Commit Graph

1956 Commits (bigbrett-patch-2)

Author SHA1 Message Date
Brett Nicholas ee49a93524
Update wolfHSM.md 2024-12-13 08:34:26 -07:00
Brett Nicholas 8e20c1938a
Update wolfHSM.md
add ML-DSA to list of supported algorithms for wolfHSM
2024-12-13 08:33:15 -07:00
Brett Nicholas 21a4082952
Merge pull request #521 from danielinux/build-keytools-windows
Remove compile-time dependencies from key tools
2024-12-05 16:56:42 -07:00
David Garske fae36f2adf Reserve enough size for the ML-DSA public key in gen. 2024-12-05 14:44:30 -08:00
David Garske 6bed80fbc2 ML-DSA default is level 2. The keytools must be able to support all ML-DSA levels at run-time using `ML_DSA_LEVEL` environment variable. wolfBoot needs to be built with the correct level specified in the .config. 2024-12-05 14:25:43 -08:00
David Garske 4991eabb18 Peer review fixes. Default to ML-DSA level 2. 2024-12-05 13:39:47 -08:00
David Garske 35b98e723b Fix the Windows keytools artifact upload. 2024-12-05 11:32:22 -08:00
David Garske 29794f2ad8 Update wolfssl submodule to latest master that includes https://github.com/wolfSSL/wolfssl/pull/8257 2024-12-05 10:50:25 -08:00
David Garske 8cdefaae20 Fix to remove ext_XMS artifact from keytools Makefile. Caused mingw readdir error. 2024-12-05 10:45:52 -08:00
David Garske 4ac4de51ac Fix ML-DSA level comment. 2024-12-05 10:29:00 -08:00
David Garske eddf0bd234 Progress getting the Windows tools to build. 2024-12-05 08:36:02 -08:00
Daniele Lacamera c3fe5055f6 Fix check on ML_DSA pubkey size at runtime 2024-12-03 15:23:40 +01:00
Daniele Lacamera 51eff3e71d Adjusted size for ML_DSA build 2024-12-03 15:03:45 +01:00
Daniele Lacamera 5ab661677f keygen: removed compile-time parameters (lms, xmss) 2024-12-03 14:58:49 +01:00
Daniele Lacamera d5e402ebde Removing compile-time parameters from keygen 2024-12-03 14:50:54 +01:00
Daniele Lacamera 7132a13545 Complete generic sign 2024-12-03 11:10:16 +01:00
David Garske 06bbed4280 Peer review feedback. 2024-12-02 19:41:26 +01:00
David Garske 463c482692 Fix for building NXP LS1028A with SPI enabled. 2024-12-02 19:41:26 +01:00
David Garske 2709af28c2 For Rasp3 don't try and load the .data region (already running from RAM) by setting NO_XIP. 2024-12-02 19:41:26 +01:00
David Garske a07f3783b6 More fixes for aarch64 platforms. 2024-12-02 19:41:26 +01:00
David Garske d6ca1e1a88 Fixes for Raspi and Zynqmp builds. 2024-12-02 19:41:26 +01:00
David Garske 6e39fd1b63 Fix build for ZCU102. Fix ARM ASM defaults. 2024-12-02 19:41:26 +01:00
David Garske 7500ae9526 Fix arch.mk aarch64 and ASM. 2024-12-02 19:41:26 +01:00
David Garske fea8610ae7 Reverted boot assembly back to changes from original PR #306. This version was a refactor work in progress. 2024-12-02 19:41:26 +01:00
David Garske 467bfc7770 Cleanup arch.mk. 2024-12-02 19:41:26 +01:00
David Garske d007c9af08 Initial support for NXP LS1028A. Booting into OCRAM app. Updates to ARMv8 startup. 2024-12-02 19:41:26 +01:00
Daniele Lacamera 04d2ecd246 Remove dependency from PQC parameters. Speed up tests. 2024-12-02 18:55:32 +01:00
Daniele Lacamera b2bf2988d3 Shorten tests by not re-building keytools 2024-12-02 14:19:01 +01:00
Daniele Lacamera 05d0e92ecf Removed forced inflation of header size in `sign` 2024-12-02 14:07:43 +01:00
Daniele Lacamera 137a97fbae Correct include order in nrf53 test app 2024-12-02 12:27:27 +01:00
Daniele Lacamera b0e3000d88 Added libwolfboot to nrf53 app build 2024-12-02 12:19:10 +01:00
Daniele Lacamera d3935774d9 Fix header size in hybrid mode 2024-12-02 12:03:32 +01:00
David Garske 34bb4f651c
Merge pull request #522 from LinuxJedi/typo_fixes
Fix typos in the STM32U5 section of Targets.md
2024-11-29 08:38:55 -08:00
Andrew Hutchings 75cbe5781f Fix typos in the STM32U5 section of Targets.md 2024-11-28 11:18:05 +00:00
Daniele Lacamera a31ddfc553 Fixed include order 2024-11-28 11:28:31 +01:00
Daniele Lacamera b6d3d4a666 Renode test: add V=1 2024-11-28 11:18:19 +01:00
Daniele Lacamera 10cdc5408a Add env variable to unit test 2024-11-28 11:06:16 +01:00
Daniele Lacamera 4007d14ef0 Added dep to target.h on tpmtools 2024-11-26 13:19:35 +01:00
Daniele Lacamera 75efbd9cfb Removed all compile-time dependency from keytools 2024-11-26 13:17:00 +01:00
Daniele Lacamera 97fb3b68af Test: add IMAGE_HEADER_SIZE to sign command 2024-11-26 11:17:35 +01:00
Daniele Lacamera bc5e2ce2b8 Makefile passes IMAGE_HEADER_SIZE to sign tool. 2024-11-26 11:07:05 +01:00
Daniele Lacamera 93866f7376 Use minimum 512B of header with delta updates 2024-11-26 11:04:09 +01:00
Daniele Lacamera 6c8aafe09d Remove keytools dependency on IMAGE_HEADER_SIZE.
- Added getenv() to override the value at runtime
- Removed doc on old python tools
2024-11-26 10:57:06 +01:00
David Garske bf4c8017dd Test: adding action to build keytools on windows.
* Update key tools VS project to 2022.
* Fix a few warnings in sign.c
* Fix issues with windows already having min/max.
* Fix (workaround) issue with key tools needing WOLFBOOT_SECTOR_SIZE.
2024-11-25 14:38:29 -08:00
David Garske 2cdc1f5abb
Merge pull request #520 from danielinux/delta-base-hash
Delta update: check sha digest of base image
2024-11-22 08:31:09 -08:00
Daniele Lacamera 3a69b0e41a Don't fail if the image contains no base sha
+ Added --no-base-sha option to sign
2024-11-22 11:58:17 +01:00
Daniele Lacamera adb020470a Change header size for delta test to fit base hash 2024-11-21 15:59:57 +01:00
Daniele Lacamera 7347f334b3 Delta update: check sha digest of base image
Only allow delta update if the sha digest of the base image matches the
expected value. This is to prevent the delta update from being applied
to an image that is not the expected base image, even if the version
matches.

The mismatch should never happen in real-life scenarios, but it is to check
for false positives during integration, testing and development.
2024-11-21 14:28:40 +01:00
Brett Nicholas 6d1adc2376 Add documention for `--exportpubkey` and `--nolocalkeys` to Signing.md 2024-11-13 09:52:49 +01:00
Brett Nicholas f9cbc57795 review feedback 2024-11-13 09:52:49 +01:00