esp-idf/components/bootloader_support/include
Mahavir Jain 83ec466b26 fix(ota): additional checks for secure version in anti-rollback case
Some additional checks related to secure version of the application in
anti-rollback case have been added to avoid any attempts to boot lower
security version but valid application (e.g., passive partition image).

- Read secure_version under sha256 protection

- First check has been added in the bootloader to ensure correct secure
  version after application verification and loading stage. This check
  happens before setting up the flash cache mapping and handling over
  the final control to application. This check ensures that application
  was not swapped (e.g., to lower security version but valid image) just
  before the load stage in bootloader.

- Second check has been added in the application startup code to ensure
  that currently booting app has higher security version than the one
  programmed in the eFuse for anti-rollback scenario. This will ensure
  that only the legit application boots-up on the device for
  anti-rollback case.
2024-02-15 15:10:28 +02:00
..
bootloader_clock.h soc: Adds efuse hal 2022-02-24 22:20:09 +08:00
bootloader_common.h bootloader_support: Adds API to detect Factory reset has happened 2023-03-22 02:21:54 +08:00
bootloader_mem.h bootloader: update copyright notice 2021-05-10 04:58:34 +02:00
bootloader_memory_utils.h heap: Prevent alloc from IRAM to call dram_alloc_to_iram() on esp32c6 target 2023-01-23 07:42:20 +01:00
bootloader_random.h refactor (docs, rng): Clarify RNG usage 2022-04-11 10:55:28 +08:00
bootloader_util.h driver: fix public header exceptions for driver 2022-07-22 00:12:36 +00:00
esp_app_format.h Add ESP32-H2 chip id in esp_chip_id_t enum in esp_app_format.h header file 2023-06-08 10:34:23 +05:30
esp_flash_data_types.h bootloader: update copyright notice 2021-05-10 04:58:34 +02:00
esp_flash_encrypt.h security: Adds new APIs to check that all eFuse security features are enabled correctly 2023-01-10 23:35:13 +08:00
esp_flash_partitions.h Merge branch 'update_copyright_notice_bootloader_support' into 'master' 2021-05-19 00:26:35 +00:00
esp_image_format.h fix(ota): additional checks for secure version in anti-rollback case 2024-02-15 15:10:28 +02:00
esp_secure_boot.h security: Adds new APIs to check that all eFuse security features are enabled correctly 2023-01-10 23:35:13 +08:00