harshal.patil
ae3026a60b
fix(mbedtls): Fixed the transmission of return values of the esp-aes APIs
...
- Earlier, some intermediate return values were not stored and returned,
thus incorrect return values used to get transmitted to the upper layer of APIs.
- Also, zeroised the output buffer in case of error condition.
2023-07-20 18:54:37 +05:30
Aditya Patwardhan
6afa8e4347
Merge branch 'bugfix/aes_dma_align_issue_v4.4' into 'release/v4.4'
...
aes: fix DMA descriptor calculation for the alignment case (v4.4)
See merge request espressif/esp-idf!24095
2023-06-14 16:55:42 +08:00
Mahavir Jain
98c53234fc
aes: fix DMA descriptor calculation for the alignment case
...
The number of the DMA descriptors allocated for certain length (e.g.,
8176) were not sufficient (off by 1 error). This used to result in the
dynamic memory corruption as the region was modified beyond the
allocated range.
This change fixes the DMA descriptor calculation part and allocates
sufficient DMA descriptors based on the data length alignment considerations.
Test has also been added to cover the specific scenario in the CI.
Closes https://github.com/espressif/esp-idf/issues/11310
2023-06-07 09:20:20 +05:30
Christoph Baechler
d007b0ebb2
esp_ds: ignore releasing mutex if not called from same task
2023-05-19 08:32:00 +05:30
harshal.patil
617d935b44
mbedtls: Update to release v2.28.3
...
- Release Notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.3
2023-04-03 14:28:12 +05:30
Mahavir Jain
2a1ede3f9d
Merge branch 'update_v4.4/mbedtls_v2.28.2' into 'release/v4.4'
...
mbedtls: Update to release v2.28.2 (v4.4)
See merge request espressif/esp-idf!21896
2023-02-02 22:27:22 +08:00
harshal.patil
ecdd202285
mbedtls/port: added stream_block parameter sanity check
2023-01-25 15:38:28 +05:30
harshal.patil
734724ba79
mbedtls: fix esp_aes_crypt_ctr writing to null stream block
2023-01-25 15:38:28 +05:30
harshal.patil
865a72eb8f
mbedtls: added SOC_AES_SUPPORT_AES_192 check in esp_aes_gcm_setkey()
2023-01-25 15:38:28 +05:30
Laukik Hase
0f46f0cfa4
mbedtls: Update config options as per v2.28.2 release
2023-01-04 15:36:24 +05:30
Laukik Hase
e7fb0dbdaa
mbedtls: Update to `v2.28.2`
...
- Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2
2023-01-04 14:05:56 +05:30
Aditya Patwardhan
606ada809a
esp_rsa_sign_alt: Fix esp_init_ds_data_ctx API to not modify user defined data when it is given directory from flash
2022-08-23 13:27:03 +05:30
Roland Dobai
f935c17a95
Tools: Fix Python style warnings
2022-08-09 14:30:52 +02:00
Laukik Hase
f7c20f3718
mbedtls: Update to release v2.28.1
...
- Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.1
2022-07-14 10:01:39 +05:30
Laukik Hase
9e2369cb79
ci: Enable `custom certificate bundle` test for ESP32-S3
...
- Increase leakage limit for `test performance RSA key operations`
UT by 64 bytes
2022-06-23 16:32:26 +05:30
Laukik Hase
e114850dda
mbedtls: Acquire lock before enabling MPI (RSA) hardware
...
- For ESP32-S3
2022-06-23 16:32:26 +05:30
Mahavir Jain
660b876465
esp_crt_bundle: Fix build problems if MBEDTLS_CERTIFICATE_BUNDLE is disabled
...
Exclude source and include file from build list if certificate bundle feature
is disabled.
Closes https://github.com/espressif/esp-idf/issues/8714
Closes IDFGH-7106
2022-06-12 09:29:12 +05:30
Li Jingyi
4896d0c8f3
mbedtls: fix ssl server crash when enable mbedtls dynamic buffer
...
