Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity
46,420 Commits 25 Branches 192 Tags
ea6b0ff2da51198dea50a6dfd3bbdfea7095901a
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mahavir Jain f8fe1ce0ea Merge branch 'fix/secure_boot_verify_app_api_support_ecdsa_p384_v5.5' into 'release/v5.5' 
Application's Secure Boot verify API support ECDSA-P384 (v5.5)

See merge request espressif/esp-idf!44181
 2025-12-29 13:53:00 +05:30
Mahavir Jain 3378c690c4 Merge branch 'feat/add_mbedtls_testcases_for_ecc_p_384_v5.5' into 'release/v5.5' 
feat(mbedtls): add ECC P-384 mbedtls support and test_cases (v5.5)

See merge request espressif/esp-idf!43980
 2025-12-26 09:56:00 +05:30
Mahavir Jain 961abe6a08 Merge branch 'fix/align_ota_written_size_during_ota_resumption_to_last_16_byte_boundry_v5.5' into 'release/v5.5' 
fix(esp_https_ota): align OTA resumption offset to 16-byte boundary (v5.5)

See merge request espressif/esp-idf!44034
 2025-12-26 09:55:39 +05:30
Mahavir Jain b749ca2087 Merge branch 'docs/fix_some_expressions_in_security_guide_v5.5' into 'release/v5.5' 
docs: fix some description in security guide docs (v5.5)

See merge request espressif/esp-idf!43818
 2025-12-26 09:55:07 +05:30
Mahavir Jain 0f474752c7 Merge branch 'fix/fix_bootloader_skip_validate_in_deep_sleep_v5.5' into 'release/v5.5' 
fix(bootloader): fix signature verification skip in deep sleep scenarios (v5.5)

See merge request espressif/esp-idf!43696
 2025-12-26 09:53:51 +05:30
Mahavir Jain 4cd5e63caf Merge branch 'bugfix/protocomm_sec1_validation_v5.5' into 'release/v5.5' 
fix(protocomm): add validation for Security1 client verifier data (v5.5)

See merge request espressif/esp-idf!43779
 2025-12-26 09:53:26 +05:30
Mahavir Jain 9ea85ed080 Merge branch 'feat/add_c5_v102_config_v5.5' into 'release/v5.5' 
hw_support: add new config for c5 v1.2 and c61 v1.1 (v5.5)

See merge request espressif/esp-idf!43615
 2025-12-26 09:51:18 +05:30
Mahavir Jain 9ab736cbd1 fix(spi_flash): limit CPU clock to 160MHz for encrypted flash writes 2025-12-17 03:33:29 +08:00
Mahavir Jain a5601fbf0d fix(protocomm): add validation for Security1 client verifier data 
Add checks to validate client_verify_data pointer and length before
processing in handle_session_command1. Prevents NULL pointer dereference
when client omits verifier data in Session_Command1, which could cause
device crash during provisioning (remote DoS attack).

We would like to thank Pavel Kohout from Aisle Research for reporting
this vulnerability along with a mitigation strategy.
 2025-12-10 14:18:55 +05:30
Mahavir Jain ac8b73bda1 fix(bootloader): fix signature verification skip in deep sleep scenario 
For CONFIG_BOOTLOADER_SKIP_VALIDATE_IN_DEEP_SLEEP enabled and exit from
deep sleep case the secure boot signature verification must be skipped
to improve the wakeup performance.

Closes https://github.com/espressif/esp-idf/issues/15590
 2025-11-25 10:11:58 +05:30
Mahavir Jain 3fd00b4d80 fix(esp_system): limit CPU clock to 160MHz in ESP32-C5 for flash encryption 
Encrypted flash write operation sometimes result in random corruption in
certain bytes. Root cause points to sudden current surge due to involvement of
encryption block overwhelming LDO supply. More details will be provided
in the ESP32-C5 SoC Errata document.

