Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity
50,671 Commits 25 Branches 192 Tags
ab2a904330c29f21b5274c8cb5bfdc2d40a045c2
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mahavir Jain 36f3329a23 Merge branch 'feature/recovery_bootloader_support_v6.0' into 'release/v6.0' 
feat(bootloader): Support recovery bootloader for ESP32P4 (v6.0)

See merge request espressif/esp-idf!48468
 2026-05-15 09:52:49 +05:30
Mahavir Jain 3059d66925 Merge branch 'feature/add_event_handler_set_function_v6.0' into 'release/v6.0' 
feat(esp_http_client): Add API to support set event handler (v6.0)

See merge request espressif/esp-idf!48424
 2026-05-12 14:59:43 +05:30
Mahavir Jain 3f3568e211 Merge branch 'feat/key_manager_ecdh1_key_deployment_mode_v6.0' into 'release/v6.0' 
Key Manager ECDH1 key deployment mode (v6.0)

See merge request espressif/esp-idf!48344
 2026-05-11 17:44:45 +05:30
Mahavir Jain 6b7f4e1534 Merge branch 'bugfix/fix_protocomm_nimble_gatt_service_not_changed_v6.0' into 'release/v6.0' 
fix(protocomm): Add GATT service initialization that when gatt service changed, the peer can refresh gatt service (v6.0)

See merge request espressif/esp-idf!48297
 2026-05-11 12:16:43 +05:30
Mahavir Jain 38db686872 Merge branch 'feat/update_mbedtls_4_1_1_v6.0' into 'release/v6.0' 
feat(mbedtls): update to version 4.1.0 (v6.0)

See merge request espressif/esp-idf!48175
 2026-05-11 09:50:25 +05:30
Mahavir Jain 3e6273c9c4 Merge branch 'fix/fix_ws_server_signed_recv_checks_v6.0' into 'release/v6.0' 
fix(esp_http_server): Fix incorrect handling of websocket recv failures in web socket server (v6.0)

See merge request espressif/esp-idf!48330
 2026-05-11 09:27:20 +05:30
Mahavir Jain 5626aebf82 Merge branch 'feature/esp32c5_efuse_calib_update_v6.0' into 'release/v6.0' 
feat(efuse): Adds efuse calibration field for esp32c5 (v6.0)

See merge request espressif/esp-idf!48249
 2026-05-09 17:11:59 +05:30
Mahavir Jain 2eff46ca25 Merge branch 'fix/preserve_flash_layout_compatibiliy_of_hw_ecdsa_keys_psa_v6.0' into 'release/v6.0' 
Persistent Storage Format for PSA Opaque ESP-Keys (v6.0)

See merge request espressif/esp-idf!47424
 2026-05-07 10:17:43 +05:30
Mahavir Jain 954a2b3cbb Merge branch 'fix/supported_key_mgr_key_types_check_v6.0' into 'release/v6.0' 
fix(esp_security): guard key manager APIs against unsupported chip revs (v6.0)

See merge request espressif/esp-idf!48008
 2026-05-07 10:13:25 +05:30
Mahavir Jain 43ccdfe694 Merge branch 'fix/mbedtls-esp-mem-move-to-idf-mbedtls_v6.0' into 'release/v6.0' 
fix(mbedtls): Fix `test_rebuild_source_files` failure on Windows caused by unstable CMake Ninja paths (v6.0)

See merge request espressif/esp-idf!48044
 2026-05-05 15:02:41 +05:30
Mahavir Jain 31538a67d5 Merge branch 'fix/remove_mbedtls_tls_disabled_config_v6.0' into 'release/v6.0' 
fix(mbedtls): remove not required MBEDTLS_TLS_DISABLED config (v6.0)

See merge request espressif/esp-idf!47973
 2026-05-04 11:33:17 +05:30
Mahavir Jain 2315fe1fdb Merge branch 'fix/fix_esp_http_client_not_reusing_connection_v6.0' into 'release/v6.0' 
fix(esp_http_client): fix broken connection reuse (v6.0)

