Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity
42,730 Commits 25 Branches 192 Tags
97ffb2db249fdc4e3067cbfcc0952a45ebe7367e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Aditya Patwardhan 37c7960e32 change(secure_boot): mark ECDSA based Secure Boot V2 as insecure on affected SoCs 
ECDSA based Secure Boot V2 is not functional for certain input vectors on
ESP32-C5/C61/H2/P4 and on the preview targets ESP32-H4/H21. RSA based Secure
Boot V2 is the recommended scheme where the SoC supports it. This issue will be
fixed in a future hardware ECO revision; more details will be shared through the
hardware errata document.

A new hidden Kconfig option SECURE_BOOT_V2_ECDSA_INSECURE marks the affected
mass-production SoCs (ESP32-C5/C61/H2/P4). On these SoCs, when hardware Secure
Boot V2 is enabled, the ECDSA (V2) signing scheme is no longer offered by
default; it must be turned on explicitly via SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
under "Allow potentially insecure options" (CONFIG_SECURE_BOOT_INSECURE). App
signing without hardware Secure Boot is not affected. Note that ESP32-C61 has no
RSA based Secure Boot V2, so it has no Secure Boot scheme enabled by default.

The preview targets ESP32-H4 and ESP32-H21 mark ECDSA Secure Boot V2 as not
supported in their SoC capabilities instead of using the option above. As
ESP32-H4 has no other Secure Boot V2 scheme, Secure Boot is disabled entirely on
it; ESP32-H21 retains RSA based Secure Boot V2.

The security documentation keeps the ECDSA Secure Boot V2 content visible and
adds a warning describing the limitation (including that ECDSA Secure Boot V2 on
ESP32-C61 is not recommended for production). CI apps that exercise ECDSA Secure
Boot V2 on the affected SoCs set CONFIG_SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
accordingly.
 2026-06-19 15:24:59 +05:30
Aditya Patwardhan db1d27c5f5 fix(esp-tls): clarify skip_common_name and warn when SNI is disabled 
The skip_common_name flag was named for the legacy CN field but actually
suppresses the entire mbedtls_ssl_set_hostname() call -- disabling
hostname matching against CN/SAN AND Server Name Indication. Update the
doxygen to describe the real effect, and emit a per-call WARN inside the
SNI-disable branch so debug-only use does not slip into production
unnoticed.
 2026-06-01 10:45:13 +05:30
Aditya Patwardhan 232685bae9 fix(esp-tls): close CA-verification bypass during session resumption 
The session-resumption else-if in set_client_config() short-circuited
the CA verification chain when only client_session was supplied. Remove
the branch so session-only configs fall through to the normal error /
skip-verify path; resumption no longer silently disables CA validation.
 2026-06-01 10:45:13 +05:30
Aditya Patwardhan dfbe0cb5f1 fix(protocomm): pass current session id when closing existing session 
sec1_new_session()/sec2_new_session() were calling sec*_close_session()
with the *new* session_id parameter instead of the existing
cur_session->id. The close handler validates `cur_session->id ==
session_id` before performing teardown, so the call always failed with
ESP_ERR_INVALID_STATE.

Effect: when a peer started a new provisioning session while another was
already active, the previous session's PSA keys, AES context, SRP handle
and username buffer were leaked instead of being destroyed. The cleared
session struct was overwritten by the new session, leaking the previous
key handles inside PSA Crypto and (for security2) leaking heap memory
for the username and SRP context.

