Commit Graph

2389 Commits (enc_block_size)

Author SHA1 Message Date
David Garske 601e46e480 Improved encryption constants between the bootloader and the signing tool. Allows the sign tool to properly use the correct block size for each encryption algorithm (64 for ChaCha, 16 for AES). 2025-12-31 11:25:09 -08:00
Mattia Moffa 0462e0a198 More consistent formatting 2025-12-30 11:15:41 +01:00
Mattia Moffa ce4ae39d65 Address copilot suggestions 2025-12-30 11:15:41 +01:00
Mattia Moffa 7800c364e9 Fix cppcheck complaint 2025-12-30 11:15:41 +01:00
Mattia Moffa f12d2f06b4 Add PKCS11 backend for encrypted partitions 2025-12-30 11:15:41 +01:00
Aidan Garske aa39be21a3 Address copilot review 2025-12-30 11:13:49 +01:00
Aidan Garske 145256ad29 Add Image Inspection Functionality to boot_status.py 2025-12-30 11:13:49 +01:00
gojimmypi c0ef637ae5 Introduce new wolfboot image inspection scripts 2025-12-30 11:13:49 +01:00
David Garske d38551a143 Add update_disk encryption support. 2025-12-30 11:10:21 +01:00
David Garske 249c8282f5 Add kernel boot args (for rootfs). Added optional SD tuning support. Yocto Linux is fully working now! 2025-12-30 11:10:21 +01:00
David Garske 2e54cf75a7 Fix for Yocto Linux boot issue with smpboot and hartid. 2025-12-30 11:10:21 +01:00
David Garske 609fd81890 Fixes for PolarFire SoC eMMC/SD to stabilize and add read DMA support. Refactor the RISC-V boot/vector code for use on both 32-bit and 64-bit architectures. 2025-12-30 11:10:21 +01:00
David Garske e02d38bdb1
Merge pull request #655 from mattia-moffa/20251224-nrf5340-tz-fixes
Various small fixes for nrf5340 TrustZone PKCS11
2025-12-26 07:48:00 -08:00
Mattia Moffa b8799cd97d Add documentation 2025-12-24 19:09:11 +01:00
Mattia Moffa b8f70ad57d Various small fixes for nrf5340 TrustZone PKCS11 2025-12-24 18:58:33 +01:00
David Garske 2fc6fe8335 Peer review fixes 2025-12-24 18:31:55 +01:00
David Garske d3ff5783b3 Add support for multi-block reads (performance improvements) 2025-12-24 18:31:55 +01:00
David Garske 963cdadeaf Peer review fixes 2025-12-24 18:31:55 +01:00
David Garske 6547a74fcf Documentation cleanups 2025-12-24 18:31:55 +01:00
David Garske 5f51e0febc Working Secure boot of PolarFire SoC 2025-12-24 18:31:55 +01:00
David Garske d12c79e956 Fix issue with pointer increment in update_disk.c loader refactor 2025-12-24 18:31:55 +01:00
David Garske afb9c84cdf Fix for uSD read to handle start that is not block aligned 2025-12-24 18:31:55 +01:00
David Garske 3317fba381 Cleanups and improvements 2025-12-24 18:31:55 +01:00
David Garske 0292da582b Refactor disk.c for generic use. Wired up uSD read for MBR/GPT 2025-12-24 18:31:55 +01:00
David Garske 66fac44062 Fixes to get uSD driver working 2025-12-24 18:31:55 +01:00
David Garske ab614a93c8 Progress with eMMC/SD driver 2025-12-24 18:31:55 +01:00
David Garske f89704d7e1 Progress with eMMC/SD driver. 2025-12-24 18:31:55 +01:00
David Garske e055585942 Support for Microchip PolarFire SoC (MPFS250) 2025-12-24 18:31:55 +01:00
Mattia Moffa e716a18405
Merge pull request #654 from danielinux/stm32h5_fix_gtzc1_base
STM32H5: Fixed GTZC1 base address
2025-12-24 15:01:42 +01:00
Daniele Lacamera 660100d072 STM32H5: Fixed GTZC1 base address
These are used in hal_prepare_boot() for setting peripheral as
non-secure.

The base address for those registers were 0x4000 too high.

Fixed according to RM0841 Chapter 2 Table 5, page 120.
2025-12-24 10:59:01 +01:00
David Garske 233360dee7
Merge pull request #652 from bigbrett/update-wolfHSM
update wolfHSM
2025-12-23 09:29:04 -08:00
Brett Nicholas c61a30a8f6 update wolfHSM to latest 2025-12-23 08:35:38 -08:00
David Garske 8c5aa75d13
Merge pull request #651 from mattia-moffa/20251213-nrf5340-wolfcrypt-tz
Support WOLFCRYPT_TZ and PKCS11 on nRF5340
2025-12-15 09:13:29 -08:00
Mattia Moffa 26171affe0 Preserve CRYPTOCELL_ENABLE; don't hardcode RNG FIFO depth 2025-12-15 17:29:00 +01:00
Mattia Moffa dd226cad0c Minor cleanup 2025-12-15 15:02:17 +01:00
Mattia Moffa 99b49fe69e Add new config to CI 2025-12-13 04:06:58 +01:00
Mattia Moffa 5134eea96a Support WOLFCRYPT_TZ and PKCS11 on nRF5340 2025-12-13 04:05:32 +01:00
gojimmypi 0c7fa9d4e4 Remove header gate 2025-12-12 17:51:17 +01:00
gojimmypi 985e2f76c0 Improve image header default size, check for dupe hash def 2025-12-12 17:47:09 +01:00
Brett Nicholas a3af00114b Improve docs for USER_XXX variables to clarify intent 2025-12-10 07:43:32 +01:00
Brett Nicholas 6607b66049 Allow user to pass their own NVM init file 2025-12-10 07:43:32 +01:00
Brett Nicholas 6a1120d0ab -add wolfHSM RSA4096 configs for sim and AURIX
-various fixes for RSA4096
-remove erroneous coupling between SMALL_STACK and WOLFHSM_SERVER
2025-12-10 07:43:32 +01:00
Brett Nicholas 57b874be2d Simplify use of user-supplied keys and certificates with test app via
new `USER_ variables`
2025-12-10 07:43:32 +01:00
Mattia Moffa 2e103d27b2 Fix stm32h5 hal_flash_write alignment issues 2025-12-10 07:41:38 +01:00
David Garske 97230f5fae
Merge pull request #646 from mattia-moffa/20251125-nxp-mcxw71-tz
MCXW TrustZone support
2025-12-08 07:42:43 -08:00
Mattia Moffa 23ba33140e MCXW TrustZone support 2025-12-05 01:27:58 +01:00
David Garske 1bc325d940
Merge pull request #644 from jackctj117/Extend-CI-tests
CI tests: Cypress test
2025-12-04 14:06:23 -08:00
jackctj117 feec84111d Disable PSOC6_CRYPTO in cypsoc6.config to use software crypto 2025-12-04 14:23:01 -07:00
jackctj117 926eb96fc7 fix sed command 2025-12-04 12:53:54 -07:00
jackctj117 9ff3536347 CI tests: Cypress test 2025-12-04 11:44:42 -07:00