Not free keycert until MBEDTLS_SSL_CLIENT_KEY_EXCHANGE for rsa key exchange methods, because keycert will be used to parse client key exchange.
2022-06-08 14:27:41 +08:00
Espressif BOT
2d91698324
Update esp_crt_bundle certificates
2022-06-02 11:03:24 +05:30
Aditya Patwardhan
a1d5a9b971
esp_crt_bundle: Add bounds checking for the "esp_crt_bundle_set" API.
...
Closes https://github.com/espressif/esp-idf/issues/8397
2022-06-01 15:09:50 +05:30
Mahavir Jain
ec0f7850a0
mbedtls: move locally managed root certificates to separate file
...
Purpose:
This will allow for easily automating periodic updates to
"cacrt_all.pem" file.
Note:
For now newly created "cacrt_local.pem" contains single "DST Root CA X3"
which we are keeping to manage compatibility with endpoints like
"howsmyssl.com". Please note this Root CA is expired and is not part of
Mozilla’s NSS root certificate store.
2022-06-01 15:07:31 +05:30
Laukik Hase
43d3cb37a0
esp_crt_bundle: Fix build error
...
- When `esp_crt_bundle.h` is included before any config,
a build error (`esp_err_t` not defined) is observed
Closes https://github.com/espressif/esp-idf/issues/8606
2022-06-01 15:06:59 +05:30
Li Jingyi
81c195fed2
fix(mbedtls): fix ssl server memory leak when enable mbedtls dynamic buffer function
2022-05-19 10:41:40 +08:00
Laukik Hase
51fc67f5fa
ci: Fix issues for build stage
...
- Fixed logs expecting different format specifier
- Updated ignore list for check_public_header test
- Updated functions ported from mbedTLS
- Fix for make-system build errors
2022-02-02 15:03:48 +05:30
Laukik Hase
11366d643f
mbedtls: Added option `MBEDTLS_SSL_KEEP_PEER_CERTIFICATE`
...
- Removed code regarding MBEDTLS_DYNAMIC_FREE_PEER_CERT
(config was kept for backward compatibility)
- Combined mbedTLS v2.28.x related options under a separate Kconfig menu
2022-02-02 10:56:48 +05:30
Laukik Hase
76b9beff3c
mbedtls: Moved mbedtls_mpi_mul_int to port layer
2022-02-02 10:56:48 +05:30
Laukik Hase
76658d5066
mbedtls: Added config options for v2.28.0 upgrade
2022-02-02 10:56:48 +05:30
Laukik Hase
0fdc5f7490
mbedtls: Upgrade to v2.28.0
2022-02-02 10:56:13 +05:30
Jiang Jiang Jian
7f48664eda
Merge branch 'feature/mbedtls-2.16.12-integration_v4.4' into 'release/v4.4'
...
mbedtls: upgrade to release v2.16.12 (v4.4)
See merge request espressif/esp-idf!16483
2021-12-23 03:26:17 +00:00
Li Jingyi
c91afab332
fix(mbedtls): fix compiling error when open MBEDTLS_SSL_PROTO_DTLS and disable MBEDTLS_SSL_PROTO_DTLS when open MBEDTLS_DYNAMIC_BUFFER
2021-12-21 16:31:47 +08:00
Mahavir Jain
3e3e1a9a9d
mbedtls: upgrade to release v2.16.12
...
For release notes, please refer to:
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.12
2021-12-21 13:58:40 +05:30
Mahavir Jain
d0b465c7cd
mbedtls: small documentation update
2021-12-21 13:58:40 +05:30
Jiang Jiang Jian
141c1cd004
Merge branch 'bugfix/crypto_allocate_lldesc_v4.4' into 'release/v4.4'
...
crypto: dont create DMA descriptors on the stack (v4.4)
See merge request espressif/esp-idf!16323
2021-12-08 13:31:41 +00:00
Marius Vikhammer
a1ee43fe9d
crypto: also apply cache writeback/invalidate for SPIRAM_USE_MEMMAP
...