See merge request espressif/esp-idf!47826
 2026-05-04 11:29:23 +05:30
Mahavir Jain bb72988732 Merge branch 'fix/p4_rev3_irom_drom_pmp_fixes_v6.0' into 'release/v6.0' 
Reset stale PMP gap entries on P4 v3 before app memprot setup (v6.0)

See merge request espressif/esp-idf!48124
 2026-05-03 21:28:50 +05:30
Mahavir Jain 40dd878718 Merge branch 'fix/esp-tee-validation-clobber-and-deref-before-check_v6.0' into 'release/v6.0' 
fix(esp_tee): prevent validation clobbering and deref-before-check in secure services (v6.0)

See merge request espressif/esp-idf!48121
 2026-04-30 14:24:49 +05:30
Mahavir Jain 8e68af5c03 Merge branch 'fix/enforce_tls_version_https_request_example_v6.0' into 'release/v6.0' 
fix(https_request): enforce tls version for supported ciphersuite example (v6.0)

See merge request espressif/esp-idf!48017
 2026-04-29 14:45:20 +05:30
Mahavir Jain fbd9c33e83 Merge branch 'ci/github-dangerjs-fix-permissions_v6.0' into 'release/v6.0' 
ci(github): fix permissions for GitHub-dangerjs (to content read) (v6.0)

See merge request espressif/esp-idf!47920
 2026-04-27 20:51:29 +05:30
Mahavir Jain 38e814ba35 Merge branch 'feat/add_server_handshake_failure_user_cb_v6.0' into 'release/v6.0' 
feat(esp_https_server): adds support for user callback on handshake failure (v6.0)

See merge request espressif/esp-idf!47492
 2026-04-27 19:26:51 +05:30
Mahavir Jain bd42cb2bde Merge branch 'fix/fix_esp_local_ctrl_potential_double_free_v6.0' into 'release/v6.0' 
fix(esp_local_ctrl): fixes a potential double free (v6.0)

See merge request espressif/esp-idf!47488
 2026-04-27 19:26:05 +05:30
Mahavir Jain ae33665e58 Merge branch 'feat/check_crlf_http_server_response_headers_v6.0' into 'release/v6.0' 
feat(esp_http_server): adds check for crlf in response creation (v6.0)

See merge request espressif/esp-idf!47499
 2026-04-27 19:25:20 +05:30
Mahavir Jain a7be1ba98c Merge branch 'fix/fix_esp_srp_sec2_auth_bypass_a_mod_n_v6.0' into 'release/v6.0' 
fix(esp_srp): reject SRP client public key when A mod N is zero (v6.0)

See merge request espressif/esp-idf!47703
 2026-04-27 19:25:01 +05:30
Mahavir Jain 9024a75850 Merge branch 'fix/protocomm-security2-srp-hd-double-free_v6.0' into 'release/v6.0' 
fix(protocomm): null srp_hd after free in sec2 command0 error paths (v6.0)

See merge request espressif/esp-idf!47967
 2026-04-27 19:24:24 +05:30
Mahavir Jain dc41452462 fix(protocomm): null srp_hd after free in sec2 command0 error paths 
handle_session_command0() freed cur_session->srp_hd on every error path
without clearing the pointer. A subsequent sec2_close_session() call
(e.g. on BLE disconnect, or via sec2_new_session evicting the old
session) checks `if (cur_session->srp_hd)` and frees it again,
double-freeing a dangling pointer.
 2026-04-27 10:09:17 +05:30
Mahavir Jain 853a83cd82 Merge branch 'fix/esp_tee_srv_tbl_loc_v6.0' into 'release/v6.0' 
change(esp_tee): Move the internal memory secure service call table to IRAM (v6.0)

See merge request espressif/esp-idf!47551
 2026-04-20 11:42:31 +05:30
Mahavir Jain 7503c552f5 Merge branch 'fix/fix_protocomm_sec2_input_validations_v6.0' into 'release/v6.0' 
fix(protocomm): fixes potential issues that can lead to crash during device provisioning (v6.0)

