Commit Graph

176 Commits

Author SHA1 Message Date
wuzhenghui
4166ee869d test(mbedtls): smoke-test crypto HW after PD_TOP lightsleep
Add a mbedtls_ut case that enters TOP PD light sleep then runs minimal
AES/SHA/MPI/ECC/ECDSA ops, catching crypto modules left unusable after wake.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-09 17:13:29 +08:00
Chen Jichang
8cb3743b7c ci(esp32h4): disable h4 build and target test on unsupported release branch 2026-09-07 15:48:11 +08:00
Jiang Jiang Jian
27892e5e12 Merge branch 'fix/tee_reentrant_svc_and_non_det_sign_v6.1' into 'release/v6.1'
feat(esp_tee): Backports to v6.1

See merge request espressif/esp-idf!52291
2026-09-04 23:17:06 +08:00
morris
28a4aaa1db Merge branch 'fix/psram-ecc-mspi-dma-align_v6.1' into 'release/v6.1'
fix(mspi): handle PSRAM ECC DMA alignment across MSPI users (v6.1)

See merge request espressif/esp-idf!52363
2026-09-04 18:48:05 +08:00
Laukik Hase
f8d0bae631 feat(esp_tee): Disable the MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS option for TEE build 2026-09-04 10:20:21 +05:30
Chen Jichang
bd2d64bffb refactor(gdma): increase performance and optimize api 2026-09-03 19:09:30 +08:00
Chen Jichang
ef4387144e test(aes): add aes psram ecc test 2026-09-03 19:09:30 +08:00
Ashish Sharma
94e538c2dc test(mbedtls): add test for unaligned multipart AES-GCM streaming 2026-09-03 16:09:57 +08:00
Mahavir Jain
7b18822f6d Merge branch 'fix/esp32s2_aes_dma_psram_partial_block_hang_v6.1' into 'release/v6.1'
Avoid ESP32-S2 Crypto DMA stall on PSRAM output with partial blocks (v6.1)

See merge request espressif/esp-idf!51874
2026-08-27 12:28:47 +05:30
harshal.patil
e5d9a7f1a5 test(mbedtls): add partial-block PSRAM coverage for AES and AES-GCM
Extend the CTR test data length to 6433 bytes so the trailing partial
block is exercised with external RAM buffers (which stalls the ESP32-S2
Crypto DMA on an unfixed driver), and add AES-GCM PSRAM tests verified
against internal RAM references.
2026-08-21 10:30:05 +05:30
Ashish Sharma
844403b5b9 test(mbedtls): add PSA RSA key generation test
The test only runs with MBEDTLS_CONSTANT_TIME_PRIME_GEN disabled:
with the constant-time prime generation that is now the default,
RSA-2048 key generation takes over a minute on most targets (~86 s on
ESP32-S3), exceeding the test timeout and starving the task watchdog.
2026-07-20 17:17:04 +08:00
Jiang Jiang Jian
a43c51681a Merge branch 'task/buildv2_full_pipeline_v6.1' into 'release/v6.1'
Enable full buildv2 pipeline (v6.1)

See merge request espressif/esp-idf!50351
2026-07-17 18:20:09 +08:00
Xiao Xufeng
3e8389cc31 fix(mmap): fixed some API read wrong data via mmap when flash being erased/written while XIP on PSRAM
Before:

The cache won't be disabled when XIP on psram. But during flash
erasing/programming, read data will be courrupt.

When XIP in psram is enabled, the image is not mapped to the cache so
usually there will be no flash access. The only way to read from flash
is via the driver or use mmap. The driver has protection during erasing,
while th mmap region not.

Now:

Mmap APIs provide a flag to make mmap->unmap region mutually exclusive
to flash erase/programming when XIP from psram. SPI Flash write APIs
will benefit from this. When the flag is used, no concurrent access to
mapped region will happen while writing; otherwise the cache will be
disable to avoid data corruption.

Most ESP-IDF APIs calls mmap with this flag. As for users calling
mmap-like APIs directly, they can choose whether to enable this by a
flag.

Closes https://github.com/espressif/esp-idf/issues/14897
2026-07-15 18:57:08 +08:00
Laukik Hase
87a5664883 ci(esp_tee): Fix tee_cli_app build failure due to heap size overflow
- Also fix the `unused variable` warning while builing the PSA
  AES tests with `tee_test_fw` app
2026-07-10 10:30:02 +05:30
Sudeep Mohanty
0a89c2e432 fix(test_apps): override config defaults unused by these tests
These tests enable features they do not use -- the VFS console, Wi-Fi task core pinning, and
the DS peripheral -- which shift memory layout, interrupt allocation, and peripheral access
enough to fail them. Override the unused options in each test's sdkconfig and ignore the
resulting unknown-symbol build warnings.
2026-07-03 19:18:42 +02:00
Mahavir Jain
40974f42a3 Merge branch 'fix/aes_dma_psram_encrypted_mem_s31_v6.1' into 'release/v6.1'
fix(mbedtls/aes): Fix AES-DMA over encrypted PSRAM on ESP32-S31 (v6.1)