Fix: pass cur_session->id so the close path actually executes the
teardown (psa_destroy_key/psa_cipher_abort/esp_srp_free/free) before the
new session takes over.
 2026-05-20 12:38:30 +05:30
Aditya Patwardhan 537fa4aa7d Merge branch 'fix_otatool_serial_handoff_v5.3' into 'release/v5.3' 
fix(otatool): fix flaky serial port handoff in otatool CI test (backport v5.3)

See merge request espressif/esp-idf!47716
 2026-05-10 14:51:04 +05:30
Aditya Patwardhan b7a671622c Merge branch 'fix/x509_bundle_replace_unreliable_url_v5.3' into 'release/v5.3' 
fix(examples): replace unreliable external URL in https_x509_bundle example (backport v5.3)

See merge request espressif/esp-idf!47721
 2026-05-10 14:50:36 +05:30
Aditya Patwardhan 15eb433df9 Merge branch 'fix/fix_bootloader_skip_validate_in_deep_sleep_v5.3' into 'release/v5.3' 
fix(bootloader): fix signature verification skip in deep sleep scenarios (v5.3)

See merge request espressif/esp-idf!43698
 2025-12-08 15:33:45 +05:30
Aditya Patwardhan df76e82ee7 Merge branch 'bugfix/protocomm_sec1_validation_v5.3' into 'release/v5.3' 
fix(protocomm): add validation for Security1 client verifier data (v5.3)

See merge request espressif/esp-idf!43781
 2025-12-08 15:32:03 +05:30
Aditya Patwardhan 73b1158ff9 fix(esp_hw_support): Fixed entropy mixing of RTC timer with RNG 
Previously the RTC timer entropy was being mixed with the RNG timer
    in a wrong way. Which led to the overwriting of the LSB with rtc
    timer value.
    This change fixes that behaviour
 2025-09-11 12:06:05 +05:30
Aditya Patwardhan 01b70763d7 Merge branch 'bugfix/brownout_log_v5.3' into 'release/v5.3' 
fix: change brownout log from INFO to ERROR (v5.3)

See merge request espressif/esp-idf!40961
 2025-08-20 13:39:26 +05:30
Aditya Patwardhan d4e81db5f9 Merge branch 'update/version_5_3_4' into 'release/v5.3' 
Update version to 5.3.4

See merge request espressif/esp-idf!41210
 2025-08-18 18:57:57 +05:30
Aditya Patwardhan 1b459d9c49 change(version): Update version to 5.3.4 2025-08-14 18:33:18 +05:30
Aditya Patwardhan 5276f0b443 Merge branch 'feature/support_ds_peripheral_rsa_decryption_v5.3' into 'release/v5.3' 
feat(mbedtls): Add support for RSA decryption with DS peripheral (v5.3)

See merge request espressif/esp-idf!40451
 2025-08-14 18:31:37 +05:30
Aditya Patwardhan 0e2511d3b4 Merge branch 'bugfix/fix_es7210_example_dependency_breaking_change_v5.3' into 'release/v5.3' 
fix(i2s_es7210): fixed breaking change of dependency migration (v5.3)

See merge request espressif/esp-idf!41044
 2025-08-13 19:14:51 +05:30
Aditya Patwardhan cddc6685f1 Merge branch 'feature/enable_support_for_deterministic_mode_and_ecdsa_192_v5.3' into 'release/v5.3' 
Feature/enable support for deterministic mode and ecdsa 192 v5.3

See merge request espressif/esp-idf!40102
 2025-06-25 14:37:58 +05:30
Aditya Patwardhan 96567cb17b Merge branch 'bugfix/http_client_test_failure_v5.3' into 'release/v5.3' 
fix: update root certificate for postman-echo endpoint (v5.3)

See merge request espressif/esp-idf!39848
 2025-06-18 14:16:04 +05:30
Aditya Patwardhan c50e49dd0f Merge branch 'bugfix/esp32_c6_rev0_ecdsa_build_v5.3' into 'release/v5.3' 
fix: Secure boot (ECDSA) build failure for C6 rev0 target (v5.3)