See merge request espressif/esp-idf!47305
 2026-04-09 11:51:01 +05:30
Mahavir Jain a7e77cda1d Merge branch 'fix/esp_tee_bbp_v6.0' into 'release/v6.0' 
fix(esp_tee): Add missing input validation checks for TEE service calls (v6.0)

See merge request espressif/esp-idf!47361
 2026-04-09 11:00:28 +05:30
Mahavir Jain 247cafb2cf Merge branch 'feat/reenable_rsa_4096_key_perf_test_v6.0' into 'release/v6.0' 
fix(mbedtls): reenable RSA 4096 bit key performance test (v6.0)

See merge request espressif/esp-idf!47387
 2026-04-09 10:37:41 +05:30
Mahavir Jain 6bf6897d0d Merge branch 'bugfix/external_mem_enc_docs_v6.0' into 'release/v6.0' 
docs: update PSRAM and flash encryption docs with per-page and separate key capabilities (v6.0)

See merge request espressif/esp-idf!46955
 2026-04-02 19:05:36 +05:30
Mahavir Jain 64c744abb7 docs: update PSRAM and flash encryption docs with per-page and separate key capabilities 2026-04-02 12:20:24 +05:30
Mahavir Jain 6efad80468 Merge branch 'fix/ds_ctx_efuse_key_id_type_v6.0' into 'release/v6.0' 
Preserve flash compatibility by reverting the modified `esp_ds_data_ctx_t` size (v6.0)

See merge request espressif/esp-idf!47032
 2026-04-02 11:32:09 +05:30
Mahavir Jain 49231ec638 Merge branch 'bugfix/docs_anti_rollback_v6.0' into 'release/v6.0' 
docs: clarify anti-rollback secure version bits for c2/c5 (v6.0)

See merge request espressif/esp-idf!47123
 2026-04-02 11:29:30 +05:30
Mahavir Jain 830e39ca68 docs: clarify anti-rollback secure version bits for c2/c5 2026-03-30 10:33:55 +05:30
Mahavir Jain a22070bb62 Merge branch 'fix/additional_validation_checks_v6.0' into 'release/v6.0' 
Some additional validation checks and new API for esp_ds_encrypt_params using KM (v6.0)

See merge request espressif/esp-idf!46873
 2026-03-24 11:05:19 +05:30
Mahavir Jain b268c03422 Merge branch 'fix/fix_ws_server_subprotocols_null_dereference_v6.0' into 'release/v6.0' 
fix: fixes websocket server possible null dereference (v6.0)

See merge request espressif/esp-idf!46917
 2026-03-24 11:03:35 +05:30
Mahavir Jain 372d0b2c28 Merge branch 'fix/esp32p4_v3_lp_peri_pmp_entry_v6.0' into 'release/v6.0' 
fix(esp_hw_support): Add PMP entry for the LP peripherals region (v6.0)

See merge request espressif/esp-idf!46386
 2026-03-21 12:23:48 +05:30
Mahavir Jain 2498e4903b Merge branch 'fix/migration_guide_secure_boot_192_curve_deprecation_v6.0' into 'release/v6.0' 
fix(secure_boot): marks 192 bit support curve legacy (v6.0)

See merge request espressif/esp-idf!46702
 2026-03-21 12:15:23 +05:30
Mahavir Jain 9c6ca38ab3 Merge branch 'contrib/github_pr_18310_v6.0' into 'release/v6.0' 
fix(esp_http_server): Dispatch PONG frames to WebSocket handler (GitHub PR) (v6.0)

See merge request espressif/esp-idf!46655
 2026-03-20 19:06:42 +05:30
Mahavir Jain fb2ebf0c6a Merge branch 'bugfix/esp_local_ctrl_arg_check_v6.0' into 'release/v6.0' 
fix(esp_local_ctrl): validate payload_case matches msg_type in command dispatcher (v6.0)

See merge request espressif/esp-idf!45924
 2026-03-04 13:09:56 +05:30
Mahavir Jain f33672ea61 Merge branch 'bugfix/mbedtls_poly1305_build_v6.0' into 'release/v6.0' 
fix(mbedtls): fix MBEDTLS_POLY1305_C build config (v6.0)

