Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-01 02:30:52 +03:00
Code Issues Packages Projects Releases Wiki Activity
49,217 Commits 25 Branches 192 Tags
d8b677db7eba308c2189db6bdff024a315e48721
Commit Graph
88 Commits
Author SHA1 Message Date
Mahavir Jain 7c94e98d2c Merge branch 'fix/sb_digest_revocation_workflow_v5.5' into 'release/v5.5' 
change(bootloader): honor SECURE_BOOT_ALLOW_UNUSED_DIGEST_SLOTS during first boot (v5.5)

See merge request espressif/esp-idf!49714
 2026-06-17 14:36:48 +05:30
Mahavir Jain 7d0545db69 change(bootloader): honor SECURE_BOOT_ALLOW_UNUSED_DIGEST_SLOTS during first boot 
Previously the bootloader unconditionally revoked unused secure boot key
digest slots while permanently enabling secure boot on the first boot,
ignoring CONFIG_SECURE_BOOT_ALLOW_UNUSED_DIGEST_SLOTS. Now the config is
honored on this path too: when set, the unused digest slots are left
un-revoked. This is safe as long as the debug and download interfaces are
disabled.

Update the Kconfig help and the Secure Boot v2 guide (en and zh_CN)
accordingly.
 2026-06-16 13:35:23 +05:30
Aditya Patwardhan 66156479d2 change(secure_boot): mark ECDSA based Secure Boot V2 as insecure on affected SoCs 
ECDSA based Secure Boot V2 is not functional for certain input vectors on
ESP32-C5/C61/H2/P4 and on the preview targets ESP32-H4/H21. RSA based Secure
Boot V2 is the recommended scheme where the SoC supports it. This issue will be
fixed in a future hardware ECO revision; more details will be shared through the
hardware errata document.

A new hidden Kconfig option SECURE_BOOT_V2_ECDSA_INSECURE marks the affected
mass-production SoCs (ESP32-C5/C61/H2/P4). On these SoCs, when hardware Secure
Boot V2 is enabled, the ECDSA (V2) signing scheme is no longer offered by
default; it must be turned on explicitly via SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
under "Allow potentially insecure options" (CONFIG_SECURE_BOOT_INSECURE). App
signing without hardware Secure Boot is not affected. Note that ESP32-C61 has no
RSA based Secure Boot V2, so it has no Secure Boot scheme enabled by default.

The preview targets ESP32-H4 and ESP32-H21 mark ECDSA Secure Boot V2 as not
supported in their SoC capabilities instead of using the option above. As
ESP32-H4 has no other Secure Boot V2 scheme, Secure Boot is disabled entirely on
it; ESP32-H21 retains RSA based Secure Boot V2.

The security documentation keeps the ECDSA Secure Boot V2 content visible and
adds a warning describing the limitation (including that ECDSA Secure Boot V2 on
ESP32-C61 is not recommended for production). CI apps that exercise ECDSA Secure
Boot V2 on the affected SoCs set CONFIG_SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
accordingly.
 2026-06-10 08:08:07 +05:30
armando 0cb42beabf fix(spm): rename scp (scratchpad) to spm (scratchpad memory) 2026-03-31 09:24:53 +08:00
armando 55c462ccab change(mem): deprecated tcm and added scp memory utils 2026-03-31 09:22:11 +08:00
Mahavir Jain 1b9b001f23 docs: update PSRAM and flash encryption docs with per-page and separate key capabilities 2026-03-24 12:54:59 +05:30
Zhang Shuxian 79bb3ff3c6 docs: implement comments 2025-11-28 10:18:05 +08:00
Zheng Zhong 57b5376c65 fix : apply the suggestion from doc team 2025-11-28 10:18:05 +08:00
Zheng Zhong 34a54e8aee docs: fix some description in security guide docs 2025-11-28 10:18:04 +08:00
Shen Mengjing bd0c21fef0 docs: Add the updated CN translation 2025-10-13 10:40:16 +05:30
Zhang Shuxian ff5fea1186 docs: Update CN translation for secure boot 2025-07-25 14:43:56 +05:30
nilesh.kale 4722f49bc7 feat: update documentation for esp32h21 
This also updated log files for other targets to make consistent.
 2025-05-12 12:07:36 +05:30
Zhang Shuxian 111e453c4d docs: Update CN translation for Secure Boot 2025-04-30 14:20:45 +08:00
harshal.patil 75fd14efbc fix(docs): Fix unterminated quotes in secure-boot-v2.rst 2025-04-21 11:18:22 +05:30
Marius Vikhammer 1e72b10b26 docs(build): add support for building H21 docs 2025-01-26 11:44:28 +08:00
Mahavir Jain e1a737e401 refactor(docs): re-organize security docs for better navigation 2025-01-09 09:35:12 +05:30
Laukik Hase cb84119600 docs(esp_tee): Added documentation for the ESP-TEE framework 
- Co-authored-by: Shen Meng Jing <shenmengjing@espressif.com>
 2025-01-08 11:37:42 +05:30
shenmengjing 29a7146b12 docs: Update CN translation for secure-boot-v2.rst 2024-12-20 11:24:49 +08:00
renpeiying fb1105f449 docs: Update CN trans for security docs 2024-12-03 11:17:55 +05:30
shenmengjing 6f86f70f0a docs: Sync CN and EN files 2024-11-05 18:03:42 +08:00
renpeiying 46770a50a6 docs: standardize the names of bootloaders in esp-idf 2024-10-23 11:29:24 +08:00
Aditya Patwardhan 6dc8fe3db3 Merge branch 'docs/update_cn_trans_for_secure_boot_v2' into 'master' 
docs: Update CN translation for secure-boot-v2.rst

