Mahavir Jain
0187e155ac
Merge branch 'fix/ecdsa_hmac_ds_locking_v6.0' into 'release/v6.0'
...
fix(esp_security): Stop ECDSA and Key Manager resets from corrupting concurrent crypto (v6.0)
See merge request espressif/esp-idf!52578
2026-09-15 21:03:00 +05:30
radek.tandler
0762e80999
fix(mbedtls): Fix mbedtls testapps false memory leaks by lazy mutex creation
2026-09-08 19:42:35 +05:30
Ashish Sharma
85eda0fd07
test(mbedtls): add test for unaligned multipart AES-GCM streaming
2026-09-07 17:30:09 +08:00
Laukik Hase
a4d6b802a7
feat(esp_tee): Disable the MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS option for TEE build
2026-09-04 10:23:25 +05:30
harshal.patil
1d4a1e0624
test(mbedtls): add partial-block PSRAM coverage for AES and AES-GCM
...
Extend the CTR test data length to 6433 bytes so the trailing partial
block is exercised with external RAM buffers (which stalls the ESP32-S2
Crypto DMA on an unfixed driver), and add AES-GCM PSRAM tests verified
against internal RAM references.
2026-08-25 14:50:15 +05:30
Ashish Sharma
57ff98ca13
test(mbedtls): add PSA RSA key generation test
...
The test only runs with MBEDTLS_CONSTANT_TIME_PRIME_GEN disabled:
with the constant-time prime generation that is now the default,
RSA-2048 key generation takes over a minute on most targets (~86 s on
ESP32-S3), exceeding the test timeout and starving the task watchdog.
2026-07-23 13:38:24 +08:00
Laukik Hase
bef71a9724
ci(esp_tee): Fix tee_cli_app build failure due to heap size overflow
...
- Also fix the `unused variable` warning while builing the PSA
AES tests with `tee_test_fw` app
2026-07-10 10:57:24 +05:30
Mahavir Jain
dfba68bc53
Merge branch 'fix/aes_dma_psram_encrypted_mem_s31_v6.0' into 'release/v6.0'
...
fix(mbedtls/aes): Fix AES-DMA over encrypted PSRAM on ESP32-S31 (v6.0)
See merge request espressif/esp-idf!50253
2026-07-06 09:48:36 +05:30
harshal.patil
bb5025d983
test(mbedtls): move AES test vectors to a dedicated header
2026-07-01 16:32:18 +05:30
Ashish Sharma
d934586510
fix(mbedtls/port): add additional hardening for PSA drivers
2026-06-29 14:23:05 +08:00
Mahavir Jain
4163417ff1
Merge branch 'feat/support_rom_psa_mbedtls_v6.0' into 'release/v6.0'
...
feat(mbedtls): enable ESP32-C2(Rev2.0) ROM mbedTLS crypto for PSA (v6.0)
See merge request espressif/esp-idf!48843
2026-06-29 11:22:33 +05:30
Mahavir Jain
e082ad95da
Merge branch 'fix/memory_leak_cross_signed_cert_verify_v6.0' into 'release/v6.0'
...
fix(esp_crt_bundle): fixes verification failures with cross signed certificates (v6.0)
See merge request espressif/esp-idf!48624
2026-06-29 11:17:37 +05:30
harshal.patil
3195c942da
fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down
2026-06-09 15:02:59 +05:30
Ashish Sharma
a1f1d90729
fix(esp_crt_bundle): fixes verification with cross signed cert
2026-06-03 11:35:24 +08:00
harshal.patil
40de3df854
test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver
2026-05-27 11:38:14 +05:30
Jiang Guang Ming
6eb7f181a2
feat(mbedtls): enable ROM mbedTLS pytest with esp32c2 rev2.0
2026-05-25 10:07:47 +08:00
harshal.patil
d8808f90b9
test(mbedtls/persistent_storage_format): Add ESP ITS NVS format-stability test app
2026-05-15 09:28:47 +05:30
harshal.patil
513efdf89a
refactor(mbedtls/test): Move the mbedtls test app to support multiple test apps
2026-05-15 09:28:42 +05:30
Ashish Sharma
b86a1231fb
feat(mbedtls): update to version 4.1.1
2026-05-10 19:16:12 +08:00
Mahavir Jain
2eff46ca25
Merge branch 'fix/preserve_flash_layout_compatibiliy_of_hw_ecdsa_keys_psa_v6.0' into 'release/v6.0'
...
Persistent Storage Format for PSA Opaque ESP-Keys (v6.0)
See merge request espressif/esp-idf!47424
2026-05-07 10:17:43 +05:30
harshal.patil
4f0915d7f6
test(mbedtls): Add a test for opaque HMAC driver verification
2026-05-04 18:21:01 +05:30
harshal.patil
c923685b0f
fix(mbedtls): Flash compatibility across multiple key sources (ECDSA, HMAC)
2026-05-04 18:21:00 +05:30
nilesh.kale
1f506e7a54
test(esp_security): re-enable crypto drivers test app for ESP32P4
...