See merge request espressif/esp-idf!38835
 2025-05-02 10:38:03 +08:00
Aditya Patwardhan 2390e81fb7 fix(hal): Fixed ecc_ll for esp32c5 beta3 2025-02-26 17:04:28 +05:30
Aditya Patwardhan 78874d7f7c feat(docs): Update minimizing binary size 
The ESP32-H2 software countermeasure may not be necessary
        for ESP32-H2 v1.2 and above, this commit updates
        the relevant documentation
 2025-02-26 17:04:28 +05:30
Aditya Patwardhan 08e250d081 fix(soc): Fixed ECDSA register compatibility 2025-02-26 17:04:27 +05:30
Aditya Patwardhan 68eb689b35 fix(hal): Make the ECDSA countermeasure dynamically applicable 
This commit makes the ECDSA countermeasure dynamically applicable
    across different revisions of the ESP32H2 SoC.
 2025-02-26 17:04:19 +05:30
Aditya Patwardhan f62b178a65 Merge branch 'refactor/security_docs_re-org_v5.3' into 'release/v5.3' 
refactor(docs): re-organize security docs for better navigation (v5.3)

See merge request espressif/esp-idf!36961
 2025-02-14 16:32:42 +08:00
Aditya Patwardhan 9b6d574c95 Merge branch 'feature/add_compiler_no_merge_constants_v5.3' into 'release/v5.3' 
feat: add compiler config for not merging const sections (v5.3)

See merge request espressif/esp-idf!34086
 2024-10-18 18:37:03 +08:00
Aditya Patwardhan 5197683852 Merge branch 'fix/esp_tls_excessive_parameter_check_v5.3' into 'release/v5.3' 
fix(esp-tls): Reduce parameter check for esp_tls_conn_read (v5.3)

See merge request espressif/esp-idf!34266
 2024-10-18 11:52:28 +08:00
Aditya Patwardhan 20ab1e807d fix(mbedtls): Fix the MBEDTLS_FS_IO dependency on vfs 
By default MBEDTLS_FS_IO option in mbedtls uses the filesystem supported
added by vfs component.
If the vfs support is disabled by user then mbedtls raises a warning
that the filesystem realted operation shall always fail
This commit fixes the behaviour by enabling respective depedency check for the
MBEDTLS_FS_IO option

Closes https://github.com/espressif/esp-idf/issues/14409
 2024-10-18 09:15:23 +05:30
Aditya Patwardhan 76d5665136 fix(esp-tls): Reduce parameter check for esp_tls_conn_read 
Previously the *data parameters of esp_tls_conn_read
    was required to be non-NULL after espressif/esp-idf!28358.
    This prevents users from using a functionality in esp_tls_conn_read
    where calling `esp_tls_conn_read(ctx, NULL, 0);` triggers the
    transfer of contents from tcp layer to mbedtls (ssl) layer.
    After this the user can read the contents from
    esp_tls_get_bytes_avail().
    This commit removes the additional NULL check on the data field
    to keep this functionality enabled.
 2024-10-18 08:15:42 +05:30
Aditya Patwardhan 8c9361afaf Merge branch 'feature/update_mbedtls_version_to_3.6.1_v5.3' into 'release/v5.3' 
feat(mbedtls): updated mbedtls version to 3.6.1 (v5.3)

See merge request espressif/esp-idf!33913
 2024-10-03 15:00:09 +08:00
Aditya Patwardhan 4f29e3ffe7 Merge branch 'fix/add_countermeasure_for_ecdsa_peripheral_issue_v5.3' into 'release/v5.3' 
feat(hal): Add countermeasure for ECDSA generate signature (v5.3)

See merge request espressif/esp-idf!33745
 2024-10-01 11:10:47 +08:00
Aditya Patwardhan 44ce512011 feat(hal): Add countermeasure for ECDSA generate signature 
The ECDSA peripheral before ECO5 of esp32h2 does not perform the ECDSA
    sign operation in constant time. This allows an attacker to read the
    power signature of the ECDSA sign operation and then calculate the
    ECDSA key stored inside the eFuse. The commit adds a countermeasure
    for this attack. In this case the real ECDSA sign operation is
    masked under dummy ECDSA sign operations to hide its real power
    signature
 2024-09-30 12:24:38 +08:00
Aditya Patwardhan da96dfa4be Merge branch 'fix/ecdsa_verify_check_hash_len_v5.3' into 'release/v5.3' 
Wrap some mbedtls' ECDSA verification related APIs (v5.3)

