
2024-06-28 11:38:51 +05:30
nilesh.kale 40059dedde feat: updated procedure for generating token in jtag_example_helper.py
This commit updated API for generating token providing ability to
pass more arguments and updated readme file as well.
2024-06-27 16:57:01 +05:30
nilesh.kale d1fa51e3c9 feat: enable flash encryption support for c5
This commit provide support for flash encryption feature in ESP32C5
2024-06-04 14:10:21 +05:30
nilesh.kale 7c8a43ffc2 fix(hal): update ECDSA API to set register values correctly for ESP32C5
This commit updates the ECDSA API to enable and clear interrupts by
setting the respective registers correctly for the ESP32C5.
2024-05-31 11:33:18 +05:30
nilesh.kale f5dd1074b6 feat: enable secure boot for c5
This MR added suppport for secure boot in ESP32-C5.
2024-05-30 11:43:17 +05:30
nilesh.kale 00fa28259b feat: enabled ecdsa support for c5
This commit adds support for ECDSA for ESP32-C5
2024-05-28 17:33:05 +05:30
nilesh.kale 46c0902fd6 feat: enabled hmac and ds peripheral support for c5
This commit add support for HMAC and DS peripheral support for ESP32-C5.
2024-05-28 10:44:54 +05:30
nilesh.kale 317f07f22a docs: updated security documents for esp32c5 2024-05-27 16:36:17 +05:30
nilesh.kale a76e84a1e1 feat: enabled aes and sha support for esp32c5 mp version
This commit enabled AES and SHA support for esp32c5.
2024-05-27 11:03:02 +05:30
nilesh.kale 92fdaea83a feat: enable RSA support for c5 mp version
This commit enables RSA peripheral support for ESP32-C5 MP version.
2024-05-17 14:22:30 +05:30