Commit Graph
100 Commits
Author SHA1 Message Date
Aditya Patwardhan b369dfe29d Merge branch 'bugfix/fix_build_failure_with_tls1_3_only_v5.2' into 'release/v5.2'
fix: Fixed build errors with TLS 1.3 only configuration (v5.2)

See merge request espressif/esp-idf!35261
2024-11-29 16:07:19 +08:00
Aditya Patwardhan c19a00b35e Merge branch 'bugfix/ota_failed_with_openssl_3.0.2_v5.2' into 'release/v5.2'
fix(esp_http_client): Fix ota failure with openssl server (v5.2)

See merge request espressif/esp-idf!35067
2024-11-21 16:10:44 +08:00
Aditya Patwardhan 5b0b23cfb3 Merge branch 'feature/add_compiler_no_merge_constants_v5.2' into 'release/v5.2'
feat: add compiler config for not merging const sections (v5.2)

See merge request espressif/esp-idf!34087
2024-11-15 15:32:51 +08:00
Aditya Patwardhan 60a825e154 fix(mbedtls): Fix the MBEDTLS_FS_IO dependency on vfs
By default MBEDTLS_FS_IO option in mbedtls uses the filesystem supported
added by vfs component.
If the vfs support is disabled by user then mbedtls raises a warning
that the filesystem realted operation shall always fail
This commit fixes the behaviour by enabling respective depedency check for the
MBEDTLS_FS_IO option

Closes https://github.com/espressif/esp-idf/issues/14409
2024-10-23 11:04:13 +08:00
Aditya Patwardhan dc6657cac4 Merge branch 'fix/host_based_security_workflows_v5.2' into 'release/v5.2'
fix(security): Fix host based security workflow doc

See merge request espressif/esp-idf!33959
2024-10-03 19:34:40 +08:00
Aditya Patwardhan b16c6f42e1 fix(security): Fix host based security workflow doc
Fix the secure boot digest burning command in
    the secure boot enablement workflow
2024-10-03 11:46:47 +05:30
Aditya Patwardhan 2aad80cd92 Merge branch 'fix/ecdsa_verify_check_hash_len_v5.2' into 'release/v5.2'
Wrap some mbedtls' ECDSA verification related APIs (v5.2)

See merge request espressif/esp-idf!33784
2024-09-26 15:13:28 +08:00
Aditya Patwardhan 5b6d8812d1 feat(hal): Add countermeasure for ECDSA generate signature
The ECDSA peripheral before ECO5 of esp32h2 does not perform the ECDSA
    sign operation in constant time. This allows an attacker to read the
    power signature of the ECDSA sign operation and then calculate the
    ECDSA key stored inside the eFuse. The commit adds a countermeasure
    for this attack. In this case the real ECDSA sign operation is
    masked under dummy ECDSA sign operations to hide its real power
    signature
2024-09-23 19:28:12 +05:30
Aditya Patwardhan 726d796683 Merge branch 'fix/esp32c5_rng_random_disable_v5.2' into 'release/v5.2'
fix(bootloader): update random disable api for ESP32-C5/C6 (v5.2)

See merge request espressif/esp-idf!32762
2024-08-12 16:27:30 +08:00
Aditya Patwardhan a3eabcdabc Merge branch 'fix/incorrect_config_name_v5.2' into 'release/v5.2'
Fix encrypt image instead of the partition optimisation not being enabled (v5.2)

See merge request espressif/esp-idf!32640
2024-08-07 13:28:08 +08:00
Aditya Patwardhan 3908657624 Merge branch 'bugfix/existing_mmap_region_offset_v5.2' into 'release/v5.2'
fix(esp_mm): for existing mmap region, consider new offset for virtual addr (v5.2)

See merge request espressif/esp-idf!32113
2024-07-25 17:10:24 +08:00
Aditya Patwardhan fd6676e7d8 fix(esp_tls): Fixed client key parsing for ECC key
Client key parsing for ECC keys was failing as the
    RNG supplied to the key parsing API was uninitialized.
    This commit fixes that behaviour
2024-06-14 08:49:33 +05:30
Aditya Patwardhan d8e9aeae92 Merge branch 'update/version_5_2_2' into 'release/v5.2'
Update version to 5.2.2