See merge request espressif/esp-idf!33783
 2024-09-26 15:13:12 +08:00
Aditya Patwardhan 536d6225a1 Merge branch 'ci/enable_memprot_tests_for_esp32c61_v5.3' into 'release/v5.3' 
Clear PMA entries before usage (v5.3)

See merge request espressif/esp-idf!33786
 2024-09-26 15:11:58 +08:00
Aditya Patwardhan 1f68652c46 Merge branch 'feature/add_api_to_get_last_status_code_logged_during_ota_v5.3' into 'release/v5.3' 
feat(esp_https_ota): added API to get last status code logged from http resonse (v5.3)

See merge request espressif/esp-idf!33609
 2024-09-23 20:49:13 +08:00
Aditya Patwardhan 87c9fb8d40 Merge branch 'fix/flash_encryption_for_esp32p4_v5.3' into 'release/v5.3' 
fix(security): Fixed flash encryption for esp32p4 (v5.3)

See merge request espressif/esp-idf!33140
 2024-09-02 19:46:31 +08:00
Aditya Patwardhan aa754d40b8 fix(security): Fixed flash encryption for esp32p4 
The flash encryption on esp32p4 was broken due to code related
    to key manager not being executed when key manager support was
    disabled on esp32p4 target.
    This commit fixes that behaviour
    Additionally, the atomic env enablement for
    key_mgr_ll_enable_peripheral_clock was fixed.
 2024-09-02 13:28:30 +05:30
Aditya Patwardhan 466a392a76 Merge branch 'fix/avoid_extra_c2m_msync_in_aes_driver_v5.3' into 'release/v5.3' 
fix(mbedtls/aes): Avoid extra C2M sync of memory (v5.3)

See merge request espressif/esp-idf!32699
 2024-08-16 11:21:45 +08:00
Aditya Patwardhan ab6203d819 Merge branch 'bugfix/existing_mmap_region_offset_v5.3' into 'release/v5.3' 
fix(esp_mm): for existing mmap region, consider new offset for virtual addr (v5.3)

See merge request espressif/esp-idf!32112
 2024-07-25 17:09:33 +08:00
Aditya Patwardhan d0eccc2de2 Merge branch 'fix/update_latest_git_tag_variable' into 'release/v5.3' 
fix(ci): Update LATEST_GIT_TAG variable

See merge request espressif/esp-idf!32340
 2024-07-25 16:54:12 +08:00
Aditya Patwardhan 5a1f4f389c fix(ci): Update LATEST_GIT_TAG variable 2024-07-25 13:53:10 +05:30
Aditya Patwardhan 44f58ecb51 Merge branch 'fix/c6_bootloader_rng_enable_v5.3' into 'release/v5.3' 
fix(bootloader_support): Fixed pattern in RNG enable function to avoid output on IO0 (v5.3)

See merge request espressif/esp-idf!31905
 2024-07-05 16:22:06 +08:00
Aditya Patwardhan 42cf452da3 Merge branch 'fix/disable_ecdsa_key_manager_for_p4_v5.3' into 'release/v5.3' 
fix(soc): Disable key manager and ECDSA peripheral support for esp32p4 (v5.3)

See merge request espressif/esp-idf!31768
 2024-07-05 13:59:20 +08:00
Aditya Patwardhan a56a4b8980 fix(soc): Disable key manager and ECDSA peripheral support for esp32p4 
The support is disabled only for ECO1 and below
 2024-07-03 15:28:41 +08:00
Aditya Patwardhan e819b8c0b9 Merge branch 'fix/incorrect_pma_config_esp32p4_v5.3' into 'release/v5.3' 
fix(esp_hw_support): Fix incorrect PMA configuration for ESP32-P4 (v5.3)

