Mahavir Jain
2a1ede3f9d
Merge branch 'update_v4.4/mbedtls_v2.28.2' into 'release/v4.4'
...
mbedtls: Update to release v2.28.2 (v4.4)
See merge request espressif/esp-idf!21896
2023-02-02 22:27:22 +08:00
harshal.patil
ecdd202285
mbedtls/port: added stream_block parameter sanity check
2023-01-25 15:38:28 +05:30
harshal.patil
734724ba79
mbedtls: fix esp_aes_crypt_ctr writing to null stream block
2023-01-25 15:38:28 +05:30
harshal.patil
865a72eb8f
mbedtls: added SOC_AES_SUPPORT_AES_192 check in esp_aes_gcm_setkey()
2023-01-25 15:38:28 +05:30
Laukik Hase
0f46f0cfa4
mbedtls: Update config options as per v2.28.2 release
2023-01-04 15:36:24 +05:30
Laukik Hase
e7fb0dbdaa
mbedtls: Update to v2.28.2
...
- Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2
2023-01-04 14:05:56 +05:30
Aditya Patwardhan
606ada809a
esp_rsa_sign_alt: Fix esp_init_ds_data_ctx API to not modify user defined data when it is given directory from flash
2022-08-23 13:27:03 +05:30
Roland Dobai
f935c17a95
Tools: Fix Python style warnings
2022-08-09 14:30:52 +02:00
Laukik Hase
f7c20f3718
mbedtls: Update to release v2.28.1
...
- Changelog: https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.1
2022-07-14 10:01:39 +05:30
Laukik Hase
9e2369cb79
ci: Enable custom certificate bundle
test for ESP32-S3
...
- Increase leakage limit for `test performance RSA key operations`
UT by 64 bytes
2022-06-23 16:32:26 +05:30
Laukik Hase
e114850dda
mbedtls: Acquire lock before enabling MPI (RSA) hardware
...
- For ESP32-S3
2022-06-23 16:32:26 +05:30
Mahavir Jain
660b876465
esp_crt_bundle: Fix build problems if MBEDTLS_CERTIFICATE_BUNDLE is disabled
...
Exclude source and include file from build list if certificate bundle feature
is disabled.
Closes https://github.com/espressif/esp-idf/issues/8714
Closes IDFGH-7106
2022-06-12 09:29:12 +05:30
Li Jingyi
4896d0c8f3
mbedtls: fix ssl server crash when enable mbedtls dynamic buffer
...
Not free keycert until MBEDTLS_SSL_CLIENT_KEY_EXCHANGE for rsa key exchange methods, because keycert will be used to parse client key exchange.
2022-06-08 14:27:41 +08:00
Espressif BOT
2d91698324
Update esp_crt_bundle certificates
2022-06-02 11:03:24 +05:30
Aditya Patwardhan
a1d5a9b971
esp_crt_bundle: Add bounds checking for the "esp_crt_bundle_set" API.
...
Closes https://github.com/espressif/esp-idf/issues/8397
2022-06-01 15:09:50 +05:30
Mahavir Jain
ec0f7850a0
mbedtls: move locally managed root certificates to separate file
...
Purpose:
This will allow for easily automating periodic updates to
"cacrt_all.pem" file.
Note:
For now newly created "cacrt_local.pem" contains single "DST Root CA X3"
which we are keeping to manage compatibility with endpoints like
"howsmyssl.com". Please note this Root CA is expired and is not part of
Mozilla’s NSS root certificate store.
2022-06-01 15:07:31 +05:30
Laukik Hase
43d3cb37a0
esp_crt_bundle: Fix build error
...
- When `esp_crt_bundle.h` is included before any config,
a build error (`esp_err_t` not defined) is observed
Closes https://github.com/espressif/esp-idf/issues/8606
2022-06-01 15:06:59 +05:30
Li Jingyi
81c195fed2
fix(mbedtls): fix ssl server memory leak when enable mbedtls dynamic buffer function
2022-05-19 10:41:40 +08:00
Laukik Hase
51fc67f5fa
ci: Fix issues for build stage
...
- Fixed logs expecting different format specifier
- Updated ignore list for check_public_header test
- Updated functions ported from mbedTLS
- Fix for make-system build errors
2022-02-02 15:03:48 +05:30
Laukik Hase
11366d643f
mbedtls: Added option MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
...
- Removed code regarding MBEDTLS_DYNAMIC_FREE_PEER_CERT
(config was kept for backward compatibility)
- Combined mbedTLS v2.28.x related options under a separate Kconfig menu
2022-02-02 10:56:48 +05:30
Laukik Hase
76b9beff3c
mbedtls: Moved mbedtls_mpi_mul_int to port layer
2022-02-02 10:56:48 +05:30
Laukik Hase
76658d5066
mbedtls: Added config options for v2.28.0 upgrade
2022-02-02 10:56:48 +05:30
Laukik Hase
0fdc5f7490
mbedtls: Upgrade to v2.28.0
2022-02-02 10:56:13 +05:30
Jiang Jiang Jian
7f48664eda
Merge branch 'feature/mbedtls-2.16.12-integration_v4.4' into 'release/v4.4'
...
mbedtls: upgrade to release v2.16.12 (v4.4)
See merge request espressif/esp-idf!16483
2021-12-23 03:26:17 +00:00
Li Jingyi
c91afab332
fix(mbedtls): fix compiling error when open MBEDTLS_SSL_PROTO_DTLS and disable MBEDTLS_SSL_PROTO_DTLS when open MBEDTLS_DYNAMIC_BUFFER
2021-12-21 16:31:47 +08:00
Mahavir Jain
3e3e1a9a9d
mbedtls: upgrade to release v2.16.12
...
