WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity

support AURIX hw accel

pull/772/head
Brett Nicholas 2026-04-23 13:37:47 -06:00 committed by Daniele Lacamera
parent 8ac4838b92
commit 24841a0eb8
2 changed files with 17 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
arch.mk
View File

@ -1633,15 +1633,13 @@ ifeq ($(ARCH), AURIX_TC3)
$(WOLFHSM_INFINEON_TC3XX)/port/server/io.o \
$(WOLFHSM_INFINEON_TC3XX)/port/server/sysmem.o \
$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_hh_hsm.o \
$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_utils.o
# SW only for now, as we dont have the right protection macros
#$(WOLFHSM_INFINEON_TC3XX)/port/server/ccb_hsm.o \
#$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_hash.o \
#$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_aes.o \
#$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_cmac.o \
#$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_pk.o \
#$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_trng.o
$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_utils.o\
$(WOLFHSM_INFINEON_TC3XX)/port/server/ccb_hsm.o \
$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_hash.o \
$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_aes.o \
$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_cmac.o \
$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_pk.o \
$(WOLFHSM_INFINEON_TC3XX)/port/server/tchsm_trng.o
endif
# HSM BSP specific object files

14
hal/aurix_tc3xx.c
View File

@ -68,7 +68,7 @@
#include "wolfhsm/wh_nvm_flash.h"
#include "tchsm_hh_hsm.h"
#include "port_halflash_df1.h"
#include "ccb_hsm.h"
#endif
#endif /* WOLFBOOT_ENABLE_WOLFHSM_CLIENT || WOLFBOOT_ENABLE_WOLFHSM_SERVER */
@ -117,8 +117,8 @@ const whNvmId hsmNvmIdCertRootCA = 1;
#elif defined(WOLFBOOT_ENABLE_WOLFHSM_SERVER) /*WOLFBOOT_ENABLE_WOLFHSM_CLIENT*/
/* map wolfBoot HAL layer wofHSM exports to their tchsm config vals */
const int hsmDevIdHash = INVALID_DEVID; /*HSM_DEVID once CCB enabled*/
const int hsmDevIdPubKey = INVALID_DEVID; /*HSM_DEVID once CCB enabled*/
const int hsmDevIdHash = HSM_DEVID;
const int hsmDevIdPubKey = HSM_DEVID;
const whNvmId hsmNvmIdCertRootCA = 1;
#ifdef EXT_ENCRYPT
#error "AURIX does not support firmware encryption with wolfHSM(yet)"
@ -860,7 +860,7 @@ int hal_hsm_server_init(void)
.comm_config = commServerConfig,
.nvm = nvmCtx,
.crypto = cryptoCtx,
.devId = INVALID_DEVID, /*HSM_DEVID once CCB enabled */
.devId = HSM_DEVID,
}};
rc = wh_Nvm_Init(nvmCtx, nvmCfg);
@ -869,6 +869,12 @@ int hal_hsm_server_init(void)
}
(void)wolfCrypt_Init();
rc = wc_CryptoCb_RegisterDevice(HSM_DEVID, hsmCryptoCb, NULL);
if (rc != 0) {
wolfBoot_printf(
"[ERROR] cryptocb registration for HASH failed, rc=%d\n", rc);
wolfBoot_panic();
}
rc = wc_InitRng_ex(cryptoCtx->rng, NULL, INVALID_DEVID);
if (rc != WH_ERROR_OK) {