WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
2,501 Commits
31 Branches
32 Tags
44 MiB
Commit Graph

181 Commits (823d093345edf151973a0bcab554d74860f8a8f2)

Author SHA1 Message Date
Daniele Lacamera 47ad6c21ef Updated benchmark to run on rpi + stm32h563 2026-02-09 18:48:47 +01:00
Daniele Lacamera a20101d6df Add support for DICE attestation + PSA attestation 2026-02-06 18:36:47 +01:00
David Garske 8c3533af4c Cleanups and added BOOT_EL2 option. 2026-01-26 13:08:50 +01:00
David Garske dad2888450 Fixes for getting the "test-app" booting 2026-01-26 13:08:50 +01:00
David Garske 7511e2e467 Fix some compiler warnings and CI build test failures 2026-01-26 11:27:39 +01:00
David Garske e1bef7ac70 PolarFire PQC (ML-DSA) testing 2026-01-26 11:27:39 +01:00
Daniele Lacamera af670811fe zephyr integration as TEE. 
- Integrates wolfPSA as psa_crypto/psa_store engine in TrustZone
- Provides interface to access APIs from non-secure mode
- Patches to enable wolfboot as TEE module in zephyr
- Patches to enable stm32h563-nucleo/ns as target in zephyr
- psa_crypto zephyr example using wolfboot/wolfPSA as secure engine
 2026-01-07 08:27:58 +01:00
David Garske 46677d76e7 Refactor eMMC/SD code to reduce duplicate code. Moved SDHCI driver into generic module that can be used by other platforms. 2026-01-01 12:52:09 +01:00
David Garske cf08819d8e Support for CUSTOM_ENCRYPT_KEY that allows customer to supply their own implementation 2026-01-01 12:52:09 +01:00
Mattia Moffa f12d2f06b4 Add PKCS11 backend for encrypted partitions 2025-12-30 11:15:41 +01:00
Brett Nicholas 6a1120d0ab -add wolfHSM RSA4096 configs for sim and AURIX 
-various fixes for RSA4096
-remove erroneous coupling between SMALL_STACK and WOLFHSM_SERVER
 2025-12-10 07:43:32 +01:00
Brett Nicholas 57b874be2d Simplify use of user-supplied keys and certificates with test app via 
new `USER_ variables`
 2025-12-10 07:43:32 +01:00
David Garske 95b91b8401
Merge pull request #641 from mattia-moffa/20251125-nrf5340-tz 
nRF5340 TrustZone
 2025-11-25 10:14:33 -08:00
David Garske d2ed8c0a67 Update submodules for release 2025-11-25 07:44:36 +01:00
Mattia Moffa 5fb5b4b6ea nRF5340 TrustZone port 2025-11-25 03:01:03 +01:00
David Garske 2546ebcaf9 Fixes for unused variables. Also repaired STM32WB55 build with PKA 2025-11-20 18:26:58 +01:00
David Garske 8cb3d33339 Added STM32H5 SPI Driver and support for TPM 
Cleanup STM32H5 HAL port.
Refactor `__ARM_FEATURE_CMSE` to `TZ_SECURE()`
Refactor attribute cmse_nonsecure_entry to use new macro `CSME_NSE_API`
Added TPM Non Secure Callable API's
Added TPM support to STM32H5 test application
 2025-11-19 16:29:28 +01:00
David Garske ecf1cb8a92 Peer review fixes. Added new WOLFBOOT_RESTORE_CLOCK option 2025-11-19 11:11:28 +01:00
Juliusz Sosinowicz 2345138a1b Implement filesystem-based partition state access and CLI tools 
- Add filesystem access implementation in HAL (`hal/filesystem.c`)
- Introduce new library_fs target and build rules for filesystem-backed partition management
- Provide example configuration for library_fs
- Add CLI application (`hal/library_fs.c`) to query and manage partitions
- Update documentation with usage instructions and build steps for the new CLI tool
- Update .gitignore
 2025-10-30 16:31:27 +01:00
David Garske 80ec565802 Fixes for test failures 2025-10-23 18:35:09 +02:00
Brett Nicholas 4dd932ed06 fixes for new wolfHSM 2025-10-20 14:28:59 -06:00
David Garske 8ef41994c7
Merge pull request #604 from bigbrett/tc3xx-wolf-startup-integration 
TC3xx: Replace IDE/AURIX project with new HAL module
 2025-10-09 10:16:16 -07:00
Brett Nicholas 42cf7e9b70 TC3xx: Replace IDE/AURIX project with new HAL module 2025-10-08 11:03:44 -06:00
David Garske 21707c7e3b
Merge pull request #595 from danielinux/fix_malloc_pkcs11_store 
Fix malloc in pkcs11_store
 2025-10-06 13:28:27 -07:00
Brett Nicholas 2e06a5fafe Refactor Makefiles to allow overriding library dependency paths 2025-10-02 15:16:27 +02:00
Daniele Lacamera 6cdf76b54e Fix malloc in pkcs11_store 2025-09-23 17:54:29 +02:00
Daniele Lacamera 4dd87d766c Fixed missing long_call attribute, hal erase/write 
Fix definition of secure/non-secure flash areas

