David Garske
601e46e480
Improved encryption constants between the bootloader and the signing tool. Allows the sign tool to properly use the correct block size for each encryption algorithm (64 for ChaCha, 16 for AES).
2025-12-31 11:25:09 -08:00
Mattia Moffa
0462e0a198
More consistent formatting
2025-12-30 11:15:41 +01:00
Mattia Moffa
ce4ae39d65
Address copilot suggestions
2025-12-30 11:15:41 +01:00
Mattia Moffa
7800c364e9
Fix cppcheck complaint
2025-12-30 11:15:41 +01:00
Mattia Moffa
f12d2f06b4
Add PKCS11 backend for encrypted partitions
2025-12-30 11:15:41 +01:00
Aidan Garske
aa39be21a3
Address copilot review
2025-12-30 11:13:49 +01:00
Aidan Garske
145256ad29
Add Image Inspection Functionality to boot_status.py
2025-12-30 11:13:49 +01:00
gojimmypi
c0ef637ae5
Introduce new wolfboot image inspection scripts
2025-12-30 11:13:49 +01:00
David Garske
d38551a143
Add update_disk encryption support.
2025-12-30 11:10:21 +01:00
David Garske
249c8282f5
Add kernel boot args (for rootfs). Added optional SD tuning support. Yocto Linux is fully working now!
2025-12-30 11:10:21 +01:00
David Garske
2e54cf75a7
Fix for Yocto Linux boot issue with smpboot and hartid.
2025-12-30 11:10:21 +01:00
David Garske
609fd81890
Fixes for PolarFire SoC eMMC/SD to stabilize and add read DMA support. Refactor the RISC-V boot/vector code for use on both 32-bit and 64-bit architectures.
2025-12-30 11:10:21 +01:00
David Garske
e02d38bdb1
Merge pull request #655 from mattia-moffa/20251224-nrf5340-tz-fixes
...
Various small fixes for nrf5340 TrustZone PKCS11
2025-12-26 07:48:00 -08:00
Mattia Moffa
b8799cd97d
Add documentation
2025-12-24 19:09:11 +01:00
Mattia Moffa
b8f70ad57d
Various small fixes for nrf5340 TrustZone PKCS11
2025-12-24 18:58:33 +01:00
David Garske
2fc6fe8335
Peer review fixes
2025-12-24 18:31:55 +01:00
David Garske
d3ff5783b3
Add support for multi-block reads (performance improvements)
2025-12-24 18:31:55 +01:00
David Garske
963cdadeaf
Peer review fixes
2025-12-24 18:31:55 +01:00
David Garske
6547a74fcf
Documentation cleanups
2025-12-24 18:31:55 +01:00
David Garske
5f51e0febc
Working Secure boot of PolarFire SoC
2025-12-24 18:31:55 +01:00
David Garske
d12c79e956
Fix issue with pointer increment in update_disk.c loader refactor
2025-12-24 18:31:55 +01:00
David Garske
afb9c84cdf
Fix for uSD read to handle start that is not block aligned
2025-12-24 18:31:55 +01:00
David Garske
3317fba381
Cleanups and improvements
2025-12-24 18:31:55 +01:00
David Garske
0292da582b
Refactor disk.c for generic use. Wired up uSD read for MBR/GPT
2025-12-24 18:31:55 +01:00
David Garske
66fac44062
Fixes to get uSD driver working
2025-12-24 18:31:55 +01:00
David Garske
ab614a93c8
Progress with eMMC/SD driver
2025-12-24 18:31:55 +01:00
David Garske
f89704d7e1
Progress with eMMC/SD driver.
2025-12-24 18:31:55 +01:00
David Garske
e055585942
Support for Microchip PolarFire SoC (MPFS250)
2025-12-24 18:31:55 +01:00
Mattia Moffa
e716a18405
Merge pull request #654 from danielinux/stm32h5_fix_gtzc1_base
...
STM32H5: Fixed GTZC1 base address
2025-12-24 15:01:42 +01:00
Daniele Lacamera
660100d072
STM32H5: Fixed GTZC1 base address
...
These are used in hal_prepare_boot() for setting peripheral as
non-secure.
The base address for those registers were 0x4000 too high.
Fixed according to RM0841 Chapter 2 Table 5, page 120.
2025-12-24 10:59:01 +01:00
David Garske
233360dee7
Merge pull request #652 from bigbrett/update-wolfHSM
...
update wolfHSM
2025-12-23 09:29:04 -08:00
Brett Nicholas
c61a30a8f6
update wolfHSM to latest
2025-12-23 08:35:38 -08:00
David Garske
8c5aa75d13
Merge pull request #651 from mattia-moffa/20251213-nrf5340-wolfcrypt-tz
...
Support WOLFCRYPT_TZ and PKCS11 on nRF5340
2025-12-15 09:13:29 -08:00
Mattia Moffa
26171affe0
Preserve CRYPTOCELL_ENABLE; don't hardcode RNG FIFO depth
2025-12-15 17:29:00 +01:00
Mattia Moffa
dd226cad0c
Minor cleanup
2025-12-15 15:02:17 +01:00
Mattia Moffa
99b49fe69e
Add new config to CI
2025-12-13 04:06:58 +01:00
Mattia Moffa
5134eea96a
Support WOLFCRYPT_TZ and PKCS11 on nRF5340
2025-12-13 04:05:32 +01:00
gojimmypi
0c7fa9d4e4
Remove header gate
2025-12-12 17:51:17 +01:00
gojimmypi
985e2f76c0
Improve image header default size, check for dupe hash def
2025-12-12 17:47:09 +01:00
Brett Nicholas
a3af00114b
Improve docs for USER_XXX variables to clarify intent
2025-12-10 07:43:32 +01:00
Brett Nicholas
6607b66049
Allow user to pass their own NVM init file
2025-12-10 07:43:32 +01:00
Brett Nicholas
6a1120d0ab
-add wolfHSM RSA4096 configs for sim and AURIX
...
-various fixes for RSA4096
-remove erroneous coupling between SMALL_STACK and WOLFHSM_SERVER
2025-12-10 07:43:32 +01:00
Brett Nicholas
57b874be2d
Simplify use of user-supplied keys and certificates with test app via
...
new `USER_ variables`
2025-12-10 07:43:32 +01:00
Mattia Moffa
2e103d27b2
Fix stm32h5 hal_flash_write alignment issues
2025-12-10 07:41:38 +01:00
David Garske
97230f5fae
Merge pull request #646 from mattia-moffa/20251125-nxp-mcxw71-tz
...
MCXW TrustZone support
2025-12-08 07:42:43 -08:00
Mattia Moffa
23ba33140e
MCXW TrustZone support
2025-12-05 01:27:58 +01:00
David Garske
1bc325d940
Merge pull request #644 from jackctj117/Extend-CI-tests
...
CI tests: Cypress test
2025-12-04 14:06:23 -08:00
jackctj117
feec84111d
Disable PSOC6_CRYPTO in cypsoc6.config to use software crypto
2025-12-04 14:23:01 -07:00
jackctj117
926eb96fc7
fix sed command
2025-12-04 12:53:54 -07:00
jackctj117
9ff3536347
CI tests: Cypress test
2025-12-04 11:44:42 -07:00