Commit Graph

230 Commits (1528bc8d992aba3d856223eca412c19edd3ef064)

Author SHA1 Message Date
Daniele Lacamera a5ea3ff829 Reject oversized delta source offsets
F/2267
2026-04-08 19:53:50 +02:00
Daniele Lacamera 153ad2b0af Fix sign header TLV overflow sizing
F/2266
2026-04-08 19:53:50 +02:00
Daniele Lacamera 2ab04ed382 Check image reopen failures in sign tool
F/1898
2026-04-08 19:53:50 +02:00
Daniele Lacamera c6e7f7966b Fix sign encrypted output open failure
F/1895
2026-04-08 19:53:50 +02:00
Daniele Lacamera 32783034ab zero ML-DSA private key buffer
F/2277
2026-04-08 15:43:26 +02:00
Daniele Lacamera 6f40afaedf Zero EdDSA keygen private data
F/2276
2026-04-08 15:42:14 +02:00
Daniele Lacamera 114140c232 Zero ECC keygen private buffers
F/2275
2026-04-08 15:40:48 +02:00
Daniele Lacamera 87d5a7fc9a Scrub RSA keygen private material
F/2274
2026-04-08 15:39:47 +02:00
Daniele Lacamera 1c82453922 sign: scrub key buffers before free
F/2273
2026-04-08 15:38:18 +02:00
Daniele Lacamera 201c2c5c7e Adjust BIGINT limits for new wolfSSL ECC+SMALLSTACK 2026-04-07 14:14:44 +02:00
Brett Nicholas 9debc4c559 Fix XMSS and ML_DSA keygen type mismatch between image headers and keystore by unifying AUTH_KEY_*/KEYGEN_* constants 2026-03-30 16:32:44 +02:00
Paul Adelsbach 3d2a555e1a Update wolfHSM pointer, fix minor issues 2026-03-23 20:05:07 +01:00
David Garske 2277dfa2bf Peer review fix 2026-03-03 12:29:09 +01:00
David Garske d509e91520 More peer review fixes. Fix the wolfCrypt test build. 2026-03-03 12:29:09 +01:00
David Garske 84d44439c2 More peer review fixes 2026-03-03 12:29:09 +01:00
David Garske cbaa132588 Fix for tools/scripts/va416x0/build_test.sh portability (MacOS)
Added option to support wolfCrypt test/benchmark in test-app
Add some checking if partition size is too large
2026-03-03 12:29:09 +01:00
Brett Nicholas 4d31ef5502 Add self-header feature with support for sim and AURIX TC3xx 2026-02-27 11:39:51 +01:00
Daniele Lacamera a20101d6df Add support for DICE attestation + PSA attestation 2026-02-06 18:36:47 +01:00
David Garske 12d7f0a153 Improved encryption constants between the bootloader and the signing tool. Allows the sign tool to properly use the correct block size for each encryption algorithm (64 for ChaCha, 16 for AES). 2026-01-05 20:37:04 +01:00
David Garske cf08819d8e Support for CUSTOM_ENCRYPT_KEY that allows customer to supply their own implementation 2026-01-01 12:52:09 +01:00
gojimmypi 079fb006ab
Minor docs update, code review changes, script modifications. 2025-11-24 13:04:06 -08:00
gojimmypi 1ad66e9a6b
Improve docs, add targets and tests per https://github.com/wolfSSL/wolfBoot/pull/598#pullrequestreview-3492319645 2025-11-21 17:54:14 -08:00
gojimmypi d513adc3b7 Introduce keygen --no-overwrite to avoid prompt 2025-11-13 17:59:22 +01:00
gojimmypi 8c48c5225b
Update project file line endings for Windows CRLF 2025-10-28 11:37:49 -07:00
gojimmypi fbd8dcf8a2
Update Copyright year to 2025 2025-10-15 11:33:53 -07:00
Brett Nicholas 2e06a5fafe Refactor Makefiles to allow overriding library dependency paths 2025-10-02 15:16:27 +02:00
