cd47cf46dc
Merge branch 'esp32p4/add_aes_support' into 'master'
...
feat: add AES support for ESP32-P4
Closes IDF-6519
See merge request espressif/esp-idf!26429
2024-03-15 11:43:22 +08:00
5a682c3bbb
Merge branch 'feature/optimize_chips_active_power' into 'master'
...
feat(system): Optimize the power consumption of esp32h2 and esp32c6 in the active state
Closes IDF-5658
See merge request espressif/esp-idf!27798
2024-03-14 12:08:33 +08:00
e8268d8b6b
feat(hal/aes): use RCC atomic block to enable/reset the AES peripheral
2024-03-13 15:22:07 +05:30
2abb656ba2
feat(mbedtls/aes): Support AES-DMA operations by satisfying L1 cache alignment requirements
...
- Use DMA RX done interrupt status bit while waiting for DMA rx transfer
2024-03-13 15:22:07 +05:30
9b15189583
change(mbedtls): replace Cache ROM APIs usage with APIs from esp_cache.h
...
- Only APIs used in esp_crypto_shared_gdma and aes have been replaced
- Get dcache line size using cache api instead of Kconfig
2024-03-13 15:22:07 +05:30
a6012c9e5a
feat(mbedtls/aes): add AES peripheral support for esp32p4
2024-03-13 15:22:06 +05:30
83dd60307f
feat(mbedtls/esp_crypto_shared_gdma): support AXI-DMA in the crypto shared gdma layer
...
- In case of AXI-DMA, the DMA descriptors need to be 8 bytes aligned
lldesc_t do not satify this condition thus we need to replace it with
dma_descriptor_t (align(4) and align(8)) in esp_crypto_shared_gdma.
- Added new shared gdma start API that supports the dma_descriptor_t
DMA descriptor.
- Added some generic dma descriptor macros and helper functions
- replace lldesc_t with dma_descriptor_t
2024-03-13 15:22:06 +05:30
2c570ed53b
change(mbedtls/aes): moved esp_aes_internal.h to be a private header
...
- Also enable AES-GCM test in the hal crypto test app for all targets
2024-03-13 15:22:06 +05:30
6dd040a61b
Merge branch 'update/update_certs_bundle' into 'master'
...
Update esp_crt_bundle certificates
See merge request espressif/esp-idf!29562
2024-03-13 15:42:31 +08:00
343a6f47ab
fix(mbedtls/aes-gcm): Fix null pointer derefernce coverity reports
...
- Also fixed a tcp_transport and https_server report
2024-03-12 12:36:00 +05:30
92849e660e
fix(mbedtls): fixing ecdsa's dependence on ecc_mult clock
2024-03-12 10:10:42 +08:00
bebdf7b989
change(mbedtls/crt_bundle): Update esp_crt_bundle certificates
2024-03-12 10:00:36 +08:00
f6a7fb13cd
feat: re enables tests on p4
...
This commit re-enables mbedtls and hal/crypto testapos on p4.
2024-03-05 17:48:05 +08:00
a21a16f34f
ci(mbedtls/gcm): Added test to verify software fallback for non-AES cipher GCM operations
2024-02-23 10:47:30 +05:30
8977be856d
fix(mbedtls/gcm): Add support for software fallback for non-AES ciphers in a GCM operation
...
- Even if the config MBEDTLS_HARDWARE_AES is enabled, we now support fallback
to software implementation of GCM operations when non-AES ciphers are used.
2024-02-23 10:47:30 +05:30
aab3f604ec
feat(hal/testapps): Added AES and SHA testcases with DMA support
2024-02-09 14:23:06 +05:30
8472bcb7d3
feat(mbedtls): updated mbedtls version from 3.5.0 to 3.5.2
...
This updates the submodule mbedtls to its latest version 3.5.2.
2024-02-01 10:43:16 +05:30
4dc2ace0b7
fix(esp_hw_support): Update key manager support
...
1) Added new Key Manager APIs
2) Added crypto locking layer for Key Manager
3) Remove support for deploying known key
4) Format key manager support
5) Fix build header error
6) Updated the key_mgr_types.h file
7) Added key manager tests
2024-01-23 10:24:39 +05:30
a792c24b2a
ci(mbedtls): remove duplicated build-rules
2024-01-16 17:14:12 +08:00
9a9b1cd11f
ci(ecdsa): migrate from .gitlab/ci/rules.yml to .build-test-rules.yml
2024-01-10 15:29:43 +01:00
1220c36f96
Merge branch 'fix/build_failure_when_hardware_gcm_is_disabled' into 'master'
...
fix(mbedtls/gcm): Fix build failure when config `MBEDTLS_HARDWARE_GCM` is disabled
See merge request espressif/esp-idf!28149
2024-01-08 13:35:04 +08:00
7c004fd7f8
Merge branch 'bugfix/fix_dynamic_mbedtls_crash' into 'master'
...
mbedtls: Fix enable dynamic mbedtls will occur heap corruption when server support TLS renegotiation
Closes IDF-8529
See merge request espressif/esp-idf!28086
2024-01-08 11:39:39 +08:00
8ac4d9ab99
fix(mbedtls/gcm): Avoid using GCM hardware when config MBEDTLS_HARDWARE_GCM is disabled
2024-01-04 12:20:11 +05:30
c1ed825d3e
fix(mbedtls/gcm): Fix build failure when config MBEDTLS_HARDWARE_GCM is disabled
2024-01-04 12:20:10 +05:30
3c5a4f9e8a
ci(p4): added todo jira for disabled tests on p4
2024-01-04 09:36:38 +08:00
907b876354
ci(p4): temporarily disable failed ci tests on p4
2024-01-04 09:36:06 +08:00
b0b6980421
mbedtls: Fix enable dynamic mbedtls will occur heap corruption when server support TLS renegotiation
2023-12-22 17:23:42 +08:00
01f50ee7f5
refactor: migrate atecc608a_ecdsa example to crypto authlib repository
...