See merge request espressif/esp-idf!45941
 2026-03-03 16:58:37 +05:30
Mahavir Jain bdd75fb32e fix(mbedtls): fix MBEDTLS_POLY1305_C build config 
Closes https://github.com/espressif/esp-idf/issues/18243
 2026-02-18 11:19:26 +05:30
Mahavir Jain 439026e5ea docs(protocomm): recommend using security2 scheme for production purpose 2026-02-17 11:46:11 +05:30
Mahavir Jain b87613b55b fix(esp_local_ctrl): validate payload_case matches msg_type in command dispatcher 
The command dispatcher routed handlers based solely on msg_type without
verifying that the protobuf payload_case field matched. A crafted message
with mismatched msg_type and payload_case could cause type confusion,
leading to an out-of-bounds read or NULL pointer dereference.

Add expected_payload_case to the command table and validate it in the
dispatcher before invoking any handler.

Please note that this issue was applicable for authenticated clients
only (with security1/2 scheme) and hence the impact is on lower side.
 2026-02-17 11:46:10 +05:30
Mahavir Jain a208625e7a Merge branch 'fix/mbedtls_enable_threading_pthread_v6.0' into 'release/v6.0' 
fix(mbedtls): enable pthread threading by default (v6.0)

See merge request espressif/esp-idf!45838
 2026-02-13 09:18:00 +05:30
Mahavir Jain 4367f08fc9 Merge branch 'fix/nvs_encr_use_hardware_aes_v6.0' into 'release/v6.0' 
Use h/w accelerated AES-ECB for XTS-AES operations (v6.0)

See merge request espressif/esp-idf!45823
 2026-02-13 07:43:27 +05:30
Mahavir Jain 63be46ed3d Merge branch 'fix/mbedtls_disable_default_configs_v6.0' into 'release/v6.0' 
change(mbedTLS): update mbedTLS default configs (v6.0)

See merge request espressif/esp-idf!45699
 2026-02-12 11:34:33 +05:30
Mahavir Jain 1dc0b26075 Merge branch 'fix/update_config_inclusion_for_hardware_ecdsa_verification_v6.0' into 'release/v6.0' 
fix(mbedtls): Revised ECDSA verify HW config check (v6.0)

See merge request espressif/esp-idf!45807
 2026-02-12 11:31:28 +05:30
Mahavir Jain 6d023865d2 Merge branch 'fix/support_truncated_hmac_v6.0' into 'release/v6.0' 
Allow truncated ESP-PSA HMAC driver operations (v6.0)

See merge request espressif/esp-idf!45755
 2026-02-12 11:31:16 +05:30
Mahavir Jain e114d459af Merge branch 'refactor/remove_esp_wolfssl_from_esp_tls_v6.0' into 'release/v6.0' 
feat(esp-tls): Added support to register custom tls stack (v6.0)

See merge request espressif/esp-idf!45709
 2026-02-12 11:30:28 +05:30
Mahavir Jain ad25b61af6 Merge branch 'fix/externsive_mbedtls_aes_sha_tests_v6.0' into 'release/v6.0' 
Re-introduce the extensive mbedtls AES and SHA tests (v6.0)

See merge request espressif/esp-idf!45591
 2026-02-12 09:49:09 +05:30
Mahavir Jain a0d933e234 Merge branch 'fix/add_check_for_range_request_supported_by_server_during_ota_resumption_v6.0' into 'release/v6.0' 
fix(esp_https_ota): added a check if range request is supported during OTA resumption is enabled (v6.0)

See merge request espressif/esp-idf!45818
 2026-02-12 09:48:26 +05:30
Mahavir Jain 835e37bcca Merge branch 'fix/esp_https_client_test_v6.0' into 'release/v6.0' 
fix(esp_http_client): Fixed the example pytest (v6.0)

See merge request espressif/esp-idf!45446
 2026-02-12 09:47:49 +05:30
Mahavir Jain 815747bbc9 Merge branch 'fix/esp_https_ota_header_handling_for_custom_data_v6.0' into 'release/v6.0' 
Issue with complete headers for custom partition OTA (v6.0)

