radek.tandler ba13c2852a fix(esp_security): Stop ECDSA and Key Manager resets from corrupting concurrent crypto ...

ECDSA enable pulses a reset that also holds SHA in reset, and SHA shares
its DMA with AES. Key Manager enable pulses a reset that also covers the
XTS-AES flash encryption key-usage selector. Neither path was serialized
against those victims, so a hardware ECDSA/HMAC/DS operation could
corrupt a concurrent SHA/AES transfer or an in-flight encrypted flash
read.

- Take the SHA/AES lock inside esp_crypto_ecdsa_lock_acquire(), before
  MPI, matching the DS lock order (sha_aes < mpi)
- Add esp_crypto_key_mgr_enable_periph_clk_no_reset() and switch ECDSA,
  HMAC and DS to it; they only need the key-usage selector writable
- Hold esp_crypto_key_manager_lock across those clock enable/disable
  pairs so selector writes stay serialized without resetting KM

2026-09-08 19:42:35 +05:30

..

esp_crypto_lock.h

fix(esp_security): Stop ECDSA and Key Manager resets from corrupting concurrent crypto

2026-09-08 19:42:35 +05:30

esp_crypto_periph_clk.h

fix(esp_security): Stop ECDSA and Key Manager resets from corrupting concurrent crypto

2026-09-08 19:42:35 +05:30

esp_dpa_protection.h

change(esp_hw_support): Move security-related modules to the esp_security component

2025-08-04 11:43:01 +05:30

esp_ds_err.h

change(esp_hw_support): Move security-related modules to the esp_security component

2025-08-04 11:43:01 +05:30

esp_ds.h

fix(esp_security): Add more validation checks

2026-03-23 10:46:23 +05:30

esp_hmac.h

change(esp_hw_support): Move security-related modules to the esp_security component

2025-08-04 11:43:01 +05:30

esp_key_config.h

feat(esp-tls): Add unified private key interface via esp_key_config_t

2026-07-09 11:14:11 +05:30

esp_key_mgr.h

change(security): disable Key Manager support on ESP32-C5/P4/S31

2026-08-11 09:41:38 +05:30