See merge request espressif/esp-idf!31242
2024-06-03 15:27:20 +08:00
Aditya Patwardhan 3b8741b172 change(version): Update version to 5.2.2 2024-05-31 21:48:23 +05:50
Aditya Patwardhan af26dc76c8 Merge branch 'feature/update_mbedtls_to_3.6.0_v5.2' into 'release/v5.2'
feat(mbedtls): updated mbedtls version from 3.5.2 to 3.6.0 (v5.2)

See merge request espressif/esp-idf!30669
2024-05-08 12:12:49 +08:00
Aditya Patwardhan 4c7562dd4d Merge branch 'fix/esp_tls_use_64_bit_variable_for_time_v5.2' into 'release/v5.2'
fix(esp-tls): Use 64 bit variable for time instead of 32 bit (v5.2)

See merge request espressif/esp-idf!30624
2024-05-08 10:54:16 +08:00
Aditya Patwardhan ee934f7147 fix(esp-tls): Use 64 bit variable for time instead of 32 bit
Use appropriate API available on respective platform for obtaining
    time
    Closes https://github.com/espressif/esp-idf/issues/13593
2024-05-07 21:11:57 +05:30
Aditya Patwardhan 258bb60c38 Merge branch 'bugfix/nvs_enc_test_v5.2' into 'release/v5.2'
fix(tests): correct the flash write length for NVS encrypted test (v5.2)

See merge request espressif/esp-idf!30603
2024-05-07 17:00:52 +08:00
Aditya Patwardhan c5649deaca Merge branch 'bugfix/howsmyssl_cert_update_v5.2' into 'release/v5.2'
fix(examples): update root certificate for howsmyssl endpoint (v5.2)

See merge request espressif/esp-idf!30203
2024-04-12 17:45:29 +08:00
Aditya Patwardhan b359cd85f1 Merge branch 'feature/mbedtls_error_str_config_v5.2' into 'release/v5.2'
feat(mbedtls): add kconfig option for MBEDTLS_ERROR_C (v5.2)

See merge request espressif/esp-idf!30104
2024-04-11 11:53:24 +08:00
Aditya Patwardhan fcb76f0671 Merge branch 'bugfix/update_disabling_hmac_jtag_method_v5.2' into 'release/v5.2'
fix(esp_hw_support): update hmac toggle method due to discrepency in ROM code (v5.2)

See merge request espressif/esp-idf!29529
2024-03-26 17:29:07 +08:00
Aditya Patwardhan 546e9e0b6e Merge branch 'bugfix/anti_rollback_check_regression_v5.2' into 'release/v5.2'
fix(bootloader_support): check the secure version only for app image (v5.2)

See merge request espressif/esp-idf!29127
2024-02-20 23:30:04 +08:00
Aditya Patwardhan ff8a6a5bf9 Merge branch 'fix/esp32s3_soc_drom_high_addr_v5.2' into 'release/v5.2'
fix(soc): esp32s3/Fix the DROM_HIGH_ADDR (v5.2)

See merge request espressif/esp-idf!27821
2023-12-15 15:48:17 +08:00
Aditya Patwardhan ebcb490aa9 fix(soc): esp32s3/Fix the DROM_DROM_HIGH limit
Previously the DROM_HIGH_ADDR for esp32s3 was 0x3D000000, which
    convers only 16 MB of address range. But esp32s3 supports 32 MB
    external memory. So this address should be 0x3E000000
2023-12-11 12:17:12 +05:30
Aditya Patwardhan c90d14c979 Merge branch 'fix/cleanup_deleted_menuconfig_option_entries_v5.2' into 'release/v5.2'
fix(mbedtls): Fix menuconfig option entries (v5.2)

See merge request espressif/esp-idf!27463
2023-11-29 21:20:55 +08:00
Aditya Patwardhan c1779ff8b7 fix(mbedtls): Removed redundant menuconfig entry 2023-11-29 09:50:12 +05:30
Aditya Patwardhan 7b8a2e8119 Merge branch 'fix/https_request_example_build_with_esp_wolfssl' into 'master'
fix(esp-tls): Fix the https_request example build for esp-wolfssl