This fix limits the CPU clock to 160MHz for flash encryption enabled
case. Failing encrypted flash write tests could successfully pass in
this configuration. Going ahead, a dynamic clock adjustment in flash
driver will be considered to mitigate this issue.
 2025-11-13 13:26:06 +05:30
Mahavir Jain 89d2585a62 fix(lwip): allow task stack from SPIRAM except for ESP32 ECO2 and below 
Closes https://github.com/espressif/esp-idf/issues/17827
 2025-11-13 09:41:52 +05:30
Mahavir Jain 34ff2409dc Merge branch 'fix/disallow_enabling_sb_sha384_when_sb_sha256_is_enabled_p4_v5.5' into 'release/v5.5' 
fix(efuse): Disallow enabling SB using SHA-384 when SB using SHA-256 is enabled (ESP32-P4 ECO5) (v5.5)

See merge request espressif/esp-idf!43263
 2025-11-12 11:22:35 +05:30
Mahavir Jain 6b89f1ed1c Merge branch 'feat/update_mbedtls_3.6.5_v5.5' into 'release/v5.5' 
feat(mbedtls): update to version 3.6.5 (v5.5)

See merge request espressif/esp-idf!43244
 2025-11-12 11:21:46 +05:30
Mahavir Jain d32b70d552 fix(esp_psram): make SPIRAM_USE_MEMMAP available for all targets 
This reverts earlier commit d2858847 and thereby making SPIRAM_USE_MEMMAP
available for all targets.

This config option has no direct usage but just avoids adding the PSRAM
to heap but still keeps it memory mapped.

Closes https://github.com/espressif/esp-idf/issues/17764
 2025-11-05 14:07:22 +05:30
Mahavir Jain 8c3dab6bb1 Merge branch 'feat/esp_tee_mspi_tuning_v5.5' into 'release/v5.5' 
change(esp_tee): Fix TEE SPI flash API issues on ESP32-C5 (v5.5)

See merge request espressif/esp-idf!42907
 2025-10-28 17:43:43 +05:30
Mahavir Jain e054d168c1 Merge branch 'fix/c5_tee_sram_prot_v5.5' into 'release/v5.5' 
fix(esp_tee): Split TEE SRAM as I/DRAM for ESP32-C5 with PMA (v5.5)

See merge request espressif/esp-idf!42680
 2025-10-21 17:25:15 +05:30
Mahavir Jain cfba6ee0fd Merge branch 'bugfix/ota_resumption_saved_size_alignmnet_v5.5' into 'release/v5.5' 
fix: Ensure OTA written size for 16-byte alignment (v5.5)

See merge request espressif/esp-idf!42683
 2025-10-21 07:53:49 +05:30
Mahavir Jain 2175df7d51 Merge branch 'fix/esp_tee_int_wdt_v5.5' into 'release/v5.5' 
fix(esp_tee): Sync M-U interrupt thresholds during service calls from critical sections (v5.5)

See merge request espressif/esp-idf!42720
 2025-10-20 14:43:02 +05:30
Mahavir Jain 1a760a91e5 Merge branch 'feature/add_ecdsa_p384_support_and_testcases_v5.5' into 'release/v5.5' 
feat: add ecdsa-p384 testcases and relative support for ESP32C5 ECO2 (v5.5)

See merge request espressif/esp-idf!41274
 2025-10-17 22:42:26 +05:30
Mahavir Jain 5058b757ee Merge branch 'feature/partial_download_over_single_connection_v5.5' into 'release/v5.5' 
feat(esp_https_ota): Support partial downloading of OTA over single connection (v5.5)

See merge request espressif/esp-idf!42678
 2025-10-17 21:07:47 +05:30
Mahavir Jain 3f3525ee14 Merge branch 'fix/esp_efuse_enable_rom_secure_download_mode_v5.5' into 'release/v5.5' 
fix(efuse): Fix enabling ROM secure download mode (v5.5)

See merge request espressif/esp-idf!42627
 2025-10-17 09:43:38 +05:30
Mahavir Jain ea36c4f609 Merge branch 'feature/esp_tee_c5_v5.5' into 'release/v5.5' 
feat(esp_tee): Initial support for ESP32-C5 and related changes (v5.5)

