Brett Nicholas
ee49a93524
Update wolfHSM.md
2024-12-13 08:34:26 -07:00
Brett Nicholas
8e20c1938a
Update wolfHSM.md
...
add ML-DSA to list of supported algorithms for wolfHSM
2024-12-13 08:33:15 -07:00
Brett Nicholas
21a4082952
Merge pull request #521 from danielinux/build-keytools-windows
...
Remove compile-time dependencies from key tools
2024-12-05 16:56:42 -07:00
David Garske
fae36f2adf
Reserve enough size for the ML-DSA public key in gen.
2024-12-05 14:44:30 -08:00
David Garske
6bed80fbc2
ML-DSA default is level 2. The keytools must be able to support all ML-DSA levels at run-time using `ML_DSA_LEVEL` environment variable. wolfBoot needs to be built with the correct level specified in the .config.
2024-12-05 14:25:43 -08:00
David Garske
4991eabb18
Peer review fixes. Default to ML-DSA level 2.
2024-12-05 13:39:47 -08:00
David Garske
35b98e723b
Fix the Windows keytools artifact upload.
2024-12-05 11:32:22 -08:00
David Garske
29794f2ad8
Update wolfssl submodule to latest master that includes https://github.com/wolfSSL/wolfssl/pull/8257
2024-12-05 10:50:25 -08:00
David Garske
8cdefaae20
Fix to remove ext_XMS artifact from keytools Makefile. Caused mingw readdir error.
2024-12-05 10:45:52 -08:00
David Garske
4ac4de51ac
Fix ML-DSA level comment.
2024-12-05 10:29:00 -08:00
David Garske
eddf0bd234
Progress getting the Windows tools to build.
2024-12-05 08:36:02 -08:00
Daniele Lacamera
c3fe5055f6
Fix check on ML_DSA pubkey size at runtime
2024-12-03 15:23:40 +01:00
Daniele Lacamera
51eff3e71d
Adjusted size for ML_DSA build
2024-12-03 15:03:45 +01:00
Daniele Lacamera
5ab661677f
keygen: removed compile-time parameters (lms, xmss)
2024-12-03 14:58:49 +01:00
Daniele Lacamera
d5e402ebde
Removing compile-time parameters from keygen
2024-12-03 14:50:54 +01:00
Daniele Lacamera
7132a13545
Complete generic sign
2024-12-03 11:10:16 +01:00
David Garske
06bbed4280
Peer review feedback.
2024-12-02 19:41:26 +01:00
David Garske
463c482692
Fix for building NXP LS1028A with SPI enabled.
2024-12-02 19:41:26 +01:00
David Garske
2709af28c2
For Rasp3 don't try and load the .data region (already running from RAM) by setting NO_XIP.
2024-12-02 19:41:26 +01:00
David Garske
a07f3783b6
More fixes for aarch64 platforms.
2024-12-02 19:41:26 +01:00
David Garske
d6ca1e1a88
Fixes for Raspi and Zynqmp builds.
2024-12-02 19:41:26 +01:00
David Garske
6e39fd1b63
Fix build for ZCU102. Fix ARM ASM defaults.
2024-12-02 19:41:26 +01:00
David Garske
7500ae9526
Fix arch.mk aarch64 and ASM.
2024-12-02 19:41:26 +01:00
David Garske
fea8610ae7
Reverted boot assembly back to changes from original PR #306 . This version was a refactor work in progress.
2024-12-02 19:41:26 +01:00
David Garske
467bfc7770
Cleanup arch.mk.
2024-12-02 19:41:26 +01:00
David Garske
d007c9af08
Initial support for NXP LS1028A. Booting into OCRAM app. Updates to ARMv8 startup.
2024-12-02 19:41:26 +01:00
Daniele Lacamera
04d2ecd246
Remove dependency from PQC parameters. Speed up tests.
2024-12-02 18:55:32 +01:00
Daniele Lacamera
b2bf2988d3
Shorten tests by not re-building keytools
2024-12-02 14:19:01 +01:00
Daniele Lacamera
05d0e92ecf
Removed forced inflation of header size in `sign`
2024-12-02 14:07:43 +01:00
Daniele Lacamera
137a97fbae
Correct include order in nrf53 test app
2024-12-02 12:27:27 +01:00
Daniele Lacamera
b0e3000d88
Added libwolfboot to nrf53 app build
2024-12-02 12:19:10 +01:00
Daniele Lacamera
d3935774d9
Fix header size in hybrid mode
2024-12-02 12:03:32 +01:00
David Garske
34bb4f651c
Merge pull request #522 from LinuxJedi/typo_fixes
...
Fix typos in the STM32U5 section of Targets.md
2024-11-29 08:38:55 -08:00
Andrew Hutchings
75cbe5781f
Fix typos in the STM32U5 section of Targets.md
2024-11-28 11:18:05 +00:00
Daniele Lacamera
a31ddfc553
Fixed include order
2024-11-28 11:28:31 +01:00
Daniele Lacamera
b6d3d4a666
Renode test: add V=1
2024-11-28 11:18:19 +01:00
Daniele Lacamera
10cdc5408a
Add env variable to unit test
2024-11-28 11:06:16 +01:00
Daniele Lacamera
4007d14ef0
Added dep to target.h on tpmtools
2024-11-26 13:19:35 +01:00
Daniele Lacamera
75efbd9cfb
Removed all compile-time dependency from keytools
2024-11-26 13:17:00 +01:00
Daniele Lacamera
97fb3b68af
Test: add IMAGE_HEADER_SIZE to sign command
2024-11-26 11:17:35 +01:00
Daniele Lacamera
bc5e2ce2b8
Makefile passes IMAGE_HEADER_SIZE to sign tool.
2024-11-26 11:07:05 +01:00
Daniele Lacamera
93866f7376
Use minimum 512B of header with delta updates
2024-11-26 11:04:09 +01:00
Daniele Lacamera
6c8aafe09d
Remove keytools dependency on IMAGE_HEADER_SIZE.
...
- Added getenv() to override the value at runtime
- Removed doc on old python tools
2024-11-26 10:57:06 +01:00
David Garske
bf4c8017dd
Test: adding action to build keytools on windows.
...
* Update key tools VS project to 2022.
* Fix a few warnings in sign.c
* Fix issues with windows already having min/max.
* Fix (workaround) issue with key tools needing WOLFBOOT_SECTOR_SIZE.
2024-11-25 14:38:29 -08:00
David Garske
2cdc1f5abb
Merge pull request #520 from danielinux/delta-base-hash
...
Delta update: check sha digest of base image
2024-11-22 08:31:09 -08:00
Daniele Lacamera
3a69b0e41a
Don't fail if the image contains no base sha
...
+ Added --no-base-sha option to sign
2024-11-22 11:58:17 +01:00
Daniele Lacamera
adb020470a
Change header size for delta test to fit base hash
2024-11-21 15:59:57 +01:00
Daniele Lacamera
7347f334b3
Delta update: check sha digest of base image
...
Only allow delta update if the sha digest of the base image matches the
expected value. This is to prevent the delta update from being applied
to an image that is not the expected base image, even if the version
matches.
The mismatch should never happen in real-life scenarios, but it is to check
for false positives during integration, testing and development.
2024-11-21 14:28:40 +01:00
Brett Nicholas
6d1adc2376
Add documention for `--exportpubkey` and `--nolocalkeys` to Signing.md
2024-11-13 09:52:49 +01:00
Brett Nicholas
f9cbc57795
review feedback
2024-11-13 09:52:49 +01:00