David Garske
83359a2b1e
Added RT1062 EVKB support and tested on real hardware. Updated documentation.
2024-07-03 14:58:04 -07:00
David Garske
de9a3cd0bf
Fix with PKA=1 were fsl_cache is added twice.
2024-07-03 14:52:16 -07:00
David Garske
f60de60195
Merge pull request #465 from danielinux/azure-keyvault-docs
...
Added documentation for signing with Azure Key Vault
2024-07-03 13:25:43 -07:00
David Garske
06c5280211
Minor doc fixes.
2024-07-03 11:48:17 -07:00
Daniele Lacamera
57796c25ac
Added documentation for signing with Azure Key Vault
2024-07-03 19:46:00 +02:00
Daniel Fedai Larsen
74270cdc56
Add fsl_cache to test-app
2024-07-03 07:44:54 +02:00
Daniel Fedai Larsen
9526fbb680
Fix compile error and clean up
2024-07-03 07:33:31 +02:00
Daniel Fedai Larsen
b7fc25c0a3
Invalidate cache after flash_write/erase and disable+enable IRQs
2024-07-01 12:55:27 +02:00
David Garske
918fdc57fd
Added keygen `--der` option to allow ECC private key as ASN.1/DER. Added sign tool ECC key load support for ASN.1/DER private key (default is raw pub x/y, priv d). Refactored sign tool RSA/ECC logic to consolidate code and allow proper "auto" detection for different RSA key sizes.
2024-06-26 20:11:04 +02:00
Marco Oliverio
0f8f30d6b8
Merge pull request #457 from danielinux/otp-regressions
...
Fix build OTP options
2024-06-26 12:07:02 +02:00
Daniele Lacamera
52e62688e0
[QSPI] Fixed OCTOSPI base address on stm32u5
2024-06-26 12:01:46 +02:00
Daniele Lacamera
24fdeb54d4
[QSPI] Fixed registers and pin config on STM32U5
2024-06-26 11:52:05 +02:00
David Garske
1967cc2670
STM32U5: Only try and invalidate cache if enabled.
2024-06-25 21:57:54 +02:00
David Garske
a92c1b9ad9
STM32U5 cache support. Including cache invalidate on `nvm_select_fresh_sector`. ZD 18210
2024-06-25 18:12:47 +02:00
David Garske
6f83a798b3
Merge pull request #456 from rizlik/backport_debug0
...
qemu x86 fsp: fix support for DEBUG=0 build; fix conditional OTP compilation in Makefile
2024-06-20 08:22:57 -07:00
Marco Oliverio
a413cc11ef
mptable: abide GCC diagnostic false positive
2024-06-19 09:47:13 +02:00
Marco Oliverio
dbdb08b3eb
x86: misc fixes
...
fix various issues found by clangd-static-analyzer
2024-06-19 09:47:06 +02:00
Marco Oliverio
829f7b1705
fix: add image alignment costraints
2024-06-19 09:47:06 +02:00
Daniel Pouzzner
441200f469
fix: support DEBUG=0 build
...
* build lib/wolfssl/wolfcrypt/src/logging.o unconditionally,
* gate debug printing in do_tpm_selftest() appropriately,
* initialize top_address in src/boot_x86_fsp.c:start() to fix -Wmaybe-uninitialized,
* and add __attribute__((used)) to static src/x86/exceptions.c:common_exception_handler() and _timer_handler() implementations to accommodate asm-only calling;
* fix parallel make: add dependency of stage1/loader_stage1.bin on wolfboot.elf.
* add -ffreestanding -static flags to avoid gcc compiler optimize strings functions
Co-authored-by: Daniel Pouzzner <douzzer@wolfssl.com>
2024-06-19 09:47:06 +02:00
Daniele Lacamera
391e8d05d8
Fix build OTP options
...
- ARMORED option is not needed in otp_primer
- do not attempt to compile otp_primer if the option is not declared
2024-06-18 15:00:54 +02:00
David Garske
ca3e8dc990
Merge pull request #454 from danielinux/armv8_ns_vtor
...
Set VTOR_NS instead of VTOR upon staging when TrustZone is enabled
2024-06-04 08:55:12 -07:00
Daniele Lacamera
9575bbc725
Set VTOR_NS instead of VTOR upon staging [TZEN]
2024-06-04 17:35:53 +02:00
David Garske
53a7f643b2
Merge pull request #451 from danielinux/pkcs11-fix-non-ecc-build
...
