WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
2,960 Commits
31 Branches
32 Tags
44 MiB
Commit Graph

462 Commits (2831b6dadd34f690c76a87e93c0467a82b59be9e)

Author SHA1 Message Date
Brett Nicholas 2e7839e4ee add additional check for DELTA_UPDATE + DISABLE_BACKUP incompatibility 2026-04-17 08:27:05 +02:00
Brett Nicholas c45268ed7f monolithic self-updates: force DISABLE_BACKUP=1, eliminate swap, eliminate update code 2026-04-17 08:27:05 +02:00
Daniele Lacamera 776378ca78 Preparing release v2.8.0 + update copyright 2026-04-16 13:11:56 +02:00
Daniele Lacamera 9ac6b1f485 Fixed more regressions 2026-04-14 16:47:11 +02:00
Daniele Lacamera 4c0f425a7a Fix WOLFBOOT_MAX_SPACE precedence and test 
F/2587
 2026-04-14 14:28:44 +02:00
Daniele Lacamera 41ffb2c637 Add partition overlap guards 
F/2571
 2026-04-14 07:55:26 +02:00
Daniele Lacamera 3697f9e335 image: use portable noinline macro 
F/2273
 2026-04-10 21:39:19 +02:00
Daniele Lacamera c1b2c40a40 image: restore ct compare contract 
Make image_CT_compare return 0 on match again and update RSA hash checks plus delta base-hash validation to use the original semantics.

F/CI
 2026-04-10 21:22:26 +02:00
Daniele Lacamera 0d6ad205d7 tpm: localize constant compare again 
Restore wolfBoot_constant_compare to TPM-local code and use file-local helpers in update_flash and AHCI instead of a shared cross-module symbol.

F/CI
 2026-04-10 06:17:41 +02:00
Daniele Lacamera 087ff9016c image: fix hardened hash compare sense 
Use image_CT_compare directly in the protected RSA_VERIFY_HASH macro so signature confirmation only follows a real digest match.

F/CI
 2026-04-10 05:59:18 +02:00
Daniele Lacamera 8033366c3e core: make constant compare common 
Move wolfBoot_constant_compare out of TPM-only code so AHCI and update paths can use it without TPM feature gating.

