Commit Graph

698 Commits (master)

Author SHA1 Message Date
David Garske dea8b4e347 Don't use XALIGNED_STACK on static. 2025-06-16 19:05:49 +02:00
David Garske dd03cf19c4 Disabled `wolfBoot_swap_and_final_erase` with `CUSTOM_PARTITION_TRAILER` (not compatible). Added a few more `uint8_t` alignments. 2025-06-16 19:05:49 +02:00
David Garske b79be86a56 Fix for `NO_SWAP_EXT=1` with encryption enabled. Peer review fixes. 2025-06-16 19:05:49 +02:00
David Garske bd179ed339 Added TSIP support to the set_key, get_key and erase_key API's. Finished full encrypted update testing on Renesas RX with TSIP. Fixed issue with `No rule to make target `NONE’` using encrypted AES. 2025-06-16 19:05:49 +02:00
David Garske 566f3b99cb Cleanup duplicate code in `aes_init`. 2025-06-16 19:05:49 +02:00
David Garske 708b797c8f Fix for Renesas RX TSIP AES CTR to make sure the wolfCrypt_Init() is called before trying to setup the crypto callback. 2025-06-16 19:05:49 +02:00
David Garske 3d9beb2642 Cleanup the AES CTR IV. 2025-06-16 19:05:49 +02:00
David Garske 2e5bbfe273 Make sure keySize is set for RX crypto callback. 2025-06-16 19:05:49 +02:00
David Garske b07d99b57e Fix RX TSIP IV nonce. Adjust location of XALIGNED in declarations. 2025-06-16 19:05:49 +02:00
David Garske 7bc947dd06 Fix logic on `ext_flash_check_read` return code (it is supposed to return size read or decrypted). 2025-06-16 19:05:49 +02:00
David Garske 73fc193931 Portability fixes with include < vs ". Added `NO_SWAP_EXT` to allow support for onboard flash swap sector. Added `WOLFSSL_NO_CT_OPS` for ECDSA verify only. Added `WC_NO_DEFAULT_DEVID` to help with code size reduction. 2025-06-16 19:05:49 +02:00
David Garske 844196981b Cleanup includes. 2025-06-16 19:05:49 +02:00
David Garske 8e6b0af105 Added Renesas RX TSIP encrypted updates support using AES CTR. Requires https://github.com/wolfSSL/wolfssl/pull/8854 2025-06-16 19:05:49 +02:00
David Garske 476d1c834b Gramar fix `partitions` -> `partition`. 2025-06-16 19:05:49 +02:00
David Garske 9451b47628 Fix for Renesas TSIP key types. Fix for Renesas RX .keystore location in linker script. Fix for wolfBoot as library with Renesas to make sure crypto hardware is initialized and setup. Add forced alignment on additional buffers used for flash read/write. 2025-06-16 19:05:49 +02:00
David Garske 4787d70cd8 Fix to force alignment on the flash header copy (hdr_cpy). Caused issues using wolfBoot as static library on Renesas RX. 2025-06-16 19:05:49 +02:00
David Garske 487efc606d Improvements for portability using older gcc 4.8.2. Make sure wolfboot.h includes the `wolfBoot_verify_*` API's. Fixed issue with parsing headers when `#include` is `# include`. 2025-06-16 19:05:49 +02:00
Brett Nicholas d689656a71 Add support for wolfHSM cert chain verification on TC3xx 2025-05-30 11:15:56 -06:00
Brett Nicholas 7660bf66f8 Add wolfHSM cert chain verification for ECC and RSA 2025-05-27 15:42:59 -06:00
Brett Nicholas 16e5b94e9d review comments 2025-05-09 19:06:33 -06:00
Brett Nicholas d49e507926 - Support external flash for elf scatter-loading
- Support ELF scatter-loading on TC3xx
- Modify TC3xx HAL flash erase to support arbitrary offsets and sizes
- Realign partition size and addresses to support more efficient sector mass erase on update
2025-05-08 08:50:26 -06:00
David Garske 271ae4c2f0 Improving matrix. 2025-04-29 11:50:29 +02:00
David Garske 0c9fa8e0ae Various minor: Xilinx instructions. Expect RX_TSIP_SRC=1 to enable. TPM support in update_ram.c. 2025-04-29 11:50:29 +02:00