+ other minor fixes
 2025-07-31 15:49:20 +02:00
Daniele Lacamera a54f46415e Added HAVE_UNISTD_H to TPM build in sim 2025-07-29 15:44:24 +02:00
Brett Nicholas c106d92a48 wolfHSM server support with X509 auth 2025-06-25 12:17:39 +02:00
Alex Lanzano f9fd9fec2e Add config options for stm32f4 boards 
This introduces the following configuration options to allow for easier
support for boards using the stm32f4 MCU

CLOCK_SPEED: This defines the clock speed in Hz
STM32_PLLM: This defines the PLLM parameter in the pll clock setup
STM32_PLLN: This defines the PLLN parameter in the pll clock setup
STM32_PLLP: This defines the PLLP parameter in the pll clock setup
STM32_PLLQ: This defines the PLLQ parameter in the pll clock setup
 2025-06-21 14:54:00 -04:00
David Garske bd179ed339 Added TSIP support to the set_key, get_key and erase_key API's. Finished full encrypted update testing on Renesas RX with TSIP. Fixed issue with `No rule to make target `NONE’` using encrypted AES. 2025-06-16 19:05:49 +02:00
David Garske 73fc193931 Portability fixes with include < vs ". Added `NO_SWAP_EXT` to allow support for onboard flash swap sector. Added `WOLFSSL_NO_CT_OPS` for ECDSA verify only. Added `WC_NO_DEFAULT_DEVID` to help with code size reduction. 2025-06-16 19:05:49 +02:00
Brett Nicholas 6abf550754 review feedback: tabs to spaces 2025-06-03 13:45:09 -06:00
Brett Nicholas d689656a71 Add support for wolfHSM cert chain verification on TC3xx 2025-05-30 11:15:56 -06:00
Brett Nicholas 7660bf66f8 Add wolfHSM cert chain verification for ECC and RSA 2025-05-27 15:42:59 -06:00
Brett Nicholas d49e507926 - Support external flash for elf scatter-loading 
- Support ELF scatter-loading on TC3xx
- Modify TC3xx HAL flash erase to support arbitrary offsets and sizes
- Realign partition size and addresses to support more efficient sector mass erase on update
 2025-05-08 08:50:26 -06:00
Daniele Lacamera 9c3e86241a Some of the fixes requested during review: 
- ARCH_FLASH_OFFSET only used in simulation (dynamic 'base' address)
- Fixed the DISABLE_BACKUP case
- renamed define to WOLFBOOT_ELF_SCATTERED
 2025-04-11 15:55:05 +02:00
Daniele Lacamera e7cd340ebf Moved elf parsing/scattering to elf.c, WIP sim 2025-04-03 17:12:42 +02:00
David Garske 574f68b984
Merge pull request #548 from danielinux/encrypt_cache_in_stack 
Move encrypt cache to stack
 2025-03-27 11:07:13 -07:00
David Garske d13f3260ab Documentation cleanups. Renamed zynqmp CSU `PKA` to `HW_SHA3`. Disabled CSU PUF code, since it is only supported with eFuses (it cannot be used adhoc). 2025-03-26 09:14:57 +01:00
David Garske 851130293c Added Xilinx UltraScale+ MPSoC CSU Support CSU support. 
Enabled support for offloading SHA3 hashing to CSU hardware using PKA=1.
Added support for enabling JTAG at runtime if CSU_DEBUG is set. Requires patching PMUFW to enable register access. See: https://xilinx-wiki.atlassian.net/wiki/spaces/A/pages/2587197506/Zynq+UltraScale+MPSoC+JTAG+Enable+in+U-Boot
 2025-03-26 09:14:57 +01:00
Daniele Lacamera 3dc152cf1d Added ENCRYPT_CACHE= config option 2025-02-12 10:48:23 +01:00
Hideki Miyazaki b70987f86c
revert simple start-up 
gard UART int
NO_QNX definition
 2025-01-30 07:54:59 +09:00
jordan e2db8d58c4 Remove external ext_lms, ext_xmss pq integrations. 2025-01-20 16:38:24 +01:00
Brett Nicholas ceffc788dd - support for wolfHSM ML-DSA on simulator and AURIX (DMA only) 
- consolidate AURIX scripts into wbaurixtool.sh
- documentation updates
 2024-12-16 19:12:23 +01:00
Brett Nicholas 78e4275f99 Initial wolfHSM support for simulator and AURIX TC3xx 2024-11-13 09:52:49 +01:00
David Garske aec2809212 Cleanups after hybrid signing PR. 2024-10-31 11:23:52 +01:00
Daniele Lacamera cc447ea879 Support for hybrid authentication (2 ciphers) 2024-10-30 13:17:06 +01:00
Daniele Lacamera 0b82680b7c Fix tabs vs. space in .mk files 2024-10-25 09:10:41 +02:00
Daniele Lacamera 72a0aa3853 Added Benchmark script. Added ARMASM support. 2024-10-24 21:20:09 +02:00