Also remove common_components dep for security-related tests
2026-05-04 18:18:20 +05:30
Ashish Sharma
bda099031e
fix(mbedtls): reenable RSA 4096 bit key performance test
2026-04-09 10:26:10 +08:00
harshal.patil
2339834e4a
fix(esp_security): Enable Key Manager clocks even for efuse key operations
...
The Key Manager holds a key usage register, thus, the Key Manager peripheral
clock must be enabled even for efuses-based key operations to route the
crypto operations to correctly to the efuses (default is Key Manager)
2026-03-24 16:23:16 +05:30
igor.udot
e2a8bbe639
ci: update build-test-rules to use common_components
2026-03-20 15:53:26 +08:00
harshal.patil
e0b444281c
change(mbedtls): Change the ESP-DS-RSA key lifetime name to include the VOLATILE keyword
2026-03-18 16:38:24 +05:30
harshal.patil
79e92e076a
feat(mbedtls/esp_ecdsa): Support Key Manager key using the ESP-ECDSA PSA interface
2026-03-18 16:38:24 +05:30
harshal.patil
96f5317806
feat(mbedtls/esp_rsa_ds): Introduce ESP-RSA DS opaque key context
2026-03-18 16:38:23 +05:30
Ashish Sharma
cb91021678
fix(mbedtls): updates crypto performance numbers
2026-02-12 20:37:54 +08:00
Mahavir Jain
63be46ed3d
Merge branch 'fix/mbedtls_disable_default_configs_v6.0' into 'release/v6.0'
...
change(mbedTLS): update mbedTLS default configs (v6.0)
See merge request espressif/esp-idf!45699
2026-02-12 11:34:33 +05:30
Mahavir Jain
6d023865d2
Merge branch 'fix/support_truncated_hmac_v6.0' into 'release/v6.0'
...
Allow truncated ESP-PSA HMAC driver operations (v6.0)
See merge request espressif/esp-idf!45755
2026-02-12 11:31:16 +05:30
Mahavir Jain
ad25b61af6
Merge branch 'fix/externsive_mbedtls_aes_sha_tests_v6.0' into 'release/v6.0'
...
Re-introduce the extensive mbedtls AES and SHA tests (v6.0)
See merge request espressif/esp-idf!45591
2026-02-12 09:49:09 +05:30
Ashish Sharma
0aef47a07e
change(mbedtls): rename builtin to mbed-builtin
2026-02-11 18:04:56 +08:00
harshal.patil
51956d766e
fix(mbedtls): Support truncated HMAC
2026-02-10 14:09:33 +05:30
Ashish Sharma
762c4e9e65
fix(mbedtls): revert struct member name change esp_rsa_ds_data to esp_ds_data
2026-02-06 17:37:42 +08:00
Ashish Sharma
7418a91d3e
feat: adds DS Sign capabilities for ESP32S2
2026-02-06 16:09:41 +08:00
Ashish Sharma
b1f14d19d0
feat: adds new Kconfig variable for DS peripheral
2026-02-06 16:09:41 +08:00
Ashish Sharma
93349d05b2
feat: adds PSA DS driver support
2026-02-06 16:09:41 +08:00
harshal.patil
91c3738e81
test(mbedtls): Re-introduce the extensive AES, AES-GCM and the SHA tests
...
- Also extend the PSRAM encryption test to ESP32-S3
2026-02-03 13:04:32 +05:30
harshal.patil
556350eea9
fix(mbedtls/include): Fix include libs in the driver's public headers
2026-02-02 10:51:31 +05:30
harshal.patil
3163ed4167
feat(mbedtls): Introduce ESP-HMAC PSA opaque driver
2026-02-02 10:51:30 +05:30
harshal.patil
4d2e7fb4d3
fix(mbedtls): Enable h/w accel for CMAC and HMAC operations
...
- Refactor ESP-MAC drivers
2026-02-02 10:51:30 +05:30
harshal.patil
5c55790f54
feat(mbedtls/ecdsa): Introduce PSA ECDSA driver
2026-01-31 10:59:11 +05:30
nilesh.kale
2ab4d5cf48
feat: enabled ECDSA peripheral support for ESSP32-P4
2026-01-29 11:24:47 +05:30
Ashish Sharma
933dd7e02f
feat: adds PSA MD5 driver support
2026-01-09 13:56:03 +05:30
harshal.patil
3c4dadff0b
fix(mbedtls): Support partial hardware AES-GCM and s/w fallback for non-AES ciphers
...
- Support software-fallback for unsupported hardware AES lengths
2026-01-09 13:55:51 +05:30
morris
4fbcab88f8
Merge branch 'refactor/esp_hal_uart_v6.0' into 'release/v6.0'
...
refactor(uart): split UART HAL into separate component (v6.0)
See merge request espressif/esp-idf!44642
2026-01-06 23:31:23 +08:00
Mahavir Jain
1f0ce0524c
fix(mbedtls): misc updates post PSA crypto migration
2026-01-05 14:54:33 +05:30
Song Ruo Jing
ce475d901d
refactor(uart): split UART HAL into separate component
2026-01-04 16:02:57 +08:00