See merge request espressif/esp-idf!42357
 2025-10-16 09:39:23 +05:30
Mahavir Jain 042f29dd66 Merge branch 'fix/change_write_protection_bit_of_shared_security_efuses_v5.5' into 'release/v5.5' 
Reorder write protection bits of some shared security efuses (v5.5)

See merge request espressif/esp-idf!42033
 2025-10-15 09:38:59 +05:30
Mahavir Jain 4cc95c4a71 Merge branch 'fix/key_mgr_use_default_efuse_key_v5.5' into 'release/v5.5' 
Configure the Key Manager to use XTS-AES efuse key by-default (v5.5)

See merge request espressif/esp-idf!42395
 2025-10-15 09:38:03 +05:30
Mahavir Jain d28a8a0d11 Merge branch 'fix/improve_rng_documentation_v5.5' into 'release/v5.5' 
fix(docs): Improved RNG documentation (v5.5)

See merge request espressif/esp-idf!42573
 2025-10-14 15:07:13 +05:30
Mahavir Jain a61f93b05c Merge branch 'fix/http_async_handler_ci_test_failure_v5.5' into 'release/v5.5' 
fix(http_server): Fix CI test failure async_handler (v5.5)

See merge request espressif/esp-idf!42542
 2025-10-14 11:48:53 +05:30
Mahavir Jain d5161cb2a0 Merge branch 'contrib/github_pr_17652_v5.5' into 'release/v5.5' 
fix(esp_tls_conn_new_sync): Fix `esp_tls_conn_new_sync`'s doc to reflect its implementation (GitHub PR) (v5.5)

See merge request espressif/esp-idf!42329
 2025-10-03 09:41:16 +05:30
Mahavir Jain 2f3eccd25a Merge branch 'fix(esp_tls)/dynamic_buffer_ssl_crash_v5.5' into 'release/v5.5' 
fix(esp_tls): fix potential ssl crash with dynamic buffer (v5.5)

See merge request espressif/esp-idf!42138
 2025-09-28 15:10:37 +05:30
Mahavir Jain da21126583 Merge branch 'fix/cjson_cpe_v5.5' into 'release/v5.5' 
fix(cjson): add CPE with davegamble as vendor (v5.5)

See merge request espressif/esp-idf!42070
 2025-09-26 14:42:57 +05:30
Mahavir Jain 0313a369ea Merge branch 'contrib/github_pr_17470_v5.5' into 'release/v5.5' 
fix(http_server): Corrected initialization value for lru_counter at h… (GitHub PR) (v5.5)

See merge request espressif/esp-idf!42061
 2025-09-24 07:54:12 +05:30
Mahavir Jain 5d6573cf0c Merge branch 'featue/allow_custom_key_purposes_v5.5' into 'release/v5.5' 
feat(efuse): Allow custom key purposes (v5.5)

See merge request espressif/esp-idf!41934
 2025-09-22 12:48:48 +05:30
Mahavir Jain fa08f239c0 Merge branch 'bugfix/encrypt_len_for_sb_update_case_v5.5' into 'release/v5.5' 
fix(bootloader): correct encryption length for secure update without secure boot (v5.5)

See merge request espressif/esp-idf!41923
 2025-09-21 18:37:43 +05:30
Mahavir Jain 8a4f0c597a Merge branch 'fix/handle_error_and_dispatch_event_while_reading_data_from_server_v5.5' into 'release/v5.5' 
feat(esp_http_client): handle error while reading data from server (v5.5)

See merge request espressif/esp-idf!41324
 2025-09-21 18:06:05 +05:30
Mahavir Jain 1970cc7a40 Merge branch 'fix/http_server_async_requests_on_same_socket_blocks_v5.5' into 'release/v5.5' 
Fix async requests on same socket blocking server (v5.5)

See merge request espressif/esp-idf!41997
 2025-09-20 02:44:45 +05:30
Mahavir Jain 4014385d8d Merge branch 'fix/rng_entropy_mixing_with_rtc_timer_v5.5' into 'release/v5.5' 
fix(esp_hw_support): Fixed entropy mixing of RTC timer with RNG (v5.5)