See merge request espressif/esp-idf!45794
 2026-02-12 09:47:42 +05:30
Mahavir Jain aa73e94c35 Merge branch 'feat/add_opaque_ds_driver_v6.0' into 'release/v6.0' 
feat: adds PSA opaque DS driver support (v6.0)

See merge request espressif/esp-idf!45716
 2026-02-12 09:45:59 +05:30
Mahavir Jain 55f6f0eefa Merge branch 'feat/enable_pseudo_round_support_for_xts_aes_esp32p4_eco5_v6.0' into 'release/v6.0' 
feat: added support for pseudo round xts aes in esp32p4 eco5 (v6.0)

See merge request espressif/esp-idf!45171
 2026-02-12 09:44:22 +05:30
Mahavir Jain 246dc5e913 Merge branch 'fix/tee_sec_stg_aes_gcm_iv_reuse_v6.0' into 'release/v6.0' 
fix(esp_tee): Prevent IV reuse in the TEE secure storage AES-GCM service (v6.0)

See merge request espressif/esp-idf!45681
 2026-02-12 09:43:30 +05:30
Mahavir Jain 062073a73b Merge branch 'feat/opaque_ecdsa_drivers_v6.0' into 'release/v6.0' 
Opaque ECDSA driver (v6.0)

See merge request espressif/esp-idf!45432
 2026-02-02 10:49:12 +05:30
Mahavir Jain 78464dfab7 Merge branch 'refactor/create_esp_hal_security_v6.0' into 'release/v6.0' 
refactor: Created esp_hal_security component (v6.0)

See merge request espressif/esp-idf!45349
 2026-01-31 10:28:48 +05:30
Mahavir Jain ee2da28726 Merge branch 'feat/esp_tee_backports_v6.0' into 'release/v6.0' 
feat(esp_tee): Feature/fixes backports to `release/v6.0`

See merge request espressif/esp-idf!45095
 2026-01-31 10:27:34 +05:30
Mahavir Jain 83f0b4ef83 Merge branch 'fix/fix_tfpsacrypto_writing_to_esp_idf_v6.0' into 'release/v6.0' 
fix: Skip writing to esp-idf directory when tfpsacrypto is built (v6.0)

See merge request espressif/esp-idf!45508
 2026-01-29 15:08:32 +05:30
Mahavir Jain 2ef6d7eb3d Merge branch 'fix/aes-dma-psram-output-cache-operation-change_v6.0' into 'release/v6.0' 
Cache invalidate the output buffer before the AES-DMA operation (v6.0)

See merge request espressif/esp-idf!45169
 2026-01-29 09:47:51 +05:30
Mahavir Jain ec6c8158d5 Merge branch 'contrib/github_pr_18121_v6.0' into 'release/v6.0' 
Set CMake CACHE variables for mbedtls correctly (GitHub PR) (v6.0)

See merge request espressif/esp-idf!45178
 2026-01-29 09:46:19 +05:30
Mahavir Jain e9bbc4b22c Merge branch 'fix/app_update_tests_v6.0' into 'release/v6.0' 
fix(app_update): Fix tests for app_update on ESP32C5 (v6.0)

See merge request espressif/esp-idf!45504
 2026-01-29 09:42:20 +05:30
Mahavir Jain d7d7c06b81 Merge branch 'fix/partial-hardware-aes-gcm-and-software-non-aes-ciphers_v6.0' into 'release/v6.0' 
Fix partial hardware AES-GCM, software-fallback for non-AES ciphers (v6.0)

See merge request espressif/esp-idf!44752
 2026-01-12 09:10:49 +05:30
Mahavir Jain 0a79c99409 Merge branch 'fix/aes-dma-psram-output-cache-coherency_v6.0' into 'release/v6.0' 
Ensure cache coherency when DMA writes to cacheable PSRAM buffers (AES) (v6.0)

