David Garske
1db41896e2
Merge pull request #431 from danielinux/update-wolfssl-v5.7.0
...
Updated submodules: wolfSSL-v5.7.0 + wolfTPM latest
2024-04-11 17:00:27 +02:00
Daniele Lacamera
c332cb93d8
Updated footprint size limits
...
+ footprint.yml: Removed dependency to abandoned/obsolete github action module
2024-04-10 14:42:50 +02:00
Daniele Lacamera
12f8f75c89
Add `HAVE_NETDB_H` to tpmtools and sim-wolfboot
2024-04-10 12:45:52 +02:00
Jim Norton
1a0eb3d851
Fixed indentation issue.
2024-04-05 08:52:03 +02:00
Jim Norton
e4c6d4c34c
Added support for custom-tlv-string
2024-04-05 08:52:03 +02:00
jordan
cf0519903c
Fix lms and xmss build.
2024-03-19 21:50:46 +01:00
Daniele Lacamera
e9d65b3bd2
Fixed TLV alignment for 8B fields
...
+ added sim "get_tlv" command
2024-03-08 18:40:34 +01:00
David Garske
01e22edb34
Fix sign tool TLV alignment padding.
2024-03-08 11:38:46 +01:00
Daniele Lacamera
a314875c79
Added support for SIGN=ECC521
2024-03-01 15:32:33 +01:00
Daniele Lacamera
df3ccc55b5
Address reviewer's comment
...
Don't allow "0xFF" in custom tags
2024-02-29 17:29:29 +01:00
Daniele Lacamera
304e0e876e
Added sign option `--custom-tlv-buffer`
2024-02-29 17:29:29 +01:00
Daniele Lacamera
43f7730576
Added support for custom TLVs in manifest header
2024-02-29 17:29:29 +01:00
Daniele Lacamera
bfe9e4fdf9
Added update+powerfail test for DISABLE_BACKUP
2024-02-22 16:27:59 +01:00
David Garske
4a85d2ec9e
Added documentation for the two parsers (ELF and FDT).
2024-01-17 14:16:15 +01:00
David Garske
83283c6cf7
Fixes for NXP T1024 and booting Integrity OS:
...
* Fixed PPC spin table based on ePAPR 1.1.
* Added flattened device tree (FDT) support. Setting required FDT fields per ePAPR 1.1.
* Added Frame Manager microcode upload.
* Fixed CPLD and setting QE clock.
* Added support for setting logical device numbers and updated device tree.
* Fixed QUICC Engine base address (was incorrect, should be 0x140000).
* Fixed "cpu-release-addr" to use 64-bit value.
* Added secondary cached boot page.
* Added L2 cache support to multi-core.
* Added flattened device tree parser tool for testing (`make fdt-parser` and `tools/fdt-parser/fdt-parser`).
* Added checks for FDT header.
* Added automated test case for NXP T1024 FDT.
2024-01-17 14:16:15 +01:00
David Garske
b1ff7b0d95
Fix return code to avoid TLS/SSL header use. Fixed in https://github.com/wolfSSL/wolftpm/pull/308
2023-12-27 15:06:26 -08:00
Daniele Lacamera
1baf4d7620
Updated binary sizes limit for wolfSSL 5.6.6
2023-12-27 14:21:40 +01:00
Daniele Lacamera
f8ab11eede
[tpmtools] Added missing include to policy_sign
2023-12-27 12:44:09 +01:00
David Garske
3eb41afa85
Fixes for ECC sign where the r/s is does not match key size and needs zero padded.
2023-11-29 22:24:07 +01:00
Daniele Lacamera
ac17c826b6
Added new config option NXP_CUSTOM_DCD_OBJS
...
+ Fix linker error due to wrong pointer type
2023-11-22 15:19:09 +01:00
David Garske
83aa1d83c6
Merge pull request #392 from danielinux/fix-image-type-field
...
wolfBoot_get_blob_type: fix return type
2023-11-17 09:24:13 -08:00
Daniele Lacamera
23894d31c6
Adjust mock in unit tests: fixed image_type field
2023-11-17 15:15:18 +01:00
Daniele Lacamera
0d614fc669
Added custom DCD for i.mx-RT10XX
2023-11-16 09:56:44 +01:00
Daniele Lacamera
091c036b6c
Improve documentation for x86 targets
...
+ fix qemu's make_hd.sh script
2023-11-06 17:15:38 +01:00
David Garske
dd11fad566
Merge pull request #385 from danielinux/test-delta
...