See merge request espressif/esp-idf!41824
 2025-09-19 21:27:19 +05:30
Mahavir Jain 9c257c4f0b test: add test case for secure update with FE case 2025-09-16 10:16:42 +05:30
Mahavir Jain b0713ffe08 fix(bootloader): correct encryption length for secure update without secure boot 
For secure update without secure boot case, the encryption length for
app image must consider signature block length as well. This was
correctly handled for secure boot case but not for secure update without
secure boot.
 2025-09-16 10:16:37 +05:30
Mahavir Jain 847ceb6301 Merge branch 'change/exclude_cve-2025-57052_v5.5' into 'release/v5.5' 
change(cjson): Update to v1.7.19 (v5.5)

See merge request espressif/esp-idf!41837
 2025-09-11 18:12:14 +05:30
Mahavir Jain b966e396d3 Merge branch 'feat/support_authentication_feature_for_ws_v5.5' into 'release/v5.5' 
Added pre handshake callback for websocket (v5.5)

See merge request espressif/esp-idf!41037
 2025-09-02 09:18:29 +05:30
Mahavir Jain d0ffafb71f Merge branch 'feat/add_new_client_state_and_update_state_flow_v5.5' into 'release/v5.5' 
feat(esp_http_client): added new HTTP state HTTP_STATE_CONNECTING and change state flow (v5.5)

See merge request espressif/esp-idf!41276
 2025-09-02 09:14:17 +05:30
Mahavir Jain 55cd1f3cc9 Merge branch 'fix/handle_return_during_assiging_header_for_range_request_v5.5' into 'release/v5.5' 
fix(esp_https_ota): fixed missing return check during setting range header (v5.5)

See merge request espressif/esp-idf!41193
 2025-09-02 09:12:12 +05:30
Mahavir Jain 7d8bed20f2 Merge branch 'change/ecdsa_does_not_use_mpi_esp32h2_eco5_v5.5' into 'release/v5.5' 
The ECDSA module of ESP32-H2 ECO5 does not use the MPI module (v5.5)

See merge request espressif/esp-idf!41215
 2025-09-02 09:12:07 +05:30
Mahavir Jain ac38a274e5 Merge branch 'feat/make_https_async_request_under_crt_bundle_config_v5.5' into 'release/v5.5' 
feat(esp_http_client): Make https_async request under CERT BUNDLE config (v5.5)

See merge request espressif/esp-idf!41458
 2025-09-02 09:11:54 +05:30
Mahavir Jain 742d38b051 Merge branch 'doc/update_blufi_doc_v5.5' into 'release/v5.5' 
docs(ble): add advisory for CVE-2025-55297 found in Blufi example (v5.5)

See merge request espressif/esp-idf!41488
 2025-09-02 09:11:36 +05:30
Mahavir Jain c59ec8a330 Merge branch 'contrib/github_pr_17464_v5.5' into 'release/v5.5' 
Update the QEMU instructions for the security_features_app example (GitHub PR) (v5.5)

See merge request espressif/esp-idf!41678
 2025-09-02 09:11:13 +05:30
Mahavir Jain 29df7286c8 fix(esp_psram): make SPIRAM_USE_MEMMAP depend on ESP32 target 2025-08-11 13:46:39 +05:30
Mahavir Jain 2829481eb6 fix(psram): provide boot warning about PSRAM encryption issue on C5/C61 
For C5/C61 revision 1.0, PSRAM encryption has hardware issue. This will
be addressed in future silicon version. Add explicit warning about this.
 2025-08-11 13:46:38 +05:30
Mahavir Jain 942a9bfbe4 Merge branch 'fix(esp_http_client)/fix_potential_double_free' into 'release/v5.5' 
fix(esp_http_client): fix possible double memory free

See merge request espressif/esp-idf!40965
 2025-08-08 09:46:48 +05:30
Mahavir Jain 2795fae32c Merge branch 'fix/update_postman_root_certificate_v5.5' into 'release/v5.5' 
Updated postman root certificate (v5.5)