See merge request espressif/esp-idf!26576
2023-10-20 22:31:14 +08:00
Aditya Patwardhan 7e6f4d4e87 fix(esp-tls): Fix the https_request example build for esp-wolfssl 2023-10-20 13:43:18 +05:30
Aditya Patwardhan 58bf5ab6fb feat(esp_rom): Added ROM headers related to Key Manager 2023-10-16 09:26:45 +05:30
Aditya Patwardhan 8edef17f1a feat(esp_common): Added PACKED_ATTR in esp_attr.h 2023-10-16 09:26:45 +05:30
Aditya Patwardhan ade65add54 feat(hal): Added HAL and LL layer for Key Manager 2023-10-16 09:26:37 +05:30
Aditya Patwardhan 6b4d2140ee feat(hal): Added HAL and LL layer for HUK 2023-10-16 09:26:14 +05:30
Aditya Patwardhan fa1da64dec Merge branch 'feature/mbedtls_3_5_0_update' into 'master'
feat(mbedtls): update to 3.5.0 release

See merge request espressif/esp-idf!26331
2023-10-13 17:11:05 +08:00
Aditya Patwardhan 1d5532badc Merge branch 'bugfix/security_check_order_in_startup' into 'master'
fix(startup): flip the security configuration check order

See merge request espressif/esp-idf!26280
2023-10-05 13:56:47 +08:00
Aditya Patwardhan 2b08aac741 Merge branch 'bugfix/usb/host/urb_check_revert' into 'master'
[USB Host] Fix transfer determination during argument checking for regular EP transfer

See merge request espressif/esp-idf!25963
2023-09-14 23:50:43 +08:00
Aditya Patwardhan a57c8dc938 Merge branch 'contrib/github_pr_12177' into 'master'
mbedtls: define MBEDTLS_SSL_CID_TLS1_3_PAD_GRANULARITY for CID padding (GitHub PR)

See merge request espressif/esp-idf!25826
2023-09-09 12:27:56 +08:00
Aditya Patwardhan 4be9bc4e2e feat(esp_http_client): Added support for OTA using ds peripheral for TLS 2023-09-04 09:00:03 +05:30
Aditya Patwardhan e05455e592 Merge branch 'bugfix/wrong_ota_upgrade_size_log' into 'master'
fix(esp_https_ota): Fix wrong debug print for ota upgrade size

See merge request espressif/esp-idf!25188
2023-08-28 14:15:57 +08:00
Aditya Patwardhan 388a61c7b7 fix(security): Fixed the host-based security workflows 2023-08-22 15:05:14 +05:30
Aditya Patwardhan e468d2220f Merge branch 'bugfix/secure_ota_without_padding' into 'master'
fix(secure_ota): secure app verification issue without padding bytes

Closes IDFGH-10784

See merge request espressif/esp-idf!25156
2023-08-03 22:07:07 +08:00
Aditya Patwardhan ef320349fe Merge branch 'bugfix/nitpick_in_esp_http_client' into 'master'
fix: nitpick in esp_http_client

See merge request espressif/esp-idf!25066
2023-08-03 02:49:51 +08:00
Aditya Patwardhan 22d98c2c35 Merge branch 'esp_prov/update_deprecation_warnings' into 'master'
fix(esp_prov): Fixed the deprecation APIs warnings

See merge request espressif/esp-idf!24896
2023-07-28 16:24:09 +08:00
Aditya Patwardhan 6d3db47187 Merge branch 'fix/wifi_prov_mgr_retry_auth_expire' into 'master'
fix (wifi_prov): Retry provisioning on `WIFI_AUTH_EXPIRE` event

Closes IDFGH-10503 and IDFGH-9793

See merge request espressif/esp-idf!24548
2023-07-26 12:25:33 +08:00
Aditya Patwardhan 1a471f7bba Merge branch 'contrib/github_pr_11775' into 'master'
esp_http_client: fix the residual data issue and potential out-of-bounds access (GitHub PR)