For release notes, please refer to:
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.12
2021-12-21 13:58:40 +05:30
Mahavir Jain
d0b465c7cd
mbedtls: small documentation update
2021-12-21 13:58:40 +05:30
Jiang Jiang Jian
141c1cd004
Merge branch 'bugfix/crypto_allocate_lldesc_v4.4' into 'release/v4.4'
...
crypto: dont create DMA descriptors on the stack (v4.4)
See merge request espressif/esp-idf!16323
2021-12-08 13:31:41 +00:00
Marius Vikhammer
a1ee43fe9d
crypto: also apply cache writeback/invalidate for SPIRAM_USE_MEMMAP
...
Closes https://github.com/espressif/esp-idf/issues/7944
2021-12-08 16:10:19 +08:00
Marius Vikhammer
3b3826b61c
crypto: allocate all DMA descriptors to DMA capable memory.
...
These were previously placed on the stack, but the stack could be placed in
RTC RAM which is not DMA capable.
2021-12-08 16:10:18 +08:00
Li Jingyi
03b7ffdf4a
feat(mbedtls): modify __wrap_mbedtls_ssl_setup to decrease SSL peak heap cost
2021-12-06 17:07:11 +08:00
Mahavir Jain
a28e0bf064
mbedtls: remove wrap from component.mk as well
...
Note: This was not required in original MR, as master branch does
not support GNU Make.
2021-12-02 17:13:31 +05:30
Mahavir Jain
7fe9d41e33
esp_bignum: move check for supported MPI bits at start of API
...
This can allow hardware MPI API to return as soon as it identifies
that it can handle require bitlength operation.
2021-12-02 15:07:08 +05:30
Mahavir Jain
9cb4948a23
mbedtls: update mbedtls submodule pointer for MPI API change
2021-12-02 15:07:08 +05:30
Mahavir Jain
99c9637e9b
mbedtls: fix hardware MPI (bignum) related regression
...
In commit de22f3a4e5
, combination of
hardware and software MPI (bignum) related approach was used to
work around chip (e.g. ESP32-C3) limitation of max 3072 bits support.
This was done using linker "--wrap" flag but since the relevant API is
being used in same translation (compilation unit), hardware mode was not
getting used in some cases (e.g., RSA key generation).
This commit modified internal mbedTLS API and makes software+hardware
combination deterministic.
2021-12-02 15:07:08 +05:30
Mahavir Jain
e0e6523c09
mbedtls: update kconfig help to correct on supported MPI bits
2021-12-02 15:07:07 +05:30
Marius Vikhammer
e3a771511a
aes: fix potential unaligned access in aes-gcm
2021-11-12 12:28:28 +08:00
Aditya Patwardhan
2d1f18efea
Updated the cacrt_all.pem file with latest Root certificate list.
2021-10-17 00:01:37 +08:00
Victor Morales
4e45f13e2d
esp_crt_bundle: remove EC-ACC certificate
...
Fixes bug #7631
2021-10-01 14:18:46 -07:00
Sachin Billore
667017d517
ESP32S3 support for ESP-MQTT SSL Mutual Authentication with Digital Signature
...
Closes IDF-3859
2021-09-06 11:17:30 +05:30
Marius Vikhammer
63280dfec0
aes/sha: fixed driver reseting the wrong GDMA channel
...
Driver was using the channel ID from tx when reseting rx.
But since rx and tx is not necessarily from the same pair this could lead
to the driver reseting the wrong DMA channel.
2021-08-30 10:37:03 +08:00
Marius Vikhammer
bf21cf0c99
aes/sha: change gdma transfer ability for sram to be 1 byte aligned
...
Previously GDMA transfer ability was set to 4 bytes, but buffers might
be not fulfill these requirements
2021-08-05 11:02:17 +08:00
Li Jingyi
b8892137f5
mbedtls: Add CONFIG_MBEDTLS_SSL_PROTO_GMTSSL1_1 for support GMSSL component
...
The configure will be enabled for GMSSL component and disabled as default because of it doesn't provide by IDF project.
2021-07-28 19:54:58 +08:00
Michael (XIAO Xufeng)
59195b6fb3
Merge branch 'bugfix/update_gdma_soc' into 'master'
...
gdma: alignment setting for PSRAM transfer
Closes IDF-1524
See merge request espressif/esp-idf!13976
2021-07-17 14:04:03 +00:00
Renz Bagaporo
7c22cccb9c
esp32: cleanup build script
2021-07-16 20:14:27 +08:00
Renz Bagaporo
452bfda367
esp32: move dport_access
2021-07-16 20:14:26 +08:00
Renz Bagaporo
702e41e1c8
esp32s2: move crypto related functions
2021-07-16 20:14:26 +08:00
morris
d9819bc7ae
gdma: set transfer ability
2021-07-16 14:47:09 +08:00
morris
3176ba11d8
gdma: update DMA soc data for esp32-s3
2021-07-16 14:47:09 +08:00
Mahavir Jain
4c41a5bbd0
Merge branch 'feature/upgrade_mbedtls_to_v2.16.11' into 'master'
...
mbedtls: upgrade to release v2.16.11
Closes IDF-3429
See merge request espressif/esp-idf!14294
2021-07-13 08:12:46 +00:00