See merge request espressif/esp-idf!41051
 2025-08-08 09:46:08 +05:30
Mahavir Jain 995c2f38ee fix: change brownout log from INFO to ERROR 2025-08-01 08:48:05 +05:30
Mahavir Jain e34b8ecf8f Merge branch 'docs/update_bootloader_max_size_v5.5' into 'release/v5.5' 
Update the maximum supported bootloader size (v5.5)

See merge request espressif/esp-idf!40789
 2025-07-24 19:10:35 +05:30
Mahavir Jain c9f92e84a4 Merge branch 'feature/support_rng_sampling_v5.5' into 'release/v5.5' 
Feature/support rng sampling (v5.5)

See merge request espressif/esp-idf!40600
 2025-07-24 10:43:30 +05:30
Mahavir Jain 8d0b576c1e Merge branch 'contrib/github_pr_16076_v5.5' into 'release/v5.5' 
fix(esp_http_client): fix spurious async open error (GitHub PR) (v5.5)

See merge request espressif/esp-idf!40740
 2025-07-23 08:05:45 +05:30
Mahavir Jain 0b0e7b23ff Merge branch 'doc/update_esp_https_ota_pre_encrypted_doc_v5.5' into 'release/v5.5' 
docs(system/esp_https_ota): adds ECIES-256 to pre-enc ota design doc (v5.5)

See merge request espressif/esp-idf!40372
 2025-07-22 14:49:56 +05:30
Mahavir Jain fa02f84c3e Merge branch 'docs/fix_secure_download_mode_unsupported_esp32_v5.5' into 'release/v5.5' 
fix(bootloader): Fix documentation as ESP32 does not support secure download mode (v5.5)

See merge request espressif/esp-idf!40213
 2025-07-22 14:49:14 +05:30
Mahavir Jain b458016805 Merge branch 'feat/adding_different_strategy_to_perform_tls_using_dynamic_feature_v5.5' into 'release/v5.5' 
Add configuration to control dynamic buffer strategy in mbedtls (v5.5)

See merge request espressif/esp-idf!39919
 2025-07-22 14:48:44 +05:30
Mahavir Jain c76d8c49ee Merge branch 'feat/adding_hidden_config_for_dynamic_buffer_control_configuration_v5.5' into 'release/v5.5' 
feat(esp_tls): Added hidden config in esp-tls for dynamic buffer strategy configuration (v5.5)

See merge request espressif/esp-idf!40265
 2025-07-22 14:48:21 +05:30
Mahavir Jain 570ecdc1cc Merge branch 'feature/support_ds_peripheral_rsa_decryption_v5.5' into 'release/v5.5' 
feat(mbedtls): Add support for RSA decryption with DS peripheral (v5.5)

See merge request espressif/esp-idf!40449
 2025-07-22 11:57:15 +05:30
Mahavir Jain 5c02c6fc1e Merge branch 'feat/update_mbedtls_3.6.4_v5.5' into 'release/v5.5' 
feat(mbedtls): update to version 3.6.4 (v5.5)

See merge request espressif/esp-idf!40375
 2025-07-22 11:52:29 +05:30
Mahavir Jain 6cf1a6f297 Merge branch 'fix/suppress_cert_bundle_serial_number_warning_v5.5' into 'release/v5.5' 
fix(mbedtls/esp_crt_bundle): Suppress non-negative serial number warning (v5.5)

See merge request espressif/esp-idf!39401
 2025-06-16 15:42:10 +05:30
Mahavir Jain 95b7c023da Merge branch 'feat/httpd_register_uri_handler_strdup_failure_case_check_v5.5' into 'release/v5.5' 
Handling httdp_register_uri_handler() strdup function failure case check (v5.5)

See merge request espressif/esp-idf!39511
 2025-06-16 15:41:47 +05:30
Mahavir Jain 881c5a9795 fix: update root certificate for postman-echo endpoint 
The certificate chain for postman-echo endpoint has switched to
Let's Encrypt root CA
 2025-06-13 11:03:24 +05:30
Mahavir Jain 45831351fa test: add secure image verification case for C6/H2 2025-05-14 10:53:47 +05:30
Mahavir Jain 37e28522c2 fix: secure OTA without secure boot issue for MMU page size configurable SoCs 
For secure app verification during OTA update case, the image was
getting memory mapped twice and hence the failure in verification.