Closes DOC-9082

See merge request espressif/esp-idf!33895
 2024-10-08 15:13:59 +08:00
Zhang Shuxian 808a82de81 docs: Update CN translation for secure-boot-v2.rst 2024-10-08 11:09:40 +08:00
renpeiying 757fa4d72c docs: Update Chinese translation for docs 2024-09-29 11:35:45 +08:00
Mahavir Jain 2b806c9772 Merge branch 'feature/update_security_docs_for_c61' into 'master' 
feat: update security documents for ESP32C61

Closes IDF-10154, IDF-10155, IDF-10156, IDF-10157, and IDF-10158

See merge request espressif/esp-idf!31959
 2024-09-03 19:11:09 +08:00
nilesh.kale 3550e36a68 feat: updated security docs for ESP32C5 
This commit modified document files for ESP32C5.
This revised chnages for security components, RNG, provisioning and
some minor changes in sample output for flash encryption example.
 2024-09-02 11:50:07 +05:30
nilesh.kale 1011cee7a7 feat: udpate security docs for c61 and c5 
This commit update security documents for ESP32C61.
 2024-09-02 11:04:38 +05:30
harshal.patilandZhang Shuxian 03a15664ee change(bootloader_support/secure_boot): Improve description of the config SECURE_BOOT_V2_ALLOW_EFUSE_RD_DIS 
Co-authored-by: Zhang Shuxian <zhangshuxian@espressif.com>
 2024-08-21 16:32:54 +05:30
Mahavir Jain 3ec400b332 docs(security): fix ESP32-C3 minimum supported revision for secure boot v2 
Closes https://github.com/espressif/esp-idf/issues/14377
 2024-08-16 15:04:28 +05:30
renpeiying afd3179ae8 docs: Provide Chinese translation for host-based-security-workflows.rst 2024-08-08 11:03:24 +08:00
shenmengjing 2cf95ac406 docs: Enable secure boot for c5 in CN translation 2024-07-09 10:42:53 +08:00
shenmengjing 3cb4880d02 docs: Add often used espefuse subcommands to idf.py 2024-07-03 17:55:26 +08:00
Mahavir Jain 47893ac9d6 Merge branch 'contrib/github_pr_14116' into 'master' 
Typo fix in flash-encryption.rst (GitHub PR)

Closes IDFGH-13177

See merge request espressif/esp-idf!31839
 2024-07-01 23:55:02 +08:00
kindaTall 4259df3d56 docs(security): fix typo for key purpose field in flash encryption guide 2024-07-01 12:21:49 +00:00
Mahavir Jain 3002c08956 docs: add C6 flash encryption logs 2024-06-28 16:02:22 +05:30
harshal.patil 4d6cb7bf23 docs(secure_boot): Add secure boot signature verification time for esp32p4 2024-06-21 21:59:55 +05:30
Mahavir Jain 2a4f227c5c docs: add page to summarize the security vulnerabilities and advisories 2024-06-19 10:06:01 +08:00
shenmengjing 85557380dd docs: Update the CN translation for three docs in security 2024-06-12 19:01:11 +08:00
Aditya Patwardhan 874388c628 Merge branch 'feature/enable_flash_encryption_for_c5' into 'master' 
feat: enable flash encryption support for c5

Closes IDF-8622 and IDF-9480

See merge request espressif/esp-idf!29578
 2024-06-07 14:30:39 +08:00
caixinying-git 64dca12e76 docs: provide CN translation for security/secure-boot-v2.rst 2024-06-06 12:16:08 +08:00
nilesh.kale d1fa51e3c9 feat: enable flash encryption support for c5 
This commit provide support for flash encryption feature in ESP32C5
 2024-06-04 14:10:21 +05:30
Marius Vikhammer 2eb4cd3d84 docs(c61): add docs build for C61 2024-06-03 10:24:27 +08:00
nilesh.kale 317f07f22a docs: updated security documents for esp32c5 2024-05-27 16:36:17 +05:30
shenmengjing f0ef081d0a docs: Update the CN translation with the label missing 2024-04-28 11:24:37 +08:00
Aditya Patwardhan 0dcd692d59 Merge branch 'fix/fix_esp32p4_flash_encryption' into 'master' 
fix(bootloader_support): Fix default key usage for flash encryption

See merge request espressif/esp-idf!29968
 2024-04-02 19:57:38 +08:00
Aditya Patwardhan 51a91259d7 fix(bootloader_support): Fix default key usage for flash encryption 2024-04-02 12:27:53 +05:30
harshal.patil 1975c1c69e docs(security): Update security-related docs for ESP32-P4 2024-04-01 17:34:28 +05:30
Marius Vikhammer 4d28524bdb docs(esp32c5): add support for building C5 docs 2024-02-01 10:06:41 +08:00
kirill.chalov 22a053f1fc docs(sphinx-lint): Fix issues reported by sphinx-lint before adding it to pre-commit 2024-01-23 15:22:29 +08:00
Shang Zhou e26118d1c0 docs: Update CN translation for security.rst 2023-12-14 10:40:16 +08:00