Michael (XIAO Xufeng)
c1b218b640
Merge branch 'fix/mmap_cache_flash_wr' into 'master'
...
fix(mmap): fixed mmap read data wrong when flash being erased/written and cache not disabled
Closes IDFGH-14084
See merge request espressif/esp-idf!29804
2026-06-29 11:44:10 +08:00
Alexey Lapshin
e389f3e4df
Merge branch 'feature/upgrade_toolchain_to_16.1.0_20260609' into 'master'
...
Upgrade GNU toolchain to 16.1.0_20260609
See merge request espressif/esp-idf!49523
2026-06-18 00:55:07 +04:00
Alexey Lapshin
4328dc28e2
fix(mbedtls): increase test limits
2026-06-17 17:24:24 +07:00
Xiao Xufeng
789ce684c9
fix(mmap): fixed some API read wrong data via mmap when flash being erased/written while XIP on PSRAM
...
Before:
The cache won't be disabled when XIP on psram. But during flash
erasing/programming, read data will be courrupt.
When XIP in psram is enabled, the image is not mapped to the cache so
usually there will be no flash access. The only way to read from flash
is via the driver or use mmap. The driver has protection during erasing,
while th mmap region not.
Now:
Mmap APIs provide a flag to make mmap->unmap region mutually exclusive
to flash erase/programming when XIP from psram. SPI Flash write APIs
will benefit from this. When the flag is used, no concurrent access to
mapped region will happen while writing; otherwise the cache will be
disable to avoid data corruption.
Most ESP-IDF APIs calls mmap with this flag. As for users calling
mmap-like APIs directly, they can choose whether to enable this by a
flag.
Closes https://github.com/espressif/esp-idf/issues/14897
2026-06-16 01:00:43 +08:00
Ashish Sharma
e6f5f5ff63
fix(mbedtls/port): add additional hardening for PSA drivers
2026-06-15 16:10:09 +05:30
harshal.patil
554cce6937
fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down
2026-06-09 10:59:11 +05:30
harshal.patil
3cbd175d2b
test(mbedtls/crt_bundle): Make weak-hash test self-contained
...
The "custom certificate bundle - weak hash" test relied on DigiCert
Global Root CA being present as a trust anchor in cacrt_all.pem (the
only SHA-1-self-signed root in the chain it loaded). The recent
cacrt_all.pem refresh moved that root to cacrt_deprecated.pem, so the
chain could no longer anchor and the test started failing.
2026-06-02 10:06:43 +05:30
harshal.patil
a24bd0bf10
test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver
2026-05-26 11:01:57 +05:30
Jiang Guang Ming
d5a712f1f8
feat(mbedtls): enable ROM mbedTLS pytest with esp32c2 rev2.0
2026-05-20 14:15:19 +08:00
harshal.patil
83ebd475c3
test(mbedtls/persistent_storage_format): Add ESP ITS NVS format-stability test app
2026-05-15 09:12:20 +05:30
harshal.patil
4821f331fe
refactor(mbedtls/test): Move the mbedtls test app to support multiple test apps
2026-05-15 09:09:15 +05:30
Mahavir Jain
0419f8b991
Merge branch 'fix/memory_leak_cross_signed_cert_verify' into 'master'
...
fix(esp_crt_bundle): fixes verification failures with cross signed certificates
Closes IDFGH-17582 and IDFGH-17627
See merge request espressif/esp-idf!47966
2026-05-12 11:03:52 +05:30
Ashish Sharma
0e03327f69
fix(esp_crt_bundle): fixes verification with cross signed cert
2026-05-11 17:44:16 +08:00
Chen Jichang
3c3b9a6a4e
ci(esp32h4): disable tests which cannot pass
2026-05-11 16:48:58 +08:00
Ashish Sharma
7a1ba8f4ca
feat(mbedtls): update to version 4.1.1
2026-04-30 18:02:06 +08:00
harshal.patil
7eb44576be
test(mbedtls): Add a test for opaque HMAC driver verification
2026-04-22 10:11:27 +05:30
harshal.patil
f195d183be
fix(mbedtls): Flash compatibility across multiple key sources (ECDSA, HMAC)
2026-04-22 10:11:12 +05:30
Ashish Sharma
a858f1683d
fix(mbedtls): reenable RSA 4096 bit key performance test
2026-04-08 14:54:04 +08:00
harshal.patil
28736a81fa
fix(esp_security): Enable Key Manager clocks even for efuse key operations
...
The Key Manager holds a key usage register, thus, the Key Manager peripheral
clock must be enabled even for efuses-based key operations to route the
crypto operations to correctly to the efuses (default is Key Manager)
2026-03-25 10:38:44 +05:30
nilesh.kale
31c88b7a4d
fix(mbedtls): disable cert bundle tests in FPGA env
2026-03-23 13:53:54 +08:00
harshal.patil
b5550281b9
change(mbedtls): Change the ESP-DS-RSA key lifetime name to include the VOLATILE keyword
2026-03-06 15:00:38 +05:30
harshal.patil
30a120c7cb
feat(mbedtls/esp_ecdsa): Support Key Manager key using the ESP-ECDSA PSA interface
2026-03-03 18:40:31 +05:30
harshal.patil
aa63487d9f
feat(mbedtls/esp_rsa_ds): Introduce ESP-RSA DS opaque key context
2026-03-03 18:36:18 +05:30
hrushikesh.bhosale
7b2bd0453a
fix(mbedtls/test_apps): Enabling psram test for esp32p4
2026-02-18 11:55:06 +05:30
Mahavir Jain
ba61b8300f
Merge branch 'feat/reenabling_test_for_esp32p4' into 'master'
...
feat(tests): Reenabled the app_update and crypto driver test for esp32p4
Closes IDF-14367
See merge request espressif/esp-idf!43719
2026-02-17 11:01:32 +05:30
hrushikesh.bhosale
8124c2e2cf
refactor(protocols): Removed the common_component dependency
...