Modified from memory mapped flash read to SPI flash read approach
for the MMU page size from image header.

Regression from 07318a4987

Closes https://github.com/espressif/esp-idf/issues/15936
 2025-05-14 10:53:46 +05:30
Mahavir Jain af1ea42391 Merge branch 'feature/update_h21_documentation' into 'master' 
feat: update documentation for esp32h21

Closes IDF-12160, IDF-12163, IDF-12164, and IDF-12165

See merge request espressif/esp-idf!38856
 2025-05-12 16:59:00 +08:00
Mahavir Jain 999a81b013 Merge branch 'contrib/github_pr_15818' into 'master' 
fix(esp_local_ctrl): Add 'esp_netif' as requirements in CMakeLists (GitHub PR)

Closes IDFGH-15141

See merge request espressif/esp-idf!38948
 2025-05-07 21:34:19 +08:00
Mahavir Jain 081de6dc0d Merge branch 'contrib/github_pr_15868' into 'master' 
feat(tcp_transport): add API to configure SSL cipher suites (GitHub PR)

Closes IDFGH-15197

See merge request espressif/esp-idf!38883
 2025-05-06 01:48:28 +08:00
Mahavir Jain 63e89ea077 Merge branch 'fix/unaligned_writes_acces_in_sha_input_fill' into 'master' 
Fix unaligned memory access while populating SHA input buffer

Closes PM-398

See merge request espressif/esp-idf!38806
 2025-05-02 12:21:36 +08:00
Mahavir Jain ff555428d1 Merge branch 'feat/dynamic_buffer_tls1.3' into 'master' 
feat(mbedtls): add support for dynamic buffer for TLS1.3

Closes IDFGH-14708, IDF-12469, IDF-9178, and IDF-1725

See merge request espressif/esp-idf!38258
 2025-04-30 17:52:43 +08:00
Mahavir Jain 6c0d5def85 test: convert C6 secure boot tests to use ECDSA scheme 2025-04-29 12:05:22 +08:00
Mahavir Jain f3b4050a9f fix: Secure boot (ECDSA) build failure for C6 rev0 target 
Closes https://github.com/espressif/esp-idf/issues/15856
 2025-04-29 12:05:22 +08:00
Mahavir Jain 8d8bf19395 Merge branch 'feature/resupport_ecdsa_in_c5_eco2' into 'master' 
feat: re-enable ecdsa support for c5 eco2

Closes IDF-12829

See merge request espressif/esp-idf!38795
 2025-04-29 00:30:33 +08:00
Mahavir Jain 74eff52e2e fix: build regression in the test application 
Regression from bb6da46ccd. Disabling
relevant config until further debug.
 2025-04-28 20:59:22 +05:30
Mahavir Jain 604957d4f7 Merge branch 'fix/async_handler_example_not_working' into 'master' 
Fix double freeing issue in Async handler example

See merge request espressif/esp-idf!37987
 2025-04-28 17:36:39 +08:00
Mahavir Jain 26f631e0dc Merge branch 'feat/c5_eco2_ecc' into 'master' 
feat(hal): add support for ESP32-C5 ECO2 ECC peripheral

See merge request espressif/esp-idf!38729
 2025-04-28 12:34:07 +08:00
Mahavir Jain f7724eedef Merge branch 'feature/enable_secure_boot_for_esp32h21' into 'master' 
feat: enable secure boot support for esp32h21

Closes IDF-11500 and IDF-12161

See merge request espressif/esp-idf!36618
 2025-04-28 11:37:37 +08:00
Mahavir Jain fbc38a95ec Merge branch 'fix/async_handler_example_stack_overflow_issue' into 'master' 
fix(esp_http_server): Async handler example stack overflow fix