Closes IDFGH-10530

See merge request espressif/esp-idf!24543
2023-07-24 17:08:00 +08:00
Aditya Patwardhan b8a8dfedfd Merge branch 'feature/add_documentation_for_externally_enabling_secure_boot' into 'master'
docs/security: Added host based worlflow to enable secure boot externally

See merge request espressif/esp-idf!24409
2023-07-19 14:41:41 +08:00
Aditya Patwardhan 083e943704 docs(security): Added host based workflow to enable secure boot externally
* Styling changes for the host-based workflow document
* Fix formatting for the document for host based security wofkflows
2023-07-19 10:11:30 +05:30
Aditya Patwardhan 56f15ab017 Merge branch 'fix/mpi_incorrect_assert' into 'master'
fix(mbedtls): Fix incorrect assert for H/W MPI operations

Closes WIFI-5591 and IDFGH-10615

See merge request espressif/esp-idf!24737
2023-07-14 08:59:10 +08:00
Aditya Patwardhan 8b5eea8519 Merge branch 'fix/esp_tls_missing_explicit_header' into 'master'
fix (esp-tls): Missing explicit inclusion of header `mbedtls/x509_crt.h`

Closes IDFGH-10519

See merge request espressif/esp-idf!24544
2023-07-04 21:15:11 +08:00
Aditya Patwardhan e2a8413486 Merge branch 'bugfix/mbedtls_dyanmic_buffer_with_dhm_build' into 'master'
fix(mbedtls): Build issue in dynamic buffer feature

Closes IDFGH-10526

See merge request espressif/esp-idf!24488
2023-06-29 22:03:48 +08:00
Aditya Patwardhan 360f551f48 Merge branch 'fix/mbedtls_ecdsa_veriy_restartable' into 'master'
mbedtls: update submodule

See merge request espressif/esp-idf!24372
2023-06-26 11:28:58 +08:00
Aditya Patwardhan 3f58defcc9 Merge branch 'contrib/github_pr_11724' into 'master'
esp_http_client: Fix unsigned integer overflow (GitHub PR)

Closes IDFGH-10477

See merge request espressif/esp-idf!24366
2023-06-23 12:53:22 +08:00
Aditya Patwardhan d9b66226cd docs/security: Separate documents under different subsection 2023-06-23 08:15:13 +05:30
Aditya Patwardhan 2a4fddb48b docs/Security:Add references to second stage bootloader to avoid confusion bettwen
bootloader and 2nd stage bootloader
2023-06-22 17:18:08 +05:30
Aditya Patwardhan 253d80f560 docs/security: Move security related docs in a separate section 2023-06-17 10:04:01 +05:30
Aditya Patwardhan b078541ca5 docs/Flash encryption: Add encrypted partitions section 2023-06-17 10:04:01 +05:30
Aditya Patwardhan 6d4a116625 docs: Added documentation about enabling the Security Features
externally with help of espefuse tool

flash_encryption_doc: Fix the document to also inform users about what
happens in case of host generated private key in the Flash encryption process
2023-06-17 10:04:01 +05:30
Aditya Patwardhan 5e6ad95b78 Merge branch 'docs/fix_instructions_nvs_encr_hmac' into 'master'
docs: Fix the instructions for setting up HMAC-based NVS encryption

See merge request espressif/esp-idf!23951
2023-06-06 14:32:43 +08:00
Aditya Patwardhan 903af13e84 Merge branch 'feat/config_to_flash_bootloader_when_sbv2_is_enabled' into 'master'
add config to flash bootloader by the command `idf.py flash` when secure boot v2 is enabled

See merge request espressif/esp-idf!23848
2023-05-26 18:13:05 +08:00
Aditya Patwardhan 1d3a8f2edd docs/build-system: Update the documentation to add a note regarding
limitation of set_source_files_properties
2023-04-19 08:01:34 +05:30
Aditya Patwardhan 823322f988 Merge branch 'feature/update_mbedtls_v3.4.0' into 'master'
mbedtls: Update to release/v3.4.0