- ESP32-WROOM-32SE has been discontinued and marked as NRND
- This change removes all references to ESP32-WROOM-32SE from IDF
- The example has been migrated to esp-cryptoauthlib repository and it
can be used through the component manager
(https://components.espressif.com/components/espressif/esp-cryptoauthlib )
2023-12-22 09:11:41 +05:30
d3afab15bd
Merge branch 'update/update_certs_bundle' into 'master'
...
Update esp_crt_bundle certificates
See merge request espressif/esp-idf!27932
2023-12-20 20:36:23 +08:00
a596ca56a8
fix(mbedtls): fix -Wstrict-prototypes warning when compiling on Linux
2023-12-19 13:29:15 +01:00
8f0f7f007c
change(mbedtls/crt_bundle): Update esp_crt_bundle certificates
2023-12-19 14:40:56 +08:00
e3191df37a
Merge branch 'change/deprecate_legacy_xtensa_include_path' into 'master'
...
change(xtensa): Deprecate legacy include paths
Closes IDF-7230
See merge request espressif/esp-idf!26725
2023-12-05 15:05:29 +08:00
8c2949a97e
change(xtensa): Deprecate ".../xtensa_timer.h" include path
...
This commit deprecates the "freertos/xtensa_timer.h" and "xtensa/xtensa_timer.h"
include paths. Users should use "xtensa_timer.h" instead.
- Replace legacy include paths
- Removed some unnecessary includes of "xtensa_timer.h"
- Add warning to compatibility header
2023-11-30 21:58:52 +08:00
47821f6299
fix(mbedtls/aes): fix AES interrupt allocation for AES-GCM operations
2023-11-30 11:59:59 +05:30
7505667e7d
Merge branch 'bugfix/esp32h2_ecdsa_hardware_k' into 'master'
...
fix(esp32h2): program use_hardware_k efuse bit for ECDSA key purpose
Closes IDF-8508 and IDF-8506
See merge request espressif/esp-idf!26918
2023-11-17 15:10:12 +08:00
ae05f3f140
fix(mbedtls): Removed redundant menuconfig entry
2023-11-15 04:59:52 +00:00
fec7fc30f1
fix(api-docs): include in the ECDSA APIs for doxygen build
2023-11-15 09:42:27 +05:30
7bb29086df
docs: add ECDSA peripheral chapter for H2/P4
...
- Add ECDSA peripheral chapter and instructions to program efuse key block
- Update security guide for ECDSA peripheral mention for device identity
- Link with ESP-TLS guide about using ECDSA peripheral in TLS connection
2023-11-15 09:42:26 +05:30
f9501f6ea9
fix(ecdsa): remove unused k_mode from the ECDSA HAL/LL API
...
For ESP32-H2 case, the hardware k mode is always enforced through
efuse settings (done in startup code).
For ESP32-P4 case, the software k mode is not supported in the peripheral
itself and code was redundant.
2023-11-15 09:42:26 +05:30
d3be7bda05
fix(mbedtls): move interrupt allocation during initialization phase
2023-11-06 11:20:53 +05:30
95703297a6
Merge branch 'ci/psram_config_fix' into 'master'
...
ci: fix warnings for invalid kconfig option
See merge request espressif/esp-idf!23250
2023-11-02 13:44:04 +08:00
77bb19c49e
ci(build): fixed/ignored warnings from unknown symbols in sdkconfig.defaults
2023-11-01 01:14:00 +00:00
5b047057ca
feat(mbedtls): add new deprecated cert list and relevant config
...
Cert bundle is periodically updated with the upstream Mozilla's NSS
root cert store. Retracted certs are moved to deprecated list now and
an additional config allows to include them in the default bundle. New
config is kept default disabled but can be enabled if one would like
to ensure 100% compatibility w.r.t. cert bundle across IDF minor or
patch releases. In IDF major release the deprecated list shall be reset.
2023-10-29 12:21:22 +05:30
24446bfab1
change(esp_crt_bundle): Update esp_crt_bundle certificates
2023-10-29 12:21:21 +05:30
804ed172dd
fix(mbedtls): allow to use built in entropy implementation for linux target
2023-10-26 15:12:42 +05:30
e882782f0d
feat(mbedtls): add new option CONFIG_MBEDTLS_USE_CRYPTO_ROM_IMPL for mbedtls pytest
2023-10-23 13:10:44 +08:00
37ec1cc592
feat(mbedtls): support C2 mbedtls can use crypto algorithm in ROM
2023-10-23 13:10:44 +08:00
dbc33ca7aa
Merge branch 'feature/add_intr_priority_config_option' into 'master'
...
feat(mbedtls): Add config for interrupt priority in AES and RSA
Closes IDF-7963 and IDF-7964
See merge request espressif/esp-idf!26190
2023-10-16 11:33:03 +08:00
6b62065b92
Merge branch 'fix/crypto_periphs_use_rcc_atomic_blocks' into 'master'
...
Use rcc atomic blocks to enable/reset crypto peripherals
See merge request espressif/esp-idf!25811
2023-10-13 22:37:58 +08:00
cf4a7bb09d
feat(mbedtls): Add config for interrupt priority in AES and RSA(MPI)
2023-10-12 11:06:13 +05:30
Mahavir Jain