See merge request espressif/esp-idf!38586

Related: https://github.com/espressif/esp-idf/issues/15587
 2025-04-25 14:52:01 +08:00
Mahavir Jain 674dc8810e feat(hal): add support for ESP32-C5 ECO2 ECC peripheral 2025-04-25 14:44:09 +08:00
Mahavir Jain 0bd1ec60d9 Merge branch 'fix/fix_esp_tls_ipv6_only_build_issue' into 'master' 
fix(esp-tls): Fixed build issue in esp-tls related to IPV6 only config

See merge request espressif/esp-idf!38722
 2025-04-24 22:04:15 +08:00
Mahavir Jain 23259d3791 Merge branch 'feat/allow_der_certificates_in_esp_http_client' into 'master' 
feat(esp_http_client): Allow the der certificates in esp_http_client

See merge request espressif/esp-idf!38407
 2025-04-24 14:04:57 +08:00
Mahavir Jain 8b239ab605 Merge branch 'fix/remove_mbedtls_logical_dead_code' into 'master' 
fix(mbedtls): remove logical dead code from mbedtls

Closes IDF-12866

See merge request espressif/esp-idf!38498
 2025-04-23 12:21:20 +08:00
Mahavir Jain 672db2b297 Merge branch 'fix/build_failure_when_sha1_config_is_disabled' into 'master' 
Fix build failure when CONFIG_MBEDTLS_SHA1_C is disabled

See merge request espressif/esp-idf!38329
 2025-04-23 00:04:37 +08:00
Mahavir Jain 6dc71c2b52 Merge branch 'docs/fix_unterminated_quotes' into 'master' 
fix(docs): Fix unterminated quotes in secure-boot-v2.rst

See merge request espressif/esp-idf!38571
 2025-04-22 15:10:32 +08:00
Mahavir Jain e37c47f6e7 Merge branch 'bugfix/crypto_reset_on_exit' into 'master' 
fix(esp_system): reset crypto peripherals before device restart

See merge request espressif/esp-idf!38399
 2025-04-17 21:24:25 +08:00
Mahavir Jain c8f790078b Merge branch 'feature/enable_ecdsa_support_for_esp32h21' into 'master' 
feat: add ECDSA support for esp32h21

Closes IDF-11496

See merge request espressif/esp-idf!36591
 2025-04-16 17:58:52 +08:00
Mahavir Jain 13515d729e Merge branch 'feat/ensure_not_all_of_the_security_versions_are_disabled' into 'master' 
feat(wifi_prov): Ensure not all security versions are disabled at same time

Closes IDF-12794

See merge request espressif/esp-idf!38029

Related https://github.com/espressif/esp-idf/issues/15549
 2025-04-15 21:41:26 +08:00
Mahavir Jain 55a2ad3df3 fix(esp_system): reset crypto peripherals before device restart 
This change addresses a rare but critical issue observed on certain
ESP32-C3 and ESP32-S3 devices, where secure boot verification
intermittently fails due to improper cleanup of crypto peripherals
during a restart.

Background – Restart Behavior in IDF
------------------------------------
In ESP-IDF, when the device restarts (via `esp_restart()` or due to a
panic/exception), a partial peripheral reset is performed followed by a
CPU reset. However, until now, crypto-related peripherals were not
included in this selective reset sequence.

Problem Scenario
----------------
If a restart occurs while the application is in the middle of a bignum
operation (i.e., using the MPI/Bignum peripheral), the ROM code may
encounter an inconsistent peripheral state during the subsequent boot.
This leads to transient RSA-PSS secure boot verification failures.

Following such a failure, the ROM typically triggers a full-chip reset
via the watchdog timer (WDT). This full reset clears the crypto
peripheral state, allowing secure boot verification to succeed on the
next boot.

Risk with Aggressive Revocation
-------------------------------
If secure boot aggressive revocation is enabled (disabled by default in
IDF), this transient verification failure could mistakenly lead to
revocation of the secure boot digest.

If your product configuration has aggressive revocation enabled,
applying this fix is strongly recommended.