Improve delta tests + fix delta+encrypt bug
2023-11-06 07:52:04 -08:00
jordan
c31a2138ee
XMSS wolfBoot support: add renode-nrf52 test case.
2023-11-06 14:31:05 +01:00
jordan
79aadb5cc1
XMSS wolfBoot support.
2023-11-06 14:31:05 +01:00
Daniele Lacamera
ba04692d1a
Added test: enc-delta-update with extradata
2023-11-04 18:53:08 +01:00
Hideki Miyazaki
0f5b5abf5f
fix and update rx72n
2023-10-25 13:22:33 +02:00
David Garske
445cd7bae2
Adjust size test limits (actual + 32) rounded to 32-bit.
2023-10-25 13:17:24 +02:00
David Garske
798993d471
Fix for `directive output may be truncated` on Win where PATH_MAX is 260, not 1024.
2023-10-25 13:17:24 +02:00
David Garske
c76a6f1695
Fixes for building keytools on mingw.
2023-10-25 13:17:24 +02:00
David Garske
5872b4d2cf
Merge pull request #381 from danielinux/ecc_keygen_fix
...
Fixed keygen ecc key initialization
2023-10-13 09:15:02 -07:00
Daniele Lacamera
8d7ed16ad9
Fixed keygen ecc key initialization
2023-10-13 17:28:10 +02:00
Daniele Lacamera
da43c99993
Added more unit tests. Added 'make cov'.
...
Fixed checks for invalid partition id
2023-10-13 14:30:45 +02:00
John Bland
f4ea7784bf
add double fallback to update powerfail test since
...
NVM_FLASH_WRITEONCE can powerfail after FLAGS_FINAL and TESTING partition states have been set
2023-10-13 14:30:04 +02:00
John Bland
43453d4d18
fix extra fallback due to non-triggered power fail
2023-10-13 14:30:04 +02:00
John Bland
2298da23b5
footprint update
2023-10-13 14:30:04 +02:00
John Bland
ffc7a435e5
add powerfail during final sector erase, exposing
...
the problems of losing the encryption key when the power fails before the key can be written back, failing to select the correct NVM_FLASH_WRITEONCE sector when a sector is corrupt, and losing the testing state when the power fails before the partition state can be set. these issues are addressed in the next commit
2023-10-13 14:30:04 +02:00
David Garske
eb2978ab7f
TPM sealing cleanups. If using simulator don't extend the unseal PCR to prevent further access. Added `WOLFBOOT_NO_UNSEAL_PCR_EXTEND` option to prevent locking of PCR by random extend. Improvements to the `policy_sign` tool (example usage, ecc384 support).
2023-10-06 13:34:37 -07:00
Daniele Lacamera
eba3f6514c
keygen: Added --id {list} option, updated docs
2023-09-28 17:28:32 +02:00
Daniele Lacamera
0636e7d882
Added option WOLFBOOT_UNIVERSAL_KEYSTORE
...
- Allows keys with different algorithms and sizes to be imported/generated
- Skips check for keys matching type/length in keystore
2023-09-28 17:28:32 +02:00
Daniele Lacamera
04c8e8921c
Add --no-ts option to sign tool
...
For tests with reproducible payload across build
2023-09-28 17:28:32 +02:00
David Garske
9cf947282c
* Fix for building on MacOS (new keystore section issues).
...
* Fix for library.o workaround.
* Added new `WOLFBOOT_DEBUG_MALLOC` option to help diagnosing malloc failures.
2023-09-28 17:27:23 +02:00
Marco Oliverio
5191828a77
tools/scripts/qemu: start QEMU with gdb server when env DEBUG = 1
2023-09-28 13:12:26 +02:00
Marco Oliverio
e8907a7dc2
tools/script: use env variable for SING and HASH algos
2023-09-28 13:12:26 +02:00
Marco Oliverio
9aad079c85
tools/tpm: add policy_sign tool
...
The tool is based on the code from wolfTPM/examples/pcr/policy_sign.c
2023-09-28 13:12:26 +02:00
Marco Oliverio
2c4df2866b
fsp: tpm: support policy stored in the flash
2023-09-28 13:12:26 +02:00
Daniele Lacamera
f28eec1b90
stage1: add TPM support
2023-09-28 13:12:26 +02:00
Marco Oliverio
9722f2e2e1
tools/tpm: fix name in license header
2023-09-28 13:12:26 +02:00