WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity

hal: pic32cz: specify that HSM direct loading is not for production

pull/858/head
Marco Oliverio 2026-08-12 11:43:06 +02:00 committed by Daniele Lacamera
parent c01940d947
commit 7789225e9e
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
hal/pic32cz.c
View File

@ -205,6 +205,11 @@ int hal_hsm_init_connect(void)
FCW_MUTEX = FCW_MUTEX_RELEASE;
#if defined(HSM_FW_ADDR) && defined(HSM_FW_SIZE)
/* DEV/NON-PRODUCTION: This code path loads and boots the HSM firmware image
* from a raw address/size without performing any hash or signature
* verification. Production builds must authenticate the HSM firmware via
* ROM root-of-trust */
/* Load/boot the HSM core from the firmware image; blocks until it has booted
* and acknowledged. Skipped when HSM_FW_BIN is unset: the firmware is then
* assumed already resident and wolfBoot connects to the running server. */