David Garske 0b10eb0765 Fix issue with wolfssl submodule update and random.c change keytool failure because of NO_FILESYTEM. 2025-06-24 19:02:49 +02:00
David Garske 9451b47628 Fix for Renesas TSIP key types. Fix for Renesas RX .keystore location in linker script. Fix for wolfBoot as library with Renesas to make sure crypto hardware is initialized and setup. Add forced alignment on additional buffers used for flash read/write. 2025-06-16 19:05:49 +02:00
Brett Nicholas 23cf367c38 review feedback: remove use of unused intermediate variable 2025-05-28 12:24:26 -06:00
Brett Nicholas 7660bf66f8 Add wolfHSM cert chain verification for ECC and RSA 2025-05-27 15:42:59 -06:00
David Garske 8fff9cf3d7 Temp fix: `sign.c:67:5: error: implicit declaration of function '_chsize_s' [-Werror=implicit-function-declaration]` 2025-04-29 11:50:29 +02:00
David Garske b86d7fc308 Renesas RX minor fixes and documentation updates. Fix for malformed GNUC macro causing clock to not be setup properly when building with RX-GCC compiler. Fix warnings with using `%zu` on older GCC. 2025-04-29 11:50:29 +02:00
Daniele Lacamera a195efe608 Avoid enforcing alignment on stack for IAR 2025-02-27 16:46:26 +01:00
Daniele Lacamera afcdefa733 Sign: use manifest header to retrieve base version 2024-12-30 16:36:00 +01:00
Brett Nicholas 638787e296 cast malloc result 2024-12-16 19:12:23 +01:00
Brett Nicholas 0d18b25a2e fix keytools public key der export to use ml-dsa level passed as env var 2024-12-16 19:12:23 +01:00
Brett Nicholas ceffc788dd - support for wolfHSM ML-DSA on simulator and AURIX (DMA only)
- consolidate AURIX scripts into wbaurixtool.sh
- documentation updates
2024-12-16 19:12:23 +01:00
David Garske fae36f2adf Reserve enough size for the ML-DSA public key in gen. 2024-12-05 14:44:30 -08:00
David Garske 6bed80fbc2 ML-DSA default is level 2. The keytools must be able to support all ML-DSA levels at run-time using `ML_DSA_LEVEL` environment variable. wolfBoot needs to be built with the correct level specified in the .config. 2024-12-05 14:25:43 -08:00
David Garske 4991eabb18 Peer review fixes. Default to ML-DSA level 2. 2024-12-05 13:39:47 -08:00
David Garske 8cdefaae20 Fix to remove ext_XMS artifact from keytools Makefile. Caused mingw readdir error. 2024-12-05 10:45:52 -08:00
David Garske eddf0bd234 Progress getting the Windows tools to build. 2024-12-05 08:36:02 -08:00
Daniele Lacamera 5ab661677f keygen: removed compile-time parameters (lms, xmss) 2024-12-03 14:58:49 +01:00
Daniele Lacamera d5e402ebde Removing compile-time parameters from keygen 2024-12-03 14:50:54 +01:00
Daniele Lacamera 7132a13545 Complete generic sign 2024-12-03 11:10:16 +01:00
Daniele Lacamera 04d2ecd246 Remove dependency from PQC parameters. Speed up tests. 2024-12-02 18:55:32 +01:00
Daniele Lacamera 05d0e92ecf Removed forced inflation of header size in `sign` 2024-12-02 14:07:43 +01:00
Daniele Lacamera d3935774d9 Fix header size in hybrid mode 2024-12-02 12:03:32 +01:00
Daniele Lacamera 75efbd9cfb Removed all compile-time dependency from keytools 2024-11-26 13:17:00 +01:00
Daniele Lacamera 93866f7376 Use minimum 512B of header with delta updates 2024-11-26 11:04:09 +01:00