Laukik Hase
dc0fadf1d4
feat(esp_tee): Disable the MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS option for TEE build
2026-09-02 11:49:22 +05:30
Laukik Hase
427dc875b9
change(esp_tee): Force non-deterministic ECDSA signing for TEE secure storage keys
2026-08-28 10:20:55 +05:30
Laukik Hase
4812dbd2d8
feat(esp_tee): Use CTR-DRBG for assisting random number generation in TEE
...
- For ESP-TEE, fault-assert in `esp_random()` if the RNG is held in a
freeze state
2026-08-28 10:20:54 +05:30
Ashish Sharma
bd27c398e8
fix(esp_tee): optimise build size by removing unused configs
2026-04-30 18:02:07 +08:00
harshal.patil
30a120c7cb
feat(mbedtls/esp_ecdsa): Support Key Manager key using the ESP-ECDSA PSA interface
2026-03-03 18:40:31 +05:30
harshal.patil
aa63487d9f
feat(mbedtls/esp_rsa_ds): Introduce ESP-RSA DS opaque key context
2026-03-03 18:36:18 +05:30
Mahavir Jain
97d9585357
Merge branch 'fix/nvs_encr_use_hardware_aes' into 'master'
...
Use h/w accelerated AES-ECB for XTS-AES operations
See merge request espressif/esp-idf!45628
2026-02-12 18:22:03 +05:30
Ashish Sharma
0b6843f2ed
fix(mbedtls): updates crypto performance numbers
2026-02-11 23:35:59 +08:00
harshal.patil
8bd87b67e2
fix(nvs_flash): Use h/w accelerated AES-ECB for XTS-AES operations
2026-02-11 15:24:03 +05:30
Laukik Hase
1d425cee8e
feat(esp_tee): Remove unused components from the PSA Crypto library
2026-02-10 13:52:30 +05:30
harshal.patil
4ab9ac1ccd
fix(mbedtls): Make the driver define macros public to allow application access
...
- Also, use the PSA HMAC opaque key interface for HMAC-PBKDF2
2026-01-31 13:30:55 +05:30
harshal.patil
ae459b5204
feat(mbedtls): Introduce ESP-HMAC PSA opaque driver
2026-01-31 00:45:11 +05:30
harshal.patil
53072bfa9d
fix(mbedtls): Enable h/w accel for CMAC and HMAC operations
...
- Refactor ESP-MAC drivers
2026-01-31 00:45:11 +05:30
morris
35bdd8c651
feat(dma): graduate the dma driver from esp_hw_support to esp_driver_dma
2026-01-22 14:14:14 +08:00
Aditya Patwardhan
eb4a871eca
refactor(esp_hal_security): Updated esp_hal_security build and includes
2026-01-21 10:02:44 +05:30
harshal.patil
acb71bc858
feat(esp_tee): Support deterministic ECDSA signatures for ESP-TEE based keys
2026-01-19 09:14:37 +05:30
Mahavir Jain
2948a46371
Merge branch 'refactor/tee_sec_stg_remove_r192' into 'master'
...
refactor(esp_tee): Remove support for ECDSA `secp192r1` keys in TEE secure storage
See merge request espressif/esp-idf!45118
2026-01-18 18:24:04 +05:30
Laukik Hase
2d1b8de05e
feat(esp_tee): Remove unused components from the PSA Crypto library
2026-01-16 17:53:16 +05:30
Laukik Hase
85681d7586
refactor(esp_tee): Remove support for ECDSA secp192r1 keys in TEE secure storage
2026-01-16 17:53:16 +05:30
Laukik Hase
89f555d698
feat(esp_tee): Migrate TEE attestation to the PSA interface
2026-01-16 12:28:57 +05:30
Mahavir Jain
5b4d3c1cc5
Merge branch 'contrib/github_pr_18121' into 'master'
...
Set CMake CACHE variables for mbedtls correctly (GitHub PR)
Closes IDFGH-17095
See merge request espressif/esp-idf!45090
2026-01-14 15:42:26 +05:30
Ferdinand Bachmann
56c3be2604
fix(cmake): Set CACHE variables correctly
...
The syntax for setting cache variables is actually
set(<variable> <value> CACHE <type> <docstring>) and not
set(<variable> CACHE <type> <value>).
The previous code silently set the variables to the empty string.