Closes IDF-7158

See merge request espressif/esp-idf!23058
2023-04-18 21:29:28 +08:00
Aditya Patwardhan 2dd280f126 esp-tls: Added getter/setter function for the conn_state.
* Added the setter function to set the connection sockfd value
Closes https://github.com/espressif/esp-idf/issues/10871
2023-04-13 20:03:50 +05:30
Aditya Patwardhan 7c8e8557a6 Merge branch 'bugfix/esp_tls_coverity_warning' into 'master'
Fix coverity warning in esp-tls component

See merge request espressif/esp-idf!22934
2023-03-31 15:22:58 +08:00
Aditya Patwardhan 780f7f2669 secure_boot_test_app: Update the test_app to use pytest framework
* Added custom class IdfFpgaDut in pytest from ttfw_idf.IDFFPGADUT
2023-03-28 16:10:00 +05:30
Aditya Patwardhan 85b1efc729 Merge branch 'update/update_cmn_crt_authorities_csv' into 'master'
Update common cert authorities csv

See merge request espressif/esp-idf!22713
2023-03-16 12:59:48 +08:00
Aditya Patwardhan 38b036e9ae Merge branch 'bugfix/fix_esp_http_client_host_test_failures' into 'master'
esp-tls: Fix esp-tls component to resolve esp_http_client example failure for Linux target.

Closes IDFCI-1646 and IDFCI-1647

See merge request espressif/esp-idf!22584
2023-03-09 15:46:00 +08:00
Aditya Patwardhan 7b40852d2f docs/flash_encryption: Update docs for esp32h2 target 2023-02-24 15:21:51 +05:30
Aditya Patwardhan b5b7f32e46 hal/esp32h2: Enable ll layer for flash encryption 2023-02-24 15:21:51 +05:30
Aditya Patwardhan aaf5d0670e [bootloader_support/esp32h2] Enable flash encryption for esp32h2 target 2023-02-24 15:21:51 +05:30
Aditya Patwardhan bd81d8f9d3 esp-tls: Add build test for server session ticket option 2023-02-24 04:45:23 +00:00
Aditya Patwardhan 0d20f8816f esp-tls: Fix build issue when esp-tls server session tickets have been enabled.
Closes https://github.com/espressif/esp-idf/issues/10765
2023-02-24 04:45:23 +00:00
Aditya Patwardhan b06a029677 esp32c6: update documentation for flash encryption 2023-02-03 16:01:06 +05:30
Aditya Patwardhan 2a46fecb36 esp32c6: Enable documentation for esp32c6 hmac and ds 2023-01-19 09:53:35 +05:30
Aditya Patwardhan 4084ab38a1 esp32c6/soc: Enable DS and HMAC capabilities for esp32c6 in soc_caps.h 2023-01-19 09:53:34 +05:30
Aditya Patwardhan 4831edc624 esp32c6/hal: Added support for HMAC and DS on esp32c6
* Update DS test_apps for esp32c6 SoC
2023-01-19 09:53:34 +05:30
Aditya Patwardhan 634e408ca4 Merge branch 'fix/mbedtls_port_sanity_checks_and_return_values' into 'master'
mbedtls/port: refactor sanity checks and their return values

Closes IDF-3810

See merge request espressif/esp-idf!21987
2023-01-17 19:21:52 +08:00
Aditya Patwardhan be38f94c6c esp32c6 support: Enable support for SHA and AES in esp32c6 2023-01-04 12:07:32 +05:30
Aditya Patwardhan 04a9366694 esp32c6-SHA/AES support: Added sha_ll.h and aes_ll.h files in hal layer 2023-01-04 12:07:26 +05:30
Aditya Patwardhan 11dee5d27f Merge branch 'docs/update_esp_https_ota_docs_for_esp_events' into 'master'
docs: Update esp_https_ota docs to have information about OTA events

See merge request espressif/esp-idf!21531
2022-12-19 19:02:43 +08:00
Aditya Patwardhan 7955a11384 Merge branch 'feature/use_gettimeofday_instead_of_xTaskGetTickCount' into 'master'
esp-tls: use gettimeofday() instead of xTaskGetTickCount()

