mirror of
https://github.com/espressif/esp-idf.git
synced 2026-09-22 13:01:16 +03:00
67e10e2b56
ECDSA based Secure Boot V2 is not functional for certain input vectors on ESP32-C5/C61/H2/P4 and on the preview targets ESP32-H4/H21. RSA based Secure Boot V2 is the recommended scheme where the SoC supports it. This issue will be fixed in a future hardware ECO revision; more details will be shared through the hardware errata document. A new hidden Kconfig option SECURE_BOOT_V2_ECDSA_INSECURE marks the affected mass-production SoCs (ESP32-C5/C61/H2/P4). On these SoCs, when hardware Secure Boot V2 is enabled, the ECDSA (V2) signing scheme is no longer offered by default; it must be turned on explicitly via SECURE_BOOT_V2_FORCE_ENABLE_ECDSA under "Allow potentially insecure options" (CONFIG_SECURE_BOOT_INSECURE). App signing without hardware Secure Boot is not affected. Note that ESP32-C61 has no RSA based Secure Boot V2, so it has no Secure Boot scheme enabled by default. The preview targets ESP32-H4 and ESP32-H21 mark ECDSA Secure Boot V2 as not supported in their SoC capabilities instead of using the option above. As ESP32-H4 has no other Secure Boot V2 scheme, Secure Boot is disabled entirely on it; ESP32-H21 retains RSA based Secure Boot V2. The security documentation keeps the ECDSA Secure Boot V2 content visible and adds a warning describing the limitation (including that ECDSA Secure Boot V2 on ESP32-C61 is not recommended for production). CI apps that exercise ECDSA Secure Boot V2 on the affected SoCs set CONFIG_SECURE_BOOT_V2_FORCE_ENABLE_ECDSA accordingly.
18 lines
762 B
YAML
18 lines
762 B
YAML
# Documentation: .gitlab/ci/README.md#manifest-file-to-control-the-buildtest-apps
|
|
|
|
tools/test_apps/security/secure_boot:
|
|
enable:
|
|
- if: CONFIG_NAME == "qemu" and IDF_TARGET not in ["esp32s31"] #IDF-14442
|
|
reason: the test can only run on an FPGA as efuses need to be reset during the test.
|
|
disable:
|
|
- if: CONFIG_NAME != "qemu" or IDF_TARGET == "linux"
|
|
reason: Skipping redundant CI builds for all the targets.
|
|
- if: IDF_TARGET == "esp32h4"
|
|
reason: Secure Boot V2 is disabled on ESP32-H4 (ECDSA-only, vulnerable scheme), so the secure boot test app does not apply.
|
|
|
|
tools/test_apps/security/signed_app_no_secure_boot:
|
|
enable:
|
|
- if: IDF_TARGET in ["esp32c3"]
|
|
temporary: true
|
|
reason: No need to test on all targets
|