Fix building PKCS11 TrustZone with any authentication algorithm
2024-05-29 08:56:42 -07:00
Daniele Lacamera
7b3328ff2f
Fix regression with ECC build
2024-05-29 15:18:19 +02:00
Daniele Lacamera
4dda0571c7
Fix building PKCS11 Trustzone with any auth algo
2024-05-29 15:05:56 +02:00
David Garske
971cbe0ecc
Merge pull request #449 from danielinux/stm32h7_otp
...
Support for OTP Flash as trust anchor for keystore
2024-05-24 16:34:29 -07:00
Daniele Lacamera
8834e344a9
Fixed build error due to missing keystore.c in otp
2024-05-24 17:01:01 +02:00
Daniele Lacamera
9b378d005b
Reviewer requests: fix portability of "packed"
...
+ separate object for hal in otp-keystore-primer
2024-05-24 16:42:07 +02:00
Daniele Lacamera
75cd725c9d
Fix linker warnings when building with otp
2024-05-24 16:37:25 +02:00
Daniele Lacamera
d573efa8c6
Initialize wolfPKCS11 also in "_hwswap" mode
2024-05-24 13:23:22 +02:00
Daniele Lacamera
df4dd3dadc
Fixed size for memcmp/copy used in fork_bootloader
2024-05-24 13:02:51 +02:00
Lealem Amedie
2d699b4fec
CMake: Add BUILD_IMAGE option
2024-05-21 10:35:59 +02:00
David Garske
f0b340068a
Documentation for T1024 DDR4 registers.
2024-05-20 18:51:21 +02:00
Marco Oliverio
bf55ac1ab5
x86_efi: fixes
...
- do not use a custom section for the keystore as it will not be loaded in the
UEFI env
- remove and disable WOLFBOOT_LOAD_ADDRESS
- copy .rodata from .elf to .efi as the new version of gnu-efi ld scripts do
not merge .rodata into .data anymore
- fix typo in compile_efi_linux.sh
2024-05-20 17:03:16 +02:00
Daniele Lacamera
4a57fd2296
Added build test for H5 full config (TZ+dualbank+OTP)
2024-05-20 11:09:24 +02:00
Daniele Lacamera
84282c9bb1
Added full setup on stm32h5
2024-05-20 11:00:32 +02:00
Daniele Lacamera
307e3b426c
otp_keystore_primer: fixed provisioning + readonly
2024-05-20 10:58:43 +02:00
Daniele Lacamera
8b62697f6c
Fixed FLASH range config for SAU in TZ+DUALBANK
...
+ added non-secure area at boot for OTP to read trust anchor if OTP
feature is enabled.
2024-05-16 16:17:48 +02:00
Daniele Lacamera
fd80688a8e
Added documentation on FLASH_OTP_KEYSTORE
2024-05-15 10:55:47 +02:00
Daniele Lacamera
9dd8b7cf97
Renamed FLASH_OTP_ROT to FLASH_OTP_KEYSTORE
2024-05-15 10:55:47 +02:00
Daniele Lacamera
34652ffebf
Reverted hal_flash_ functions moved to static
2024-05-15 10:55:47 +02:00
Daniele Lacamera
02bfe8a6a1
Added OTP support for STM32H5
2024-05-15 10:55:47 +02:00
Daniele Lacamera
5f2a3d5ac7
Fix pointer increment
2024-05-15 10:55:46 +02:00
Daniele Lacamera
572e1157bc
Added "otp-keystore-primer" tool
2024-05-15 10:55:46 +02:00
Daniele Lacamera
32578808f4
Added guard to OTP module for NO_SIGN
2024-05-15 10:55:46 +02:00
Daniele Lacamera
d1eabc2e31
Keystore module for OTP in FLASH
2024-05-15 10:55:46 +02:00
Daniele Lacamera
62a5b9f8fa
Export hal functions for OTP read/write access
2024-05-15 10:55:46 +02:00
David Garske
09464ca0aa
API's to support OTP flash read/write on the STM32H7. Enabled with `FLASH_OTP_ROT`.
2024-05-15 10:55:46 +02:00
David Garske
0ddde6f074
Merge pull request #444 from miyazakh/renesas_rz_rsip
...
Add RSIP use to Renesas RZ support
2024-05-10 11:52:12 -07:00
David Garske
027c6847e5
Merge pull request #443 from wolfSSL/x86_fsp_backport
...
x86 fsp backport
2024-05-09 07:46:56 -07:00