See merge request espressif/esp-idf!50252
2026-07-03 08:45:02 +05:30
harshal.patil
4e02ec217c test(mbedtls): move AES test vectors to a dedicated header 2026-07-01 16:51:30 +05:30
Ashish Sharma
33cb603e02 fix(mbedtls/port): add additional hardening for PSA drivers 2026-07-01 17:41:48 +08:00
harshal.patil
beb13babca fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down 2026-06-09 14:58:59 +05:30
harshal.patil
8b7e1f1787 test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver 2026-05-27 11:37:53 +05:30
Jiang Guang Ming
d5a712f1f8 feat(mbedtls): enable ROM mbedTLS pytest with esp32c2 rev2.0 2026-05-20 14:15:19 +08:00
harshal.patil
83ebd475c3 test(mbedtls/persistent_storage_format): Add ESP ITS NVS format-stability test app 2026-05-15 09:12:20 +05:30
harshal.patil
4821f331fe refactor(mbedtls/test): Move the mbedtls test app to support multiple test apps 2026-05-15 09:09:15 +05:30
Mahavir Jain
0419f8b991 Merge branch 'fix/memory_leak_cross_signed_cert_verify' into 'master'
fix(esp_crt_bundle): fixes verification failures with cross signed certificates

Closes IDFGH-17582 and IDFGH-17627

See merge request espressif/esp-idf!47966
2026-05-12 11:03:52 +05:30
Ashish Sharma
0e03327f69 fix(esp_crt_bundle): fixes verification with cross signed cert 2026-05-11 17:44:16 +08:00
Chen Jichang
3c3b9a6a4e ci(esp32h4): disable tests which cannot pass 2026-05-11 16:48:58 +08:00
Ashish Sharma
7a1ba8f4ca feat(mbedtls): update to version 4.1.1 2026-04-30 18:02:06 +08:00
harshal.patil
7eb44576be test(mbedtls): Add a test for opaque HMAC driver verification 2026-04-22 10:11:27 +05:30
harshal.patil
f195d183be fix(mbedtls): Flash compatibility across multiple key sources (ECDSA, HMAC) 2026-04-22 10:11:12 +05:30
Ashish Sharma
a858f1683d fix(mbedtls): reenable RSA 4096 bit key performance test 2026-04-08 14:54:04 +08:00
harshal.patil
28736a81fa fix(esp_security): Enable Key Manager clocks even for efuse key operations
The Key Manager holds a key usage register, thus, the Key Manager peripheral
clock must be enabled even for efuses-based key operations to route the
crypto operations to correctly to the efuses (default is Key Manager)
2026-03-25 10:38:44 +05:30
nilesh.kale
31c88b7a4d fix(mbedtls): disable cert bundle tests in FPGA env 2026-03-23 13:53:54 +08:00
harshal.patil
b5550281b9 change(mbedtls): Change the ESP-DS-RSA key lifetime name to include the VOLATILE keyword 2026-03-06 15:00:38 +05:30
harshal.patil
30a120c7cb feat(mbedtls/esp_ecdsa): Support Key Manager key using the ESP-ECDSA PSA interface 2026-03-03 18:40:31 +05:30
harshal.patil
aa63487d9f feat(mbedtls/esp_rsa_ds): Introduce ESP-RSA DS opaque key context 2026-03-03 18:36:18 +05:30
hrushikesh.bhosale
7b2bd0453a fix(mbedtls/test_apps): Enabling psram test for esp32p4 2026-02-18 11:55:06 +05:30
Mahavir Jain
ba61b8300f Merge branch 'feat/reenabling_test_for_esp32p4' into 'master'
feat(tests): Reenabled the app_update and crypto driver test for esp32p4

Closes IDF-14367

See merge request espressif/esp-idf!43719
2026-02-17 11:01:32 +05:30
hrushikesh.bhosale
8124c2e2cf refactor(protocols): Removed the common_component dependency
- Removed the common_component build dependency from protocols test_apps
and examples
2026-02-16 15:07:37 +05:30
Mahavir Jain
5225e6a3e6 Merge branch 'fix/failed_test_ds_key_deployment_in_aes_mode' into 'master'
Re-enable crypto drivers test app for ESP32-P4

Closes IDF-14418

See merge request espressif/esp-idf!45724
2026-02-12 13:38:53 +05:30
Ashish Sharma
0b6843f2ed fix(mbedtls): updates crypto performance numbers 2026-02-11 23:35:59 +08:00
nilesh.kale
0fd1a4c9f8 test(esp_security): re-enable crypto drivers test app for ESP32P4
Also remove common_components dep for security-related tests
2026-02-10 17:48:55 +05:30
harshal.patil
b4542bf748 fix(mbedtls): Support truncated HMAC 2026-02-10 14:08:46 +05:30
hrushikesh.bhosale
e957e4801b feat(tests): Reenabled the app_update. mbedtls and FE tests for esp32p4 2026-02-06 15:34:19 +05:30
Ashish Sharma
b3e1c03d97 fix(mbedtls): revert struct member name change esp_rsa_ds_data to esp_ds_data 2026-02-06 17:33:17 +08:00
Ashish Sharma
6f5b078ed6 feat: adds DS Sign capabilities for ESP32S2 2026-02-05 10:12:25 +08:00
Ashish Sharma
e06a7dd791 feat: adds new Kconfig variable for DS peripheral 2026-02-05 10:12:25 +08:00
Ashish Sharma
1d185a6548 feat: adds PSA DS driver support 2026-02-05 10:12:25 +08:00
Mahavir Jain
f2635f98d9 Merge branch 'fix/externsive_mbedtls_aes_sha_tests' into 'master'
Re-introduce the extensive mbedtls AES and SHA tests

Closes SHA-512

See merge request espressif/esp-idf!45489
2026-02-04 18:33:57 +05:30
Ashish Sharma
523194465b change(mbedtls): rename builtin to mbed-builtin 2026-02-03 14:55:44 +08:00
harshal.patil
2bc49effb4 test(mbedtls): Re-introduce the extensive AES, AES-GCM and the SHA tests
- Also extend the PSRAM encryption test to ESP32-S3
2026-02-02 16:58:01 +05:30