See merge request espressif/esp-idf!44919
 2026-01-09 16:13:02 +05:30
Mahavir Jain 7037fe3b5e Merge branch 'fix/incorrect_sha256_auth_digest_v6.0' into 'release/v6.0' 
fix(esp_http_client): fix incorrect digest calculation for SHA256 auth digest (v6.0)

See merge request espressif/esp-idf!44844
 2026-01-09 00:08:43 +05:30
Mahavir Jain 93fd99f20b Merge branch 'bugfix/bug_bounty_ble_issue_v6.0' into 'release/v6.0' 
fix(protocomm): Add security checks for buffer overflow and incorrect length handling (v6.0)

See merge request espressif/esp-idf!44295
 2026-01-06 20:50:21 +05:30
Mahavir Jain 3f3747ec2f Merge branch 'fix/failing_master_pipeline_wifi_internal_client_v6.0' into 'release/v6.0' 
fix: fixes failing pipeline with internal wifi mbedtls client (v6.0)

See merge request espressif/esp-idf!44828
 2026-01-06 20:47:02 +05:30
Mahavir Jain 0ea369b02e Merge branch 'docs/update_trans_for_psa_migration' into 'release/v6.0' 
docs: Update CN translation for PSA migration

See merge request espressif/esp-idf!44532
 2026-01-06 17:26:10 +05:30
Mahavir Jain b9fc1a6b3f Merge branch 'fix/psa_update_fixes' into 'release/v6.0' 
fix(mbedtls): misc updates post PSA crypto migration

See merge request espressif/esp-idf!44429
 2026-01-05 18:15:56 +05:30
Mahavir Jain 1f0ce0524c fix(mbedtls): misc updates post PSA crypto migration 2026-01-05 14:54:33 +05:30
Mahavir Jain 3b65724809 Merge branch 'test/sb_app_api_verify_v6.0' into 'release/v6.0' 
test(ota): Add tests for verifying app build's SBv2 ECDSA signature verify APIs (v6.0)

See merge request espressif/esp-idf!44511
 2025-12-31 10:11:26 +05:30
Mahavir Jain bffd1ac296 Merge branch 'bugfix/esp32_psram_remove_execute_v6.0' into 'release/v6.0' 
fix(system): removed the exe flag from psram memory for esp32 (v6.0)

See merge request espressif/esp-idf!44640
 2025-12-31 10:10:12 +05:30
Mahavir Jain 7da79a653c Merge branch 'feature/mbedtls_psa_migration_v6.0' into 'release/v6.0' 
feat(mbedtls): PSA Migration to release v6.0

See merge request espressif/esp-idf!43323
 2025-12-21 13:52:48 +05:30
Mahavir Jain 7b683c40f4 tests(wpa_supplicant): add hmac/md5 tests covering ROM APIs 2025-12-17 12:05:44 +07:00
Mahavir Jain 86f159ec06 fix(spi_flash): limit CPU clock to 160MHz for encrypted flash writes 2025-12-17 01:21:45 +08:00
Mahavir Jain b7fe4ba242 Merge branch 'fix/secure_boot_verify_app_api_support_ecdsa_p384_v6.0' into 'release/v6.0' 
Application's Secure Boot verify API support ECDSA-P384 (v6.0)

See merge request espressif/esp-idf!44180
 2025-12-15 10:07:13 +05:30
Mahavir Jain 6fb5705832 Merge branch 'fix/recursion_caused_due_to_unaligned_ext_mem_buf_v6.0' into 'release/v6.0' 
AES driver should use internal buffers to perform chunk wise operations when external buffers are unaligned (v6.0)

See merge request espressif/esp-idf!43897
 2025-12-14 18:48:13 +05:30
Mahavir Jain 31d01bc6bd Merge branch 'update/update_certs_bundle_v6.0' into 'release/v6.0' 
Update esp_crt_bundle certificates (v6.0)

See merge request espressif/esp-idf!44123
 2025-12-12 12:19:02 +05:30
Mahavir Jain ee36d0491d Merge branch 'feat/add_mbedtls_testcases_for_ecc_p_384_v6.0' into 'release/v6.0' 
feat(mbedtls): add ECC P-384 mbedtls support and test_cases (v6.0)