See merge request espressif/esp-idf!21300
2022-11-30 14:08:21 +08:00
Aditya Patwardhan 8d047ea910 esp_flash_encrypt: If it is supported then Enable secure download mode in release mode instead of disabling it completely. 2022-11-29 11:44:18 +05:30
Aditya Patwardhan bb290d407d docs/esp_http_client: fix esp-tls documentation link 2022-11-29 03:13:12 +00:00
Aditya Patwardhan dfcf5878f8 secure_boot_v2: Fix warning message 2022-11-25 03:25:36 +05:30
Aditya Patwardhan 22ad083ccd Merge branch 'refactor/merge_esp_ds_code_between_targets' into 'master'
Merge esp_ds and hmac_hal layers for different targets

Closes IDF-3803, IDF-6144, and DOC-3973

See merge request espressif/esp-idf!21187
2022-11-25 03:59:18 +08:00
Aditya Patwardhan 1c233cc508 hmac_hal: Merge hmac hal layer for different into one 2022-11-24 16:04:26 +05:30
Aditya Patwardhan 9bb74d8b07 docs: Fix Doxyfile after esp_ds.h is merged 2022-11-24 16:03:30 +05:30
Aditya Patwardhan aa27abb39b esp_hw_support/esp_ds: Improve documentation for esp_ds_sign and esp_ds_encrypt_params API 2022-11-24 16:03:30 +05:30
Aditya Patwardhan 2c1416d92c hal/esp32s3: Rename static API hmac_ll_query_config_error to
hmac_ll_config_error in order to make it standardized across targets
2022-11-24 16:03:30 +05:30
Aditya Patwardhan ac1f4a263b esp_hw_support: Merge esp_ds.h file for different targets into one 2022-11-24 16:03:30 +05:30
Aditya Patwardhan f79d8f9c07 esp_hw_support: Merge esp_ds.c file for different targets into one 2022-11-24 16:03:30 +05:30
Aditya Patwardhan 6a75fe5912 esp_hw_support: Update build system support for mergin esp_ds.c files
into one
2022-11-24 16:03:23 +05:30
Aditya Patwardhan efd05fdebb esp32c3/esp_ds.c: Fix RSA_LEN_MAX variable 2022-11-24 15:53:51 +05:30
Aditya Patwardhan 96585abb17 Merge branch 'feature/esp_http_client_support_secure_element' into 'master'
esp_http_client: Add option to use secure_element

Closes IDFGH-8625

See merge request espressif/esp-idf!20972
2022-11-17 19:24:31 +08:00
Aditya Patwardhan ba43063314 esp_http_client: Add option to use secure_element
Closes https://github.com/espressif/esp-idf/issues/10071
2022-11-17 14:43:35 +05:30
Aditya Patwardhan c099209d7c esp-tls: Fix esp-cryptoauthlib built dependency when secure element
support is enabled
2022-11-11 16:13:15 +05:30
Aditya Patwardhan 14e64783e7 esp-tls/Kconfig: Fix dependency for ESP-TLS Server menuconfig option 2022-11-03 07:17:05 +00:00
Aditya Patwardhan 1f6d66b152 esp_tls: Update documentation for cert callback 2022-11-03 07:17:05 +00:00
Aditya Patwardhan 8ad4de7991 esp-tls: Add changes to the Cert selection callback PR. 2022-11-03 07:17:05 +00:00
Aditya Patwardhan 9b7dffd4a8 examples/efuse: Rename the example test name to avoid multiple python
files with same name
2022-10-28 11:44:59 +05:30
Aditya Patwardhan b2ce7b3c8c Merge branch 'feature/update_efuse_example_test_to_pytest' into 'master'
efuse_exmple_test: Update to pytest framework

See merge request espressif/esp-idf!18702
2022-10-28 11:52:53 +08:00
Aditya Patwardhan bd18096cb4 Merge branch 'refactor/merge_esp_hmac_headers_into_one' into 'master'
esp_hw_support: Merge HMAC layer into one

Closes IDF-3803

See merge request espressif/esp-idf!18742
2022-10-27 16:39:32 +08:00