F/CI
 2026-04-10 05:48:36 +02:00
Daniele Lacamera fff5222e2d hal: document flash protect API contract 2026-04-09 14:54:14 +02:00
Daniele Lacamera fc9e7a3e8a Use constant-time delta base hash compare 
F/2253
 2026-04-08 19:53:50 +02:00
Daniele Lacamera f5d50d4257 enforce skip-verify prerequisites 
F/2256
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 1528bc8d99 Use constant-time TPM secret checks 
F/2248
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 44c5b4ab0a Protect bootloader before application boot 
F/2255
 2026-04-08 19:53:50 +02:00
Daniele Lacamera 9715b4df26 Use constant-time RSA hash comparison 
F/2247
 2026-04-08 19:53:50 +02:00
Brett Nicholas 9debc4c559 Fix XMSS and ML_DSA keygen type mismatch between image headers and keystore by unifying AUTH_KEY_*/KEYGEN_* constants 2026-03-30 16:32:44 +02:00
Paul Adelsbach 3d2a555e1a Update wolfHSM pointer, fix minor issues 2026-03-23 20:05:07 +01:00
Daniele Lacamera 5f919c1b2e Updated submodules 2026-03-20 14:57:43 +01:00
David Garske a56c70e90a Support for NXP T1040 RDB 2026-03-20 14:51:15 +01:00
Mattia Moffa b5fab30310 Enable NSC veneers when TZEN=1, even without WOLFCRYPT_TZ 2026-03-18 22:26:32 +01:00
Mattia Moffa fcf72e008c Remove NO_DIRECT_READ_OF_ERASED_SECTOR option; write after erase instead 2026-03-18 11:53:26 +01:00
Thomas Cook 3b1ef9d6bc Address copilot pr comments. 2026-03-18 11:53:26 +01:00
Thomas Cook dd4312679b Deploy NO_DIRECT_READ_OF_ERASED_SECTOR to protect against hardfault with AHB read of erased sector. 2026-03-18 11:53:26 +01:00
Mattia Moffa 0656ff4afa Nordic nrf54l port (with and without TrustZone) 2026-03-18 09:15:00 +01:00
Daniele Lacamera 180e53b186 Fix regression in WOLFBOOT_RAMBOOT_MAX_SIZE 2026-03-12 09:28:51 +01:00
Daniele Lacamera 4eca085b54 Added USE_CLANG option to Makefile 2026-03-10 15:49:45 +01:00
Daniele Lacamera 19d562dbde Fixed build errors with cross-clang compiler 2026-03-10 15:49:39 +01:00
David Garske 4d2c7bb851 Fix CI build errors 2026-03-09 07:29:27 +01:00
David Garske 4a53bd1627 Added support for running test-app and benchmarks. Added example trace32 scripts. 2026-03-05 17:49:37 +01:00
David Garske a5356b830a NXP T2080 Port Refresh 
* Initial port refresh for the NXP T2080 target
* IFC Flash driver and multi-core support on T2080
* Working wolfBoot test-app startup on T2080
* Support for NAII and Curtiss-Wright T2080 vendor boards
 2026-03-05 17:49:37 +01:00
Brett Nicholas 3d5499f90a address review feedback 2026-03-05 10:14:04 +01:00
Brett Nicholas 2924646695 Add generic hook framework with provision for pre-init, post-init, and 
boot hooks
 2026-03-05 10:14:04 +01:00
David Garske ff8bb8336c Support for wolfBoot ZynqMP (UltraScale+ MPSoC) SD Card 2026-03-05 10:12:02 +01:00
David Garske 47256c8d6f Reduce build size for wolfCrypt and fix Vorago documentation 2026-03-05 09:24:52 +01:00
David Garske cbaa132588 Fix for tools/scripts/va416x0/build_test.sh portability (MacOS) 
Added option to support wolfCrypt test/benchmark in test-app
Add some checking if partition size is too large
 2026-03-03 12:29:09 +01:00
Daniele Lacamera 00bf88b69d Added upper limit for NO_PARTITIONS builds 2026-03-02 14:18:23 +01:00
Marco Oliverio cc6f0ff7ae disk.h: minor: improve comment 2026-02-27 15:09:36 +01:00
Marco Oliverio b0cc295b71 disk.c: fix silent sz truncation and explicitly bound disk IO 2026-02-27 15:09:36 +01:00
Brett Nicholas 4d31ef5502 Add self-header feature with support for sim and AURIX TC3xx 2026-02-27 11:39:51 +01:00
Marco Oliverio e93aad1823 pci: fix: use correct offset for I/O bridge window 2026-02-25 13:20:09 +01:00
Marco Oliverio e274532331 pci: fix: use int instead of uint32 as return error for pci_enum 2026-02-25 13:20:09 +01:00
Marco Oliverio ea819534ce pci: fix: remove unused functions 2026-02-25 13:20:09 +01:00
Daniele Lacamera cd2b02e10b Fixed wrong naming for HYBRID defines 
+ longer DICE test timeout
 2026-02-11 13:38:31 +01:00
Daniele Lacamera 47ad6c21ef Updated benchmark to run on rpi + stm32h563 2026-02-09 18:48:47 +01:00
David Garske 5b43fcc49a
Merge pull request #668 from danielinux/dice 
Add support for DICE attestation + PSA attestation
 2026-02-06 14:11:02 -08:00
David Garske 3597384f12 Add image bounds checking on ELF parser 2026-02-06 22:01:40 +01:00
Daniele Lacamera a20101d6df Add support for DICE attestation + PSA attestation 2026-02-06 18:36:47 +01:00
David Garske ee3c313a66 Versal port cleanups 2026-01-26 13:08:50 +01:00