See merge request espressif/esp-idf!43979
 2025-12-08 14:21:59 +05:30
Mahavir Jain ca667e18ad Merge branch 'fix/align_ota_written_size_during_ota_resumption_to_last_16_byte_boundry_v6.0' into 'release/v6.0' 
fix(esp_https_ota): align OTA resumption offset to 16-byte boundary (v6.0)

See merge request espressif/esp-idf!44033
 2025-12-08 14:21:40 +05:30
Mahavir Jain ded6d96191 fix(esp_http_client): prevent out-of-bounds read in Digest auth 
Fixed vulnerability where malicious HTTP servers could trigger OOB reads
by sending empty or very short algorithm fields in WWW-Authenticate headers.

Changes:
- Replace unsafe memcmp() with strcasecmp() for algorithm comparison
- Add algorithm NULL validation at function entry point
- Fix duplicate md5-sess check, add missing SHA-256 check
 2025-12-01 18:24:15 +05:30
Mahavir Jain 4989911295 Merge branch 'docs/fix_some_expressions_in_security_guide_v6.0' into 'release/v6.0' 
docs: fix some description in security guide docs (v6.0)

See merge request espressif/esp-idf!43817
 2025-12-01 09:35:44 +05:30
Mahavir Jain e1639e281f Merge branch 'fix/incorrect_esp32p4_key_mgr_xts_aes_len_bit_set_v6.0' into 'release/v6.0' 
Fix incorrect XTS-AES key length register configuration (ESP32-P4) (v6.0)

See merge request espressif/esp-idf!43759
 2025-12-01 09:18:28 +05:30
Mahavir Jain 917bc34383 fix(protocomm): add validation for Security1 client verifier data 
Add checks to validate client_verify_data pointer and length before
processing in handle_session_command1. Prevents NULL pointer dereference
when client omits verifier data in Session_Command1, which could cause
device crash during provisioning (remote DoS attack).

We would like to thank Pavel Kohout from Aisle Research for reporting
this vulnerability along with a mitigation strategy.
 2025-11-27 09:59:40 +05:30
Mahavir Jain a8b69abb4b fix(bootloader): fix signature verification skip in deep sleep scenario 
For CONFIG_BOOTLOADER_SKIP_VALIDATE_IN_DEEP_SLEEP enabled and exit from
deep sleep case the secure boot signature verification must be skipped
to improve the wakeup performance.

Closes https://github.com/espressif/esp-idf/issues/15590
 2025-11-25 10:12:03 +05:30
Mahavir Jain ef148aec02 Merge branch 'feat/tee_c61_examples_and_docs_v6.0' into 'release/v6.0' 
feat(esp_tee): Enable ESP-TEE examples and documentation for ESP32-C61 (v6.0)

See merge request espressif/esp-idf!43462
 2025-11-20 21:57:27 +05:30
Mahavir Jain 888e92c7d6 Merge branch 'feat/esp_tee_c61_v6.0' into 'release/v6.0' 
feat(esp_tee): Support for ESP32-C61 (v6.0)

See merge request espressif/esp-idf!43461
 2025-11-20 10:57:00 +05:30
Mahavir Jain 6682774612 Merge branch 'contrib/github_pr_17641_v6.0' into 'release/v6.0' 
Allow the https server to request client certs only with OPTIONAL (GitHub PR) (v6.0)

See merge request espressif/esp-idf!43454
 2025-11-20 09:50:01 +05:30
Mahavir Jain 0da946d0f4 Merge branch 'contrib/github_pr_17710_v6.0' into 'release/v6.0' 
fix(nvs_sec_provider): replace abort() when nvs_keys is missing with a warrnig log (GitHub PR) (v6.0)

See merge request espressif/esp-idf!43408
 2025-11-18 09:42:38 +05:30
Mahavir Jain 20e32f81b5 Merge branch 'feat/esp_tee_mspi_tuning_v6.0' into 'release/v6.0' 
change(esp_tee): Fix TEE SPI flash API issues on ESP32-C5 (v6.0)