Daniele Lacamera e7f151db0d Fixed: unused variable 2025-04-16 09:09:43 +02:00
Daniele Lacamera 71f24248cf Reviewers requests
- Removed stray printfs from elf.c
- Updated test-configs.yml to include build tests for config files
2025-04-14 18:33:15 +02:00
Daniele Lacamera c841113ea7 Fixed warnings in test build 2025-04-11 16:19:43 +02:00
Daniele Lacamera ea0b4fb935 Added missing files + cosmetics as per review
- Added missing `test-app/app_sim_scattered.c`
- Added missing `test-app/sim_scattered.ld`
- Fixed comments at the end of define blocks for consistency
- Removed unused constants as indicated
2025-04-11 15:55:05 +02:00
Daniele Lacamera 9c3e86241a Some of the fixes requested during review:
- ARCH_FLASH_OFFSET only used in simulation (dynamic 'base' address)
- Fixed the DISABLE_BACKUP case
- renamed define to WOLFBOOT_ELF_SCATTERED
2025-04-11 15:55:05 +02:00
Daniele Lacamera 9d7084c6f5
fixed misleading comment
Spotted by copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-04-08 08:46:31 +02:00
Daniele Lacamera d142426392 Fixed 'backup disabled' case without ELF_SCATTERED 2025-04-07 17:41:38 +02:00
Daniele Lacamera 386a172587 Fix regressions detected by github workflows 2025-04-07 17:10:37 +02:00
Daniele Lacamera d9104ec151 Fix scatter-gather ELF 2025-04-07 12:19:04 +02:00
Daniele Lacamera 11091944d7 ELF_SCATTERED: added sha check (WIP) 2025-04-04 19:15:04 +02:00
Daniele Lacamera e7cd340ebf Moved elf parsing/scattering to elf.c, WIP sim 2025-04-03 17:12:42 +02:00
Brett Nicholas fb6ca4378f WIP: structure is there, but some major issues. See WOLFBOOT-ELF-LOADER-GAPS.md and video 2025-04-03 09:53:00 +02:00
Brett Nicholas 7caf579ba0 formatting 2025-04-03 09:53:00 +02:00
Brett Nicholas 4f6921df86 WIP: first stab at elf loading impl 2025-04-03 09:53:00 +02:00
Brett Nicholas 9510360de9 AI WIP 2025-04-03 09:53:00 +02:00
David Garske 574f68b984
Merge pull request #548 from danielinux/encrypt_cache_in_stack
Move encrypt cache to stack
2025-03-27 11:07:13 -07:00
David Garske 5e9cc8c603 Minor documentation fixes. 2025-03-26 09:14:57 +01:00
David Garske 851130293c Added Xilinx UltraScale+ MPSoC CSU Support CSU support.
Enabled support for offloading SHA3 hashing to CSU hardware using PKA=1.
Added support for enabling JTAG at runtime if CSU_DEBUG is set. Requires patching PMUFW to enable register access. See: https://xilinx-wiki.atlassian.net/wiki/spaces/A/pages/2587197506/Zynq+UltraScale+MPSoC+JTAG+Enable+in+U-Boot
2025-03-26 09:14:57 +01:00
David Garske 2d4d897acb
Merge pull request #544 from miyazakh/fix_raspi3
Revert simple start-up for Raspi3b
2025-03-20 16:16:56 -07:00
Daniele Lacamera 07ef67bd3e Fix typos 2025-03-02 00:35:00 +01:00
Daniele Lacamera a195efe608 Avoid enforcing alignment on stack for IAR 2025-02-27 16:46:26 +01:00
Daniele Lacamera 3dc152cf1d Added ENCRYPT_CACHE= config option 2025-02-12 10:48:23 +01:00
Daniele Lacamera 146b0aa6ae Move encrypt cache to stack
This avoids claiming a large amount of RAM when using libwolfboot from the app.
2025-02-06 08:39:57 +01:00
David Garske 4c2d2b7e6e Add support for Armored mode with IAR. Currently only supports ECDSA and Cortex-M. ZD19190 2025-02-05 16:06:18 +01:00
Hideki Miyazaki b70987f86c
revert simple start-up
gard UART int
NO_QNX definition
2025-01-30 07:54:59 +09:00
Daniele Lacamera 6681e54a6a Working TZ supervisor 2025-01-27 10:29:28 +01:00
Daniele Lacamera 359c59fa47 Added IDE/pico-sdk dir to build wolfboot+blink app 2025-01-24 13:06:36 +01:00