Commit Graph

410 Commits (1db41896e2cc2cd7f5b2dd82000ffca7b533289a)

Author SHA1 Message Date
David Garske 1db41896e2
Merge pull request #431 from danielinux/update-wolfssl-v5.7.0
Updated submodules: wolfSSL-v5.7.0 + wolfTPM latest
2024-04-11 17:00:27 +02:00
Daniele Lacamera c332cb93d8 Updated footprint size limits
+ footprint.yml:  Removed dependency to abandoned/obsolete github action module
2024-04-10 14:42:50 +02:00
Daniele Lacamera 12f8f75c89 Add `HAVE_NETDB_H` to tpmtools and sim-wolfboot 2024-04-10 12:45:52 +02:00
Jim Norton 1a0eb3d851 Fixed indentation issue. 2024-04-05 08:52:03 +02:00
Jim Norton e4c6d4c34c Added support for custom-tlv-string 2024-04-05 08:52:03 +02:00
jordan cf0519903c Fix lms and xmss build. 2024-03-19 21:50:46 +01:00
Daniele Lacamera e9d65b3bd2 Fixed TLV alignment for 8B fields
+ added sim "get_tlv" command
2024-03-08 18:40:34 +01:00
David Garske 01e22edb34 Fix sign tool TLV alignment padding. 2024-03-08 11:38:46 +01:00
Daniele Lacamera a314875c79 Added support for SIGN=ECC521 2024-03-01 15:32:33 +01:00
Daniele Lacamera df3ccc55b5 Address reviewer's comment
Don't allow "0xFF" in custom tags
2024-02-29 17:29:29 +01:00
Daniele Lacamera 304e0e876e Added sign option `--custom-tlv-buffer` 2024-02-29 17:29:29 +01:00
Daniele Lacamera 43f7730576 Added support for custom TLVs in manifest header 2024-02-29 17:29:29 +01:00
Daniele Lacamera bfe9e4fdf9 Added update+powerfail test for DISABLE_BACKUP 2024-02-22 16:27:59 +01:00
David Garske 4a85d2ec9e Added documentation for the two parsers (ELF and FDT). 2024-01-17 14:16:15 +01:00
David Garske 83283c6cf7 Fixes for NXP T1024 and booting Integrity OS:
* Fixed PPC spin table based on ePAPR 1.1.
* Added flattened device tree (FDT) support. Setting required FDT fields per ePAPR 1.1.
* Added Frame Manager microcode upload.
* Fixed CPLD and setting QE clock.
* Added support for setting logical device numbers and updated device tree.
* Fixed QUICC Engine base address (was incorrect, should be 0x140000).
* Fixed "cpu-release-addr" to use 64-bit value.
* Added secondary cached boot page.
* Added L2 cache support to multi-core.
* Added flattened device tree parser tool for testing (`make fdt-parser` and `tools/fdt-parser/fdt-parser`).
* Added checks for FDT header.
* Added automated test case for NXP T1024 FDT.
2024-01-17 14:16:15 +01:00
David Garske b1ff7b0d95 Fix return code to avoid TLS/SSL header use. Fixed in https://github.com/wolfSSL/wolftpm/pull/308 2023-12-27 15:06:26 -08:00
Daniele Lacamera 1baf4d7620 Updated binary sizes limit for wolfSSL 5.6.6 2023-12-27 14:21:40 +01:00
Daniele Lacamera f8ab11eede [tpmtools] Added missing include to policy_sign 2023-12-27 12:44:09 +01:00
David Garske 3eb41afa85 Fixes for ECC sign where the r/s is does not match key size and needs zero padded. 2023-11-29 22:24:07 +01:00
Daniele Lacamera ac17c826b6 Added new config option NXP_CUSTOM_DCD_OBJS
+ Fix linker error due to wrong pointer type
2023-11-22 15:19:09 +01:00
David Garske 83aa1d83c6
Merge pull request #392 from danielinux/fix-image-type-field
wolfBoot_get_blob_type: fix return type
2023-11-17 09:24:13 -08:00
Daniele Lacamera 23894d31c6 Adjust mock in unit tests: fixed image_type field 2023-11-17 15:15:18 +01:00
Daniele Lacamera 0d614fc669 Added custom DCD for i.mx-RT10XX 2023-11-16 09:56:44 +01:00
Daniele Lacamera 091c036b6c Improve documentation for x86 targets
+ fix qemu's make_hd.sh script
2023-11-06 17:15:38 +01:00
David Garske dd11fad566
Merge pull request #385 from danielinux/test-delta