See merge request espressif/esp-idf!31431
 2024-06-13 00:06:26 +08:00
Aditya Patwardhan 23cfe0826b Merge branch 'fix/aes_operation_using_psram_memory_with_psram_enc_v5.3' into 'release/v5.3' 
Enable AXI-DMA AES-ECC mean access when external memory encryption is enabled (v5.3)

See merge request espressif/esp-idf!30822
 2024-06-07 19:17:38 +08:00
Aditya Patwardhan 30ea848335 Merge branch 'feature/update_cjson_version_to_1.7.18_v5.3' into 'release/v5.3' 
feat(cjson): update submodule to v1.7.18 (v5.3)

See merge request espressif/esp-idf!31014
 2024-06-07 19:17:23 +08:00
Aditya Patwardhan 3640c1ecba fix(bootloader_support): Fix flash encryption for esp32p4 2024-05-17 21:19:14 +05:30
Aditya Patwardhan 901f937698 Merge branch 'fix/esp_tls_use_64_bit_variable_for_time_v5.3' into 'release/v5.3' 
fix(esp-tls): Use 64 bit variable for time instead of 32 bit (v5.3)

See merge request espressif/esp-idf!30615
 2024-05-03 21:33:17 +08:00
Aditya Patwardhan 39771b6c81 fix(esp-tls): Use 64 bit variable for time instead of 32 bit 
Use appropriate API available on respective platform for obtaining
    time
    Closes https://github.com/espressif/esp-idf/issues/13593
 2024-05-03 09:03:05 +05:30
Aditya Patwardhan d444ff58ec Merge branch 'contrib/github_pr_13462' into 'master' 
fix: Allocate HTTP header space for async httpd_req_t objects (GitHub PR)

Closes IDFGH-12445

See merge request espressif/esp-idf!29868
 2024-04-22 14:17:21 +08:00
Aditya Patwardhan 0c64e48206 Merge branch 'fix/fix_host_based_security_workflow_doc' into 'master' 
fix(docs): Fix the host based security workflow document

See merge request espressif/esp-idf!29409
 2024-04-19 14:38:36 +08:00
Aditya Patwardhan 530fdacd88 fix(docs): Fix DIS_ICACHE related information in host security workflow 2024-04-19 11:29:21 +05:30
Aditya Patwardhan 1366949c8a feat(docs): Add workflow for externally enabling NVS Encryption 
Fix documentation for host based workflows for flash encryption and
    secure boot v2
 2024-04-19 11:29:21 +05:30
Aditya Patwardhan 0dcd692d59 Merge branch 'fix/fix_esp32p4_flash_encryption' into 'master' 
fix(bootloader_support): Fix default key usage for flash encryption

See merge request espressif/esp-idf!29968
 2024-04-02 19:57:38 +08:00
Aditya Patwardhan 727d99e2a7 Merge branch 'docs/update_esp32p4_security_docs' into 'master' 
docs(security): Update security-related docs for ESP32-P4

See merge request espressif/esp-idf!29970
 2024-04-02 19:50:44 +08:00
Aditya Patwardhan 51a91259d7 fix(bootloader_support): Fix default key usage for flash encryption 2024-04-02 12:27:53 +05:30
Aditya Patwardhan fb28b42c94 Merge branch 'feature/support_ecdsa_key_using_key_manager' into 'master' 
Feature/support ecdsa key using key manager

Closes IDF-7992

See merge request espressif/esp-idf!28908
 2024-04-01 22:10:34 +08:00
Aditya Patwardhan 051048d261 Merge branch 'feature/p4_rng' into 'master' 
feat(esp_hw_support): brought up RNG on ESP32-P4

