Commit Graph

2431 Commits (d0ea72fca7abb4bcbd9747509ea40b786f0c88be)

Author SHA1 Message Date
Daniele Lacamera d0ea72fca7 Added test for L5, up to container 1.1 2026-01-15 13:54:10 +01:00
Daniele Lacamera 9a5b314e16 Changed CI emulator container version 2026-01-15 13:54:10 +01:00
Daniele Lacamera 15ea436530 Fixed trustzone emulation test for stm32l552 2026-01-15 13:54:10 +01:00
Daniele Lacamera 95833443ea (stm32u5) fixed other instance of wrong SECTOR_SIZE 2026-01-15 13:54:10 +01:00
Daniele Lacamera 1ac1b608f2 Fixed stm32u5 WOLFBOOT_SECTOR_SIZE 2026-01-15 13:54:10 +01:00
Daniele Lacamera 97b6f3b63b Fixes for stm32u5, added workflow test 2026-01-15 13:54:10 +01:00
Daniele Lacamera 629935648a Added safe.directory for workspace 2026-01-15 13:54:10 +01:00
Daniele Lacamera 2330e16c12 updated wolfPSA module url 2026-01-15 13:54:10 +01:00
Daniele Lacamera df2cdcc9d6 Added submodule init in new workflow 2026-01-15 13:54:10 +01:00
Daniele Lacamera 85a3cdad60 Fix path in workflow 2026-01-15 13:54:10 +01:00
Daniele Lacamera 077e2fc2ea Added github workflow for m33mu-based tests 2026-01-15 13:54:10 +01:00
Daniele Lacamera 26f942aff1 Improved test, added scenario separation 2026-01-15 13:54:10 +01:00
Daniele Lacamera 8d16d9fb22 Fixed test to work in trustzone 2026-01-15 13:54:10 +01:00
Daniele Lacamera 7f2ce98d18 Minor log message rewords in emu-test 2026-01-15 13:54:10 +01:00
Daniele Lacamera 09a6292f7e Added 'emu-test-apps' + test.sh script for m33mu 2026-01-15 13:54:10 +01:00
David Garske 16887c6e3d
Merge pull request #665 from danielinux/armored-tz-fixes
Improve ARMORED code + minor fixes
2026-01-14 12:52:04 -08:00
Daniele Lacamera 847f1f15c4 Fix incorrectly mapped SAU for NS-RAM 2026-01-14 20:54:29 +01:00
Daniele Lacamera 224d0ea2a1 Removed leftover debug traces for rng testing 2026-01-14 10:26:57 +01:00
Daniele Lacamera da35fd5a04 Made all cmp/flag checks more redundant in ARMORED 2026-01-13 16:19:06 +01:00
Daniele Lacamera fdf241d21f Addressed reviewer's comments. 2026-01-13 14:15:10 +01:00
Daniele Lacamera 22fbc78508 Simplified/fixed SAU setup 2026-01-13