Commit Graph

1906 Commits (78e4275f99715bf66524aa9d480a33816d1a55a4)

Author SHA1 Message Date
David Garske 83359a2b1e Added RT1062 EVKB support and tested on real hardware. Updated documentation. 2024-07-03 14:58:04 -07:00
David Garske de9a3cd0bf Fix with PKA=1 were fsl_cache is added twice. 2024-07-03 14:52:16 -07:00
David Garske f60de60195
Merge pull request #465 from danielinux/azure-keyvault-docs
Added documentation for signing with Azure Key Vault
2024-07-03 13:25:43 -07:00
David Garske 06c5280211 Minor doc fixes. 2024-07-03 11:48:17 -07:00
Daniele Lacamera 57796c25ac Added documentation for signing with Azure Key Vault 2024-07-03 19:46:00 +02:00
Daniel Fedai Larsen 74270cdc56 Add fsl_cache to test-app 2024-07-03 07:44:54 +02:00
Daniel Fedai Larsen 9526fbb680 Fix compile error and clean up 2024-07-03 07:33:31 +02:00
Daniel Fedai Larsen b7fc25c0a3 Invalidate cache after flash_write/erase and disable+enable IRQs 2024-07-01 12:55:27 +02:00
David Garske 918fdc57fd Added keygen `--der` option to allow ECC private key as ASN.1/DER. Added sign tool ECC key load support for ASN.1/DER private key (default is raw pub x/y, priv d). Refactored sign tool RSA/ECC logic to consolidate code and allow proper "auto" detection for different RSA key sizes. 2024-06-26 20:11:04 +02:00
Marco Oliverio 0f8f30d6b8
Merge pull request #457 from danielinux/otp-regressions
Fix build OTP options
2024-06-26 12:07:02 +02:00
Daniele Lacamera 52e62688e0 [QSPI] Fixed OCTOSPI base address on stm32u5 2024-06-26 12:01:46 +02:00
Daniele Lacamera 24fdeb54d4 [QSPI] Fixed registers and pin config on STM32U5 2024-06-26 11:52:05 +02:00
David Garske 1967cc2670 STM32U5: Only try and invalidate cache if enabled. 2024-06-25 21:57:54 +02:00
David Garske a92c1b9ad9 STM32U5 cache support. Including cache invalidate on `nvm_select_fresh_sector`. ZD 18210 2024-06-25 18:12:47 +02:00
David Garske 6f83a798b3
Merge pull request #456 from rizlik/backport_debug0
qemu x86 fsp: fix support for DEBUG=0 build; fix conditional OTP compilation in Makefile
2024-06-20 08:22:57 -07:00
Marco Oliverio a413cc11ef mptable: abide GCC diagnostic false positive 2024-06-19 09:47:13 +02:00
Marco Oliverio dbdb08b3eb x86: misc fixes
fix various issues found by clangd-static-analyzer
2024-06-19 09:47:06 +02:00
Marco Oliverio 829f7b1705 fix: add image alignment costraints 2024-06-19 09:47:06 +02:00
Daniel Pouzzner 441200f469 fix: support DEBUG=0 build
* build lib/wolfssl/wolfcrypt/src/logging.o unconditionally,
* gate debug printing in do_tpm_selftest() appropriately,
* initialize top_address in src/boot_x86_fsp.c:start() to fix -Wmaybe-uninitialized,
* and add __attribute__((used)) to static src/x86/exceptions.c:common_exception_handler() and _timer_handler() implementations to accommodate asm-only calling;
* fix parallel make: add dependency of stage1/loader_stage1.bin on wolfboot.elf.
* add -ffreestanding -static flags to avoid gcc compiler optimize strings functions