Closes IDF-6522

See merge request espressif/esp-idf!29614
 2024-04-01 20:24:36 +08:00
Aditya Patwardhan d0a23799e8 feat(mbedtls): Added support for using ECDSA key through key manager 2024-04-01 14:37:12 +05:30
Aditya Patwardhan f231b262b9 Merge branch 'fix/key_manager_hw_support' into 'master' 
Fix/key manager hw support

See merge request espressif/esp-idf!29508
 2024-04-01 14:34:42 +08:00
Aditya Patwardhan 7acc4d4326 fix(esp_hw_support): Fix key manager hw support 
1) Added NULL checks for public APIs
2) Added debug prints at necessary places
3) Updated the check for already deployed HUK
 2024-03-29 18:53:13 +05:30
Aditya Patwardhan 43d934ffb2 Merge branch 'feature/ota_buffer_cap_config' into 'master' 
feat(esp_https_ota): Add config to configure memory capability for OTA buffer

Closes IDF-8836

See merge request espressif/esp-idf!27927
 2024-03-29 12:51:25 +08:00
Aditya Patwardhan 2ad611ad73 fix(esp_hw_support): Fix key mgr hw support 
1) Fix re-deployment scenario for key manager

2) Fix magic for key manager APIs

3) Fix key manager eFuse check

4) Fix key manager test case
 2024-03-29 09:34:46 +05:30
Aditya Patwardhan 34f0a0d6e5 Merge branch 'fix/fix_bootloader_support_public_api_not_defined' into 'master' 
fix(bootloader_support): Fix public APIs not being defined

See merge request espressif/esp-idf!29552
 2024-03-28 18:23:49 +08:00
Aditya Patwardhan 9be1c9f03e fix(bootloader_support): Fix API not defined for application 2024-03-28 15:05:10 +05:30
Aditya Patwardhan 4d764caba1 Merge branch 'feature/ssl_ds_example_p4_support' into 'master' 
feat(examples): add support for ESP32-P4 in ssl_ds example

Closes IDF-7977

See merge request espressif/esp-idf!29858
 2024-03-28 13:54:03 +08:00
Aditya Patwardhan 3312e50006 Merge branch 'fix/aes_gcm_coverity_reports' into 'master' 
fix(mbedtls/aes-gcm): Fix null pointer derefernce coverity reports

See merge request espressif/esp-idf!29568
 2024-03-13 14:14:08 +08:00
Aditya Patwardhan acb733845f Merge branch 'bugfix/update_disabling_hmac_jtag_method' into 'master' 
fix(esp_hw_support): update hmac toggle method due to discrepency in ROM code

See merge request espressif/esp-idf!29131
 2024-03-04 17:55:59 +08:00
Aditya Patwardhan 4636ef946b fix(esp_hw_support): Update key manager locking mechanism 2024-02-29 12:00:30 +08:00
Aditya Patwardhan 3ffb811d18 fix(hal): Fix Key Manager clock changes 2024-02-29 12:00:30 +08:00
Aditya Patwardhan d8cc9d39a2 Merge branch 'fix/esp_tls_fix_arg_check' into 'master' 
fix(esp_tls): Fixed input argument check for public APIs