2026-01-13 15:52:35 +01:00
morris
512b499e1b
refactor: remove gdma_trigger_peripheral_t
2026-01-12 13:47:54 +08:00
Ashish Sharma
3d5775e22b
feat: adds PSA MD5 driver support
2026-01-07 10:41:33 +08:00
Ashish Sharma
5f8570ef00
fix: fixes failing tee_basic example build
2026-01-06 16:15:54 +08:00
Laukik Hase
406ca9aa92
ci(esp_tee): Enable the tee_cli_app test-app for ESP32-H2
...
- Also set the RX burst size correctly for AES/SHA DMA operations
with ESP-TEE
- Fix the compile-time minimum chip revision check for patching
the `ets_delay_us` API
2025-12-30 16:03:43 +05:30
Ashish Sharma
65a21d4511
feat: migrates mbedtls/esp_tee to PSA APIs
2025-12-30 09:31:49 +05:30
Ashish Sharma
e7e31d5d39
feat: migrates esp_tee to PSA APIs
2025-12-30 09:31:49 +05:30
Laukik Hase
90d6394911
feat(esp_tee): Support ECDSA secp384r1 keys in TEE secure storage
2025-12-04 11:16:29 +05:30
Laukik Hase
150418fb5d
feat(esp_tee): Enable GDMA burst mode for AES/SHA operations
...
Co-authored-by: Harshal Patil <harshal.patil@espressif.com >
2025-12-01 12:31:17 +05:30
morris
bc064a353a
refactor(hal_dma): move bitscrambler from hal component
...
because bitscrambler can't live without DMA, it's highly binded with the
GDMA peripheral.
2025-11-21 16:10:16 +08:00
Laukik Hase
f533502324
feat(esp_tee): Add support for TEE secure storage encryption for ESP32-C61
2025-11-07 14:54:16 +05:30
Laukik Hase
b9a503e9ec
feat(esp_tee): Support for ESP32-C61 - the rest of the components
2025-11-07 14:54:16 +05:30
harshal.patil
8992f08bef
feat(mbedtls/aes): Add config to support AES block and DMA modes during runtime
...
- Dynamically switch the AES operation modes based on the buffer operating length
- Shorter AES and SHA operations can now run faster and concurrently as well
Closes https://github.com/espressif/esp-idf/issues/15914
2025-09-20 10:55:07 +05:30
Laukik Hase
c152663408
feat(esp_tee): Added support for PBKDF2-based (HMAC) ECDSA signing
2025-09-19 12:06:02 +05:30
Laukik Hase
340de9823a
feat(esp_tee): Support for ESP32-C5 - the rest of the components
2025-08-13 14:08:59 +05:30
Laukik Hase
c9f7bcd452
feat(esp_tee): Support the nvs_flash for the ESP-TEE build
2025-05-04 18:03:28 +05:30
Laukik Hase
4a4d63d36e
feat(esp_tee): Protect the ECC peripheral from REE access
2025-04-16 19:19:04 +05:30
Laukik Hase
13aff0b216
fix(security): Fixed coverity warnings related to the esp_tee component
...
- Also, disable the SECP192R1 curve (Mbed TLS config) when TEE Secure Storage
does not require it
2025-04-14 10:12:51 +05:30
Laukik Hase
bd314c2460
refactor(esp_tee): Update the SHA clock configuration service call
2025-04-04 10:31:28 +05:30
Laukik Hase
1e8933d296
feat(esp_tee): Add support for SECP192R1 curve in TEE secure storage
2025-04-03 15:35:14 +05:30
Laukik Hase
6b1f4fe46c
fix(esp_tee): Utilize the SHA H/W for hashing operations in the TEE
2025-03-22 10:02:24 +05:30
Laukik Hase
98e16412a7
refactor(esp_tee): Use the AES-GCM port layer for operations in the TEE
2025-03-19 14:30:52 +05:30
Laukik Hase
6e5513b8ad
refactor(esp_tee): Component dependency cleanup for the TEE build
2025-03-19 14:30:52 +05:30
harshal.patil
7d8211bf87
feat(mbedtls): Support both SHA block and DMA modes during runtime
...
Dynamically switch the SHA operation modes based on the buffer operating length
2025-02-04 16:49:30 +05:30
Laukik Hase
05e31e5148
feat(esp_tee): Support for ESP-TEE - mbedtls component
2024-12-02 12:20:02 +05:30