Co-authored-by: Daniel Pouzzner <douzzer@wolfssl.com>
2024-06-19 09:47:06 +02:00
Daniele Lacamera 391e8d05d8 Fix build OTP options
- ARMORED option is not needed in otp_primer
- do not attempt to compile otp_primer if the option is not declared
2024-06-18 15:00:54 +02:00
David Garske ca3e8dc990
Merge pull request #454 from danielinux/armv8_ns_vtor
Set VTOR_NS instead of VTOR upon staging when TrustZone is enabled
2024-06-04 08:55:12 -07:00
Daniele Lacamera 9575bbc725 Set VTOR_NS instead of VTOR upon staging [TZEN] 2024-06-04 17:35:53 +02:00
David Garske 53a7f643b2
Merge pull request #451 from danielinux/pkcs11-fix-non-ecc-build
Fix building PKCS11 TrustZone with any authentication algorithm
2024-05-29 08:56:42 -07:00
Daniele Lacamera 7b3328ff2f Fix regression with ECC build 2024-05-29 15:18:19 +02:00
Daniele Lacamera 4dda0571c7 Fix building PKCS11 Trustzone with any auth algo 2024-05-29 15:05:56 +02:00
David Garske 971cbe0ecc
Merge pull request #449 from danielinux/stm32h7_otp
Support for OTP Flash as trust anchor for keystore
2024-05-24 16:34:29 -07:00
Daniele Lacamera 8834e344a9 Fixed build error due to missing keystore.c in otp 2024-05-24 17:01:01 +02:00
Daniele Lacamera 9b378d005b Reviewer requests: fix portability of "packed"
+ separate object for hal in otp-keystore-primer
2024-05-24 16:42:07 +02:00
Daniele Lacamera 75cd725c9d Fix linker warnings when building with otp 2024-05-24 16:37:25 +02:00
Daniele Lacamera d573efa8c6 Initialize wolfPKCS11 also in "_hwswap" mode 2024-05-24 13:23:22 +02:00
Daniele Lacamera df4dd3dadc Fixed size for memcmp/copy used in fork_bootloader 2024-05-24 13:02:51 +02:00
Lealem Amedie 2d699b4fec CMake: Add BUILD_IMAGE option 2024-05-21 10:35:59 +02:00
David Garske f0b340068a Documentation for T1024 DDR4 registers. 2024-05-20 18:51:21 +02:00
Marco Oliverio bf55ac1ab5 x86_efi: fixes
- do not use a custom section for the keystore as it will not be loaded in the
UEFI env
- remove and disable WOLFBOOT_LOAD_ADDRESS
- copy .rodata from .elf to .efi as the new version of gnu-efi ld scripts do
not merge .rodata into .data anymore
- fix typo in compile_efi_linux.sh
2024-05-20 17:03:16 +02:00
Daniele Lacamera 4a57fd2296 Added build test for H5 full config (TZ+dualbank+OTP) 2024-05-20 11:09:24 +02:00
Daniele Lacamera 84282c9bb1 Added full setup on stm32h5 2024-05-20 11:00:32 +02:00
Daniele Lacamera 307e3b426c otp_keystore_primer: fixed provisioning + readonly 2024-05-20 10:58:43 +02:00
Daniele Lacamera 8b62697f6c Fixed FLASH range config for SAU in TZ+DUALBANK
+ added non-secure area at boot for OTP to read trust anchor if OTP
  feature is enabled.
2024-05-16 16:17:48 +02:00
Daniele Lacamera fd80688a8e Added documentation on FLASH_OTP_KEYSTORE 2024-05-15 10:55:47 +02:00
Daniele Lacamera 9dd8b7cf97 Renamed FLASH_OTP_ROT to FLASH_OTP_KEYSTORE 2024-05-15 10:55:47 +02:00
Daniele Lacamera 34652ffebf Reverted hal_flash_ functions moved to static 2024-05-15 10:55:47 +02:00
Daniele Lacamera 02bfe8a6a1 Added OTP support for STM32H5 2024-05-15 10:55:47 +02:00
Daniele Lacamera 5f2a3d5ac7 Fix pointer increment 2024-05-15 10:55:46 +02:00
Daniele Lacamera 572e1157bc Added "otp-keystore-primer" tool 2024-05-15 10:55:46 +02:00
Daniele Lacamera 32578808f4 Added guard to OTP module for NO_SIGN 2024-05-15 10:55:46 +02:00
Daniele Lacamera d1eabc2e31 Keystore module for OTP in FLASH 2024-05-15 10:55:46 +02:00
Daniele Lacamera 62a5b9f8fa Export hal functions for OTP read/write access 2024-05-15 10:55:46 +02:00
David Garske 09464ca0aa API's to support OTP flash read/write on the STM32H7. Enabled with `FLASH_OTP_ROT`. 2024-05-15 10:55:46 +02:00
David Garske 0ddde6f074
Merge pull request #444 from miyazakh/renesas_rz_rsip
Add  RSIP use to Renesas RZ support
2024-05-10 11:52:12 -07:00
David Garske 027c6847e5
Merge pull request #443 from wolfSSL/x86_fsp_backport
x86 fsp backport
2024-05-09 07:46:56 -07:00