Closes IDF-8542

See merge request espressif/esp-idf!28358
 2024-01-29 18:21:42 +08:00
Aditya Patwardhan 4d8436b90c fix(esp_tls): Fixed input argument checks for public APIs 2024-01-29 01:24:41 +08:00
Aditya Patwardhan e2d5b323ca fix(esp_tls): Fixed client key parsing for ECC key 
Client key parsing for ECC keys was failing as the
    RNG supplied to the key parsing API was uninitialized.
    This commit fixes that behaviour
 2024-01-23 13:40:57 +08:00
Aditya Patwardhan 4dc2ace0b7 fix(esp_hw_support): Update key manager support 
1) Added new Key Manager APIs
    2) Added crypto locking layer for Key Manager
    3) Remove support for deploying known key
    4) Format key manager support
    5) Fix build header error
    6) Updated the key_mgr_types.h file
    7) Added key manager tests
 2024-01-23 10:24:39 +05:30
Aditya Patwardhan 5a1726c18c feat(hal): Update HAL layer for Key manager 
1)Added new clk related changes
 2024-01-23 10:24:37 +05:30
Aditya Patwardhan 3eabb62850 feat(esp_hw_support): Add support for Key Manager 2024-01-23 10:24:35 +05:30
Aditya Patwardhan f468742d25 Merge branch 'fix/typo_in_key_mgr_hal_layer' into 'master' 
fix(hal): Fix typo in hal layer for Key Manger

See merge request espressif/esp-idf!27832
 2024-01-09 12:59:22 +08:00
Aditya Patwardhan 1220c36f96 Merge branch 'fix/build_failure_when_hardware_gcm_is_disabled' into 'master' 
fix(mbedtls/gcm): Fix build failure when config `MBEDTLS_HARDWARE_GCM` is disabled

See merge request espressif/esp-idf!28149
 2024-01-08 13:35:04 +08:00
Aditya Patwardhan c0ea892aa5 fix(hal): Fix typo in hal layer for Key Manger 
This also fixes type in attribute added in esp_attr
 2024-01-08 10:32:41 +05:30
Aditya Patwardhan 21e1a48a62 Merge branch 'bugfix/esp_srp_doc' into 'master' 
fix(esp_srp): Use `@file` for file documentation and resolved few doc build warnings

Closes IDF-8737

See merge request espressif/esp-idf!27411
 2023-12-18 19:31:05 +08:00
Aditya Patwardhan 62a0b52a91 Merge branch 'feat/add_ble_support_in_local_ctrl_example' into 'master' 
feat(examples): Add BLE support in the esp_local_ctrl example

Closes IDFGH-1491

See merge request espressif/esp-idf!27432
 2023-12-15 16:32:37 +08:00
Aditya Patwardhan 7c738c0658 Merge branch 'fix/esp_https_server_breaking_change' into 'master' 
fix(esp_https_server): Fix a breaking change

See merge request espressif/esp-idf!27146
 2023-12-11 11:46:29 +08:00
Aditya Patwardhan 56879510a5 fix(esp_https_server): Fix a breaking change 
HTTPD_SSL_CONFIG_DEFAULT used to be a MACRO and hence used to return
    a const pointer. With a recent change it started not returning a
    const variable. This change reverts the function to its MACRO form.
    Updated the https_server example to use static declration
 2023-12-11 08:05:10 +05:30
Aditya Patwardhan a84234c23f feat(security): Enable Flash encryption for ESP32P4 2023-12-05 13:10:55 +05:30
Aditya Patwardhan e09d50d244 feat(soc): Updated soc cap for flash encryption 
1) In the ESP32-P4 SoC, we have an eFuse to disable the MSPI access
    when in download mode. This commit adds relevant soc cap for esp32p4
    chip.
    2) Added FE related soc caps
    3) Removed unwanted cap from soc_caps
    4) esp_hw_support: Enable flash encryption related ll APIs for esp32p4
 2023-12-05 11:03:48 +05:30
Aditya Patwardhan 77fbe13513 Merge branch 'bugfix/flash_encryption_build_failed' into 'master' 
fix: fixed flash_encryption example build failure with certain config

Closes IDFGH-11492

See merge request espressif/esp-idf!27321
 2023-11-29 10:10:40 +08:00
Aditya Patwardhan 9cf90d8a7a Merge branch 'bugfix/fix_http_client_async_mode' into 'master' 
fix(esp_http_client): Fix esp_http_client async mode