- Removed the common_component build dependency from protocols test_apps
and examples
2026-02-16 15:07:37 +05:30
Mahavir Jain
5225e6a3e6
Merge branch 'fix/failed_test_ds_key_deployment_in_aes_mode' into 'master'
...
Re-enable crypto drivers test app for ESP32-P4
Closes IDF-14418
See merge request espressif/esp-idf!45724
2026-02-12 13:38:53 +05:30
Ashish Sharma
0b6843f2ed
fix(mbedtls): updates crypto performance numbers
2026-02-11 23:35:59 +08:00
nilesh.kale
0fd1a4c9f8
test(esp_security): re-enable crypto drivers test app for ESP32P4
...
Also remove common_components dep for security-related tests
2026-02-10 17:48:55 +05:30
harshal.patil
b4542bf748
fix(mbedtls): Support truncated HMAC
2026-02-10 14:08:46 +05:30
hrushikesh.bhosale
e957e4801b
feat(tests): Reenabled the app_update. mbedtls and FE tests for esp32p4
2026-02-06 15:34:19 +05:30
Ashish Sharma
b3e1c03d97
fix(mbedtls): revert struct member name change esp_rsa_ds_data to esp_ds_data
2026-02-06 17:33:17 +08:00
Ashish Sharma
6f5b078ed6
feat: adds DS Sign capabilities for ESP32S2
2026-02-05 10:12:25 +08:00
Ashish Sharma
e06a7dd791
feat: adds new Kconfig variable for DS peripheral
2026-02-05 10:12:25 +08:00
Ashish Sharma
1d185a6548
feat: adds PSA DS driver support
2026-02-05 10:12:25 +08:00
Mahavir Jain
f2635f98d9
Merge branch 'fix/externsive_mbedtls_aes_sha_tests' into 'master'
...
Re-introduce the extensive mbedtls AES and SHA tests
Closes SHA-512
See merge request espressif/esp-idf!45489
2026-02-04 18:33:57 +05:30
Ashish Sharma
523194465b
change(mbedtls): rename builtin to mbed-builtin
2026-02-03 14:55:44 +08:00
harshal.patil
2bc49effb4
test(mbedtls): Re-introduce the extensive AES, AES-GCM and the SHA tests
...
- Also extend the PSRAM encryption test to ESP32-S3
2026-02-02 16:58:01 +05:30
harshal.patil
b450664e2b
fix(mbedtls/include): Fix include libs in the driver's public headers
2026-01-31 13:30:57 +05:30
harshal.patil
ae459b5204
feat(mbedtls): Introduce ESP-HMAC PSA opaque driver
2026-01-31 00:45:11 +05:30
harshal.patil
53072bfa9d
fix(mbedtls): Enable h/w accel for CMAC and HMAC operations
...
- Refactor ESP-MAC drivers
2026-01-31 00:45:11 +05:30
igor.udot
4c26ab876b
ci: update build-test-rules to use common_components
2026-01-23 10:14:09 +08:00
harshal.patil
e9ea55bea2
feat(mbedtls/ecdsa): Introduce PSA ECDSA driver
2026-01-19 09:14:37 +05:30
Ashish Sharma
3d5775e22b
feat: adds PSA MD5 driver support
2026-01-07 10:41:33 +08:00
Michael (XIAO Xufeng)
c299c0b749
Merge branch 'refactor/remove_idf_test_component' into 'master'
...
refactor: Remove idf_test component
Closes IDF-12578
See merge request espressif/esp-idf!43733
2026-01-06 16:20:20 +08:00
harshal.patil
e91d50ed1e
fix(mbedtls): Support partial hardware AES-GCM and s/w fallback for non-AES ciphers
...
- Support software-fallback for unsupported hardware AES lengths
2026-01-03 12:17:50 +05:30
Xiao Xufeng
73735f3e87
test: merge chip-specific performance data headers
2026-01-01 02:35:58 +08:00
Xiao Xufeng
438e07b30e
refactor: Remove idf_test component
...
Split the idf_performance.h and target ver, which hold the performance
thresholds, into the headers of each testing.
In the past pytest also parse the common header to get the thresholds.
Now the logic is also removed. Performance thresholds are supposed to be
in the pytest scripts.
2026-01-01 02:26:42 +08:00
Mahavir Jain
a6375c0db4
fix(mbedtls): misc updates post PSA crypto migration
2025-12-30 09:31:49 +05:30
Ashish Sharma
45966c2009
feat: update mbedTLS test apps to PSA APIs
2025-12-30 09:31:49 +05:30