Frequency of Occurrence
-----------------------
The issue is rare and only occurs in corner cases involving
simultaneous use of the MPI peripheral and an immediate CPU reset.

Fix
---
This fix ensures that all crypto peripherals are explicitly reset prior
to any software-triggered restart (including panic scenarios),
guaranteeing a clean peripheral state for the next boot and preventing
incorrect secure boot behavior.
 2025-04-15 19:06:26 +05:30
Mahavir Jain 78ef080251 Merge branch 'fix/ota_pytest_idf_path_fix' into 'master' 
fix(ota): Fix the pytest's idf_path

See merge request espressif/esp-idf!38321
 2025-04-15 17:04:39 +08:00
Mahavir Jain 9707baf05c Merge branch 'feat/httpd_uri_handler_doc_update' into 'master' 
feat(esp_http_server): Added httpd URI handler docs

See merge request espressif/esp-idf!37560
 2025-04-08 13:59:49 +08:00
Mahavir Jain 83cb9d73b9 Merge branch 'feature/add_test_to_verify_chip_revision_while_performing_ota' into 'master' 
feat: updated check for chip revision and added testcase

Closes IDF-12587

See merge request espressif/esp-idf!37546
 2025-04-08 13:46:45 +08:00
Mahavir Jain 4f3e64331b Merge branch 'contrib/github_pr_14909' into 'master' 
fix(esp-tls): Remove useless const from size paramter (GitHub PR)

Closes IDFGH-14099

See merge request espressif/esp-idf!36828
 2025-04-07 16:48:32 +08:00
Mahavir Jain 7e401a8bec Merge branch 'refactor/esp_security_clk_cfg' into 'master' 
refactor(esp_security): Introduce dedicated APIs for crypto clock configuration

See merge request espressif/esp-idf!37448
 2025-04-06 21:32:42 +08:00
Mahavir Jain a0c707e539 Merge branch 'contrib/github_pr_15715' into 'master' 
fix(esp_http_client): fix error return when set_header has value==NULL (GitHub PR)

Closes IDFGH-15024 and IDFGH-15023

See merge request espressif/esp-idf!38246
 2025-04-06 19:24:27 +08:00
Mahavir Jain c263a3f9c5 Merge branch 'contrib/github_pr_15288' into 'master' 
Improve httpd string value fetching efficiency (GitHub PR)

Closes IDFGH-14524

See merge request espressif/esp-idf!37301
 2025-04-06 19:17:28 +08:00
Mahavir Jain 6658d081e2 Merge branch 'feature/ecdsa_op_w_tee_sec_stg' into 'master' 
feat(esp_tee): Add support for mbedtls ECDSA signing with TEE secure storage

Closes IDF-12183

See merge request espressif/esp-idf!37217
 2025-04-04 12:47:53 +08:00
Mahavir Jain ccf7178582 Merge branch 'fix/examples_python3.13_ssl_conn_failure' into 'master' 
Change in Python3.13's default ssl context caused SSL connection failure

See merge request espressif/esp-idf!38175
 2025-04-04 12:30:05 +08:00
Mahavir Jain 5c51472e82 Merge branch 'bugfix/linux_cert_bundle_build_warn' into 'master' 
fix(tools): suppress GNU bin-utils warning about executable stack

Closes IDFCI-2819

See merge request espressif/esp-idf!38109
 2025-04-01 23:56:43 +08:00
Mahavir Jain 21f59bd030 Merge branch 'feat/update_mbedtls_3.6.3' into 'master' 
feat(component/mbedtls): update to upstream v3.6.3

Closes IDF-12730

See merge request espressif/esp-idf!38041
 2025-04-01 18:38:12 +08:00
Mahavir Jain 32875d5a66 fix(tools): suppress GNU bin-utils warning about executable stack 
Newer GNU bin-utils version 2.39 has started emitting a warning
about an executable stack region for Linux target build:

/usr/bin/ld: warning: x509_crt_bundle.S.o: missing .note.GNU-stack section implies executable stack

Fix the issue by adding appropriate "noexecute" attribute for stack
section.
 2025-03-31 19:15:36 +05:30