Closes https://github.com/espressif/esp-idf/issues/7944
2021-12-08 16:10:19 +08:00
Marius Vikhammer
3b3826b61c
crypto: allocate all DMA descriptors to DMA capable memory.
...
These were previously placed on the stack, but the stack could be placed in
RTC RAM which is not DMA capable.
2021-12-08 16:10:18 +08:00
Li Jingyi
03b7ffdf4a
feat(mbedtls): modify __wrap_mbedtls_ssl_setup to decrease SSL peak heap cost
2021-12-06 17:07:11 +08:00
Mahavir Jain
a28e0bf064
mbedtls: remove wrap from component.mk as well
...
Note: This was not required in original MR, as master branch does
not support GNU Make.
2021-12-02 17:13:31 +05:30
Mahavir Jain
7fe9d41e33
esp_bignum: move check for supported MPI bits at start of API
...
This can allow hardware MPI API to return as soon as it identifies
that it can handle require bitlength operation.
2021-12-02 15:07:08 +05:30
Mahavir Jain
9cb4948a23
mbedtls: update mbedtls submodule pointer for MPI API change
2021-12-02 15:07:08 +05:30
Mahavir Jain
99c9637e9b
mbedtls: fix hardware MPI (bignum) related regression
...
In commit de22f3a4e5
, combination of
hardware and software MPI (bignum) related approach was used to
work around chip (e.g. ESP32-C3) limitation of max 3072 bits support.
This was done using linker "--wrap" flag but since the relevant API is
being used in same translation (compilation unit), hardware mode was not
getting used in some cases (e.g., RSA key generation).
This commit modified internal mbedTLS API and makes software+hardware
combination deterministic.
2021-12-02 15:07:08 +05:30
Mahavir Jain
e0e6523c09
mbedtls: update kconfig help to correct on supported MPI bits
2021-12-02 15:07:07 +05:30
Marius Vikhammer
e3a771511a
aes: fix potential unaligned access in aes-gcm
2021-11-12 12:28:28 +08:00
Aditya Patwardhan
2d1f18efea
Updated the cacrt_all.pem file with latest Root certificate list.
2021-10-17 00:01:37 +08:00
Victor Morales
4e45f13e2d
esp_crt_bundle: remove EC-ACC certificate
...
Fixes bug #7631
2021-10-01 14:18:46 -07:00
Sachin Billore
667017d517
ESP32S3 support for ESP-MQTT SSL Mutual Authentication with Digital Signature
...
Closes IDF-3859
2021-09-06 11:17:30 +05:30
Marius Vikhammer
63280dfec0
aes/sha: fixed driver reseting the wrong GDMA channel
...
Driver was using the channel ID from tx when reseting rx.
But since rx and tx is not necessarily from the same pair this could lead
to the driver reseting the wrong DMA channel.
2021-08-30 10:37:03 +08:00
Marius Vikhammer
bf21cf0c99
aes/sha: change gdma transfer ability for sram to be 1 byte aligned
...
Previously GDMA transfer ability was set to 4 bytes, but buffers might
be not fulfill these requirements
2021-08-05 11:02:17 +08:00
Li Jingyi
b8892137f5
mbedtls: Add CONFIG_MBEDTLS_SSL_PROTO_GMTSSL1_1 for support GMSSL component
...
The configure will be enabled for GMSSL component and disabled as default because of it doesn't provide by IDF project.
2021-07-28 19:54:58 +08:00
Michael (XIAO Xufeng)
59195b6fb3
Merge branch 'bugfix/update_gdma_soc' into 'master'
...
gdma: alignment setting for PSRAM transfer
Closes IDF-1524
See merge request espressif/esp-idf!13976
2021-07-17 14:04:03 +00:00
Renz Bagaporo
7c22cccb9c
esp32: cleanup build script
2021-07-16 20:14:27 +08:00