See merge request espressif/esp-idf!42906
 2025-11-17 10:18:42 +05:30
Mahavir Jain 582d3cce08 Merge branch 'feat/extend_pmp_protection_esp32p4_eco5_v6.0' into 'release/v6.0' 
Extend PMP memprot for ESP32-P4 V3 (v6.0)

See merge request espressif/esp-idf!43264
 2025-11-17 10:18:18 +05:30
Mahavir Jain 145de94717 Merge branch 'fix/axi_dma_ext_mem_alignment_c5_v6.0' into 'release/v6.0' 
Align AES and SHA buffers to 16 when SPIRAM encryption is enabled (v6.0)

See merge request espressif/esp-idf!43260
 2025-11-13 13:27:04 +05:30
Mahavir Jain 0f77374746 fix(esp_system): limit CPU clock to 160MHz in ESP32-C5 for flash encryption 
Encrypted flash write operation sometimes result in random corruption in
certain bytes. Root cause points to sudden current surge due to involvement of
encryption block overwhelming LDO supply. More details will be provided
in the ESP32-C5 SoC Errata document.

This fix limits the CPU clock to 160MHz for flash encryption enabled
case. Failing encrypted flash write tests could successfully pass in
this configuration. Going ahead, a dynamic clock adjustment in flash
driver will be considered to mitigate this issue.
 2025-11-13 13:25:57 +05:30
Mahavir Jain 59895d5956 Merge branch 'feature/enable_ecc_const_time_support_for_esp32p4_eco5_v6.0' into 'release/v6.0' 
feat(hal): add support for ECC constant time function in ESP32-P4 ECO5 (v6.0)

See merge request espressif/esp-idf!43015
 2025-11-13 12:33:19 +05:30
Mahavir Jain b32cd28a40 Merge branch 'feat/update_mbedtls_3.6.5_v6.0' into 'release/v6.0' 
feat(mbedtls): update to version 3.6.5 (v6.0)

See merge request espressif/esp-idf!43243
 2025-11-13 09:54:52 +05:30
Mahavir Jain 2206242fc8 fix(lwip): allow task stack from SPIRAM except for ESP32 ECO2 and below 
Closes https://github.com/espressif/esp-idf/issues/17827
 2025-11-13 09:41:45 +05:30
Mahavir Jain 79f6849d0d Merge branch 'fix/incorrect_response_status_code_captive_portal_v6.0' into 'release/v6.0' 
fix(http_server): Fixed response status code for temporary redirect (v6.0)

See merge request espressif/esp-idf!43086
 2025-11-13 09:38:29 +05:30
Mahavir Jain 5ddfb043b9 Merge branch 'fix/add_bootloader_and_partition_table_as_encrypted_flash_targets_v6.0' into 'release/v6.0' 
Add Bootloader, Partition Table and ESP-TEE as dependencies for encrypted-flash (v6.0)

See merge request espressif/esp-idf!43033
 2025-11-13 09:37:57 +05:30
Mahavir Jain a8194f3364 Merge branch 'ci/tee_flash_prot_failures_v6.0' into 'release/v6.0' 
ci(esp_tee): Remove incorrect error checks for TEE flash protection tests (v6.0)

See merge request espressif/esp-idf!43159
 2025-11-13 09:37:25 +05:30
Mahavir Jain dea7c3dcf4 Merge branch 'fix/mmu_psram_anti_fi_target_condition_v6.0' into 'release/v6.0' 
Fix MMU PSRAM anti-fi MMU target check (v6.0)

See merge request espressif/esp-idf!43036
 2025-11-13 09:36:55 +05:30
Mahavir Jain b6c253a3c8 Merge branch 'fix/disallow_enabling_sb_sha384_when_sb_sha256_is_enabled_p4_v6.0' into 'release/v6.0' 
fix(efuse): Disallow enabling SB using SHA-384 when SB using SHA-256 is enabled (ESP32-P4 ECO5) (v6.0)

See merge request espressif/esp-idf!43262
 2025-11-13 09:36:26 +05:30