Closes IDFGH-11191

See merge request espressif/esp-idf!26333
 2023-11-20 14:05:03 +08:00
Aditya Patwardhan ae05f3f140 fix(mbedtls): Removed redundant menuconfig entry 2023-11-15 04:59:52 +00:00
Aditya Patwardhan 7c1d9a5813 fix(soc): esp32s3/Fix the DROM_DROM_HIGH limit 
Previously the DROM_HIGH_ADDR for esp32s3 was 0x3D000000, which
    convers only 16 MB of address range. But esp32s3 supports 32 MB
    external memory. So this address should be 0x3E000000
 2023-11-09 09:58:17 +05:30
Aditya Patwardhan a0d73b5155 fix(esp_https_server): Convert HTTPD_SSL_CONFIG_DEFAULT MACRO to function 
Previously with HTTPD_SSL_CONFIG_DEFAULT being a MACRO, the
    configuration options could not be applied to it. This was casuing
    error in multiple scenarios. For e.g., here user_cert_cb is a part
    of httpd_ssl_config_t which this macro defines. But the type of
    user_cert_cb (esp_tls_server_callback_t) is only available when it is enabled
    in esp-tls. The MACRO however cannot be modified to set the defaults
    based on configuration option. This fix solves the issue without
    breaking the compatibility
 2023-10-26 09:30:13 +00:00
Aditya Patwardhan d4544a0d5c fix(esp_https_server): Remove dependency on CONFIG_ESP_TLS_SERVER 
Closes https://github.com/espressif/esp-idf/issues/12023
 2023-10-26 09:30:13 +00:00
Aditya Patwardhan 5ce93aa257 fix(esp_tls): Refactor esp-tls to remove ESP_TLS_SERVER config option 2023-10-26 09:30:13 +00:00
Aditya Patwardhan 7b8a2e8119 Merge branch 'fix/https_request_example_build_with_esp_wolfssl' into 'master' 
fix(esp-tls): Fix the https_request example build for esp-wolfssl

See merge request espressif/esp-idf!26576
 2023-10-20 22:31:14 +08:00
Aditya Patwardhan 7e6f4d4e87 fix(esp-tls): Fix the https_request example build for esp-wolfssl 2023-10-20 13:43:18 +05:30
Aditya Patwardhan 58bf5ab6fb feat(esp_rom): Added ROM headers related to Key Manager 2023-10-16 09:26:45 +05:30
Aditya Patwardhan 8edef17f1a feat(esp_common): Added PACKED_ATTR in esp_attr.h 2023-10-16 09:26:45 +05:30
Aditya Patwardhan ade65add54 feat(hal): Added HAL and LL layer for Key Manager 2023-10-16 09:26:37 +05:30
Aditya Patwardhan 6b4d2140ee feat(hal): Added HAL and LL layer for HUK 2023-10-16 09:26:14 +05:30
Aditya Patwardhan fa1da64dec Merge branch 'feature/mbedtls_3_5_0_update' into 'master' 
feat(mbedtls): update to 3.5.0 release

See merge request espressif/esp-idf!26331
 2023-10-13 17:11:05 +08:00
Aditya Patwardhan 1d5532badc Merge branch 'bugfix/security_check_order_in_startup' into 'master' 
fix(startup): flip the security configuration check order

See merge request espressif/esp-idf!26280
 2023-10-05 13:56:47 +08:00
Aditya Patwardhan 2b08aac741 Merge branch 'bugfix/usb/host/urb_check_revert' into 'master' 
[USB Host] Fix transfer determination during argument checking for regular EP transfer

See merge request espressif/esp-idf!25963
 2023-09-14 23:50:43 +08:00
Aditya Patwardhan a57c8dc938 Merge branch 'contrib/github_pr_12177' into 'master' 
mbedtls: define MBEDTLS_SSL_CID_TLS1_3_PAD_GRANULARITY for CID padding (GitHub PR)

See merge request espressif/esp-idf!25826
 2023-09-09 12:27:56 +08:00