Improve delta tests + fix delta+encrypt bug
2023-11-06 07:52:04 -08:00
jordan c31a2138ee XMSS wolfBoot support: add renode-nrf52 test case. 2023-11-06 14:31:05 +01:00
jordan 79aadb5cc1 XMSS wolfBoot support. 2023-11-06 14:31:05 +01:00
Daniele Lacamera ba04692d1a Added test: enc-delta-update with extradata 2023-11-04 18:53:08 +01:00
Hideki Miyazaki 0f5b5abf5f fix and update rx72n 2023-10-25 13:22:33 +02:00
David Garske 445cd7bae2 Adjust size test limits (actual + 32) rounded to 32-bit. 2023-10-25 13:17:24 +02:00
David Garske 798993d471 Fix for `directive output may be truncated` on Win where PATH_MAX is 260, not 1024. 2023-10-25 13:17:24 +02:00
David Garske c76a6f1695 Fixes for building keytools on mingw. 2023-10-25 13:17:24 +02:00
David Garske 5872b4d2cf
Merge pull request #381 from danielinux/ecc_keygen_fix
Fixed keygen ecc key initialization
2023-10-13 09:15:02 -07:00
Daniele Lacamera 8d7ed16ad9 Fixed keygen ecc key initialization 2023-10-13 17:28:10 +02:00
Daniele Lacamera da43c99993 Added more unit tests. Added 'make cov'.
Fixed checks for invalid partition id
2023-10-13 14:30:45 +02:00
John Bland f4ea7784bf add double fallback to update powerfail test since
NVM_FLASH_WRITEONCE can powerfail after FLAGS_FINAL and TESTING partition states have been set
2023-10-13 14:30:04 +02:00
John Bland 43453d4d18 fix extra fallback due to non-triggered power fail 2023-10-13 14:30:04 +02:00
John Bland 2298da23b5 footprint update 2023-10-13 14:30:04 +02:00
John Bland ffc7a435e5 add powerfail during final sector erase, exposing
the problems of losing the encryption key when the power fails before the key can be written back, failing to select the correct NVM_FLASH_WRITEONCE sector when a sector is corrupt, and losing the testing state when the power fails before the partition state can be set. these issues are addressed in the next commit
2023-10-13 14:30:04 +02:00
David Garske eb2978ab7f TPM sealing cleanups. If using simulator don't extend the unseal PCR to prevent further access. Added `WOLFBOOT_NO_UNSEAL_PCR_EXTEND` option to prevent locking of PCR by random extend. Improvements to the `policy_sign` tool (example usage, ecc384 support). 2023-10-06 13:34:37 -07:00
Daniele Lacamera eba3f6514c keygen: Added --id {list} option, updated docs 2023-09-28 17:28:32 +02:00
Daniele Lacamera 0636e7d882 Added option WOLFBOOT_UNIVERSAL_KEYSTORE
- Allows keys with different algorithms and sizes to be imported/generated
- Skips check for keys matching type/length in keystore
2023-09-28 17:28:32 +02:00
Daniele Lacamera 04c8e8921c Add --no-ts option to sign tool
For tests with reproducible payload across build
2023-09-28 17:28:32 +02:00
David Garske 9cf947282c * Fix for building on MacOS (new keystore section issues).
* Fix for library.o workaround.
* Added new `WOLFBOOT_DEBUG_MALLOC` option to help diagnosing malloc failures.
2023-09-28 17:27:23 +02:00
Marco Oliverio 5191828a77 tools/scripts/qemu: start QEMU with gdb server when env DEBUG = 1 2023-09-28 13:12:26 +02:00
Marco Oliverio e8907a7dc2 tools/script: use env variable for SING and HASH algos 2023-09-28 13:12:26 +02:00
Marco Oliverio 9aad079c85 tools/tpm: add policy_sign tool
The tool is based on the code from wolfTPM/examples/pcr/policy_sign.c
2023-09-28 13:12:26 +02:00
Marco Oliverio 2c4df2866b fsp: tpm: support policy stored in the flash 2023-09-28 13:12:26 +02:00
Daniele Lacamera f28eec1b90 stage1: add TPM support 2023-09-28 13:12:26 +02:00
Marco Oliverio 9722f2e2e1 tools/tpm: fix name in license header 2023-09-28 13:12:26 +02:00