Commit Graph

1918 Commits (75efbd9cfb9ad62d91ca2550d638d7dfcb34e523)

Author SHA1 Message Date
Daniele Lacamera 75efbd9cfb Removed all compile-time dependency from keytools 2024-11-26 13:17:00 +01:00
Daniele Lacamera 97fb3b68af Test: add IMAGE_HEADER_SIZE to sign command 2024-11-26 11:17:35 +01:00
Daniele Lacamera bc5e2ce2b8 Makefile passes IMAGE_HEADER_SIZE to sign tool. 2024-11-26 11:07:05 +01:00
Daniele Lacamera 93866f7376 Use minimum 512B of header with delta updates 2024-11-26 11:04:09 +01:00
Daniele Lacamera 6c8aafe09d Remove keytools dependency on IMAGE_HEADER_SIZE.
- Added getenv() to override the value at runtime
- Removed doc on old python tools
2024-11-26 10:57:06 +01:00
David Garske bf4c8017dd Test: adding action to build keytools on windows.
* Update key tools VS project to 2022.
* Fix a few warnings in sign.c
* Fix issues with windows already having min/max.
* Fix (workaround) issue with key tools needing WOLFBOOT_SECTOR_SIZE.
2024-11-25 14:38:29 -08:00
David Garske 2cdc1f5abb
Merge pull request #520 from danielinux/delta-base-hash
Delta update: check sha digest of base image
2024-11-22 08:31:09 -08:00
Daniele Lacamera 3a69b0e41a Don't fail if the image contains no base sha
+ Added --no-base-sha option to sign
2024-11-22 11:58:17 +01:00
Daniele Lacamera adb020470a Change header size for delta test to fit base hash 2024-11-21 15:59:57 +01:00
Daniele Lacamera 7347f334b3 Delta update: check sha digest of base image
Only allow delta update if the sha digest of the base image matches the
expected value. This is to prevent the delta update from being applied
to an image that is not the expected base image, even if the version
matches.

The mismatch should never happen in real-life scenarios, but it is to check
for false positives during integration, testing and development.
2024-11-21 14:28:40 +01:00
Brett Nicholas 6d1adc2376 Add documention for `--exportpubkey` and `--nolocalkeys` to Signing.md 2024-11-13 09:52:49 +01:00
Brett Nicholas f9cbc57795 review feedback 2024-11-13 09:52:49 +01:00
Brett Nicholas 78e4275f99 Initial wolfHSM support for simulator and AURIX TC3xx 2024-11-13 09:52:49 +01:00
David Garske 03aae5a912
Merge pull request #518 from danielinux/prepare-release-2.3.0
Prepare release 2.3.0
2024-10-31 07:39:15 -07:00
Daniele Lacamera 7726b05ff7 Updated version, added changelog 2024-10-31 11:46:49 +01:00
David Garske aec2809212 Cleanups after hybrid signing PR. 2024-10-31 11:23:52 +01:00
David Garske b333317047
Merge pull request #510 from danielinux/hybrid-auth
Support for hybrid authentication (two ciphers)
2024-10-30 09:22:34 -07:00
Daniele Lacamera 195f479920 Remove extra LDFLAGS when building simulator 2024-10-30 15:54:43 +01:00
jordan c4f87c6ad8 tools renode: fix ext_LMS and ext_XMSS sign arg check. 2024-10-30 15:08:57 +01:00
jordan cfd65a8ee8 tools renode: reset SIGN_ARGS. 2024-10-30 15:08:57 +01:00
Daniele Lacamera 1d7744d2e1 guarded gcc-specific LDFLAGS in sim build 2024-10-30 13:48:46 +01:00
Daniele Lacamera dbf32e615e WOLFBOOT_USE_STDLIBC gated behind USE_GCC 2024-10-30 13:17:09 +01:00
Daniele Lacamera 4743ec06c1 Reviewer comments: fixed typos, less verbose sign
Removed some debug leftovers
2024-10-30 13:17:09 +01:00
Daniele Lacamera b218a33b60 Cosmetic changes 2024-10-30 13:17:09 +01:00
Daniele Lacamera 66154af7d1 Updated documentation in docs/PQ.md 2024-10-30 13:17:09 +01:00
Daniele Lacamera d7a45db083 Added benchmark for Hybrid modes 2024-10-30 13:17:09 +01:00
Daniele Lacamera 294e72ef6a Added test for hybrid secure boot 2024-10-30 13:17:09 +01:00
Daniele Lacamera cc447ea879 Support for hybrid authentication (2 ciphers) 2024-10-30 13:17:06 +01:00
Marco Oliverio da1e869c01
Merge pull request #515 from danielinux/cortexm-armasm-thumb2
ARMv7-M, ARMv8-M using Thumb2 version of ARMASM
2024-10-30 13:10:37 +01:00
Daniele Lacamera da5d10d41e Cortex-M: remove ARMASM_INLINE 2024-10-30 12:35:02 +01:00
Daniele Lacamera 0aa90902ee ARMv7-M, ARMv8-M using Thumb2 version of ARMASM 2024-10-30 12:18:22 +01:00
Marco Oliverio 8aa6be124e
Merge pull request #514 from danielinux/update-wolfssl-5.7.4
Update submodules to wolfSSL v5.7.4
2024-10-30 11:00:43 +01:00
Daniele Lacamera f90197044a Added missing symbol to compile tpmtools 2024-10-30 10:28:21 +01:00
Daniele Lacamera bc15359521 Update submodules 2024-10-30 10:21:40 +01:00
David Garske 787a21b222
Merge pull request #513 from danielinux/benchmark
Added benchmark script, enabled ARMASM for Cortex-M3,4,7,33
2024-10-25 09:40:03 -07:00
Daniele Lacamera c1fbfd6b1d Rephrased description of assembly optimization 2024-10-25 09:18:06 +02:00
Daniele Lacamera 0b82680b7c Fix tabs vs. space in .mk files 2024-10-25 09:10:41 +02:00
Daniele Lacamera 72a0aa3853 Added Benchmark script. Added ARMASM support. 2024-10-24 21:20:09 +02:00
András Fekete 518909ee18
Merge pull request #512 from danielinux/update-wolfssl-submodule
Updated wolfSSL to latest version
2024-10-21 12:37:47 -04:00
Daniele Lacamera 668f117c30 LMS: adjusted footprint size 2024-10-21 15:15:15 +02:00
Daniele Lacamera ca03fd9d85 Updated wolfSSL to latest version 2024-10-21 15:09:16 +02:00
philljj 7891960bfd
Merge pull request #508 from danielinux/atsama5d3
Fixes for SAMA5D3
2024-10-15 12:41:02 -04:00
Daniele Lacamera cb77e4273c Fix potential integer overflow in shifts (cppcheck) 2024-10-14 10:14:48 +02:00
Daniele Lacamera 95d58244a9 SAMA5D3: Hal fixes, add DBGU, enable ARM_ASM 2024-10-14 10:14:48 +02:00
Daniele Lacamera 07bdae680a ARMASM. Macros for clocks+gpios. Set MAC pins. 2024-10-14 10:14:48 +02:00
jordan b97abd4ace Add ML-DSA support. 2024-10-14 10:13:52 +02:00
philljj 8bdb0507c0
Merge pull request #509 from danielinux/update-wolfssl
Update wolfssl
2024-10-11 15:31:23 -05:00
Daniele Lacamera 8386a503f8 Added NO_WOLFSSL_MALLOC 2024-10-11 20:48:34 +02:00
Daniele Lacamera 855b968d75 Activate debug in sim_tpm tests 2024-10-11 14:49:43 +02:00
Daniele Lacamera ab6b1bb416 Fix qemu-fsp build dep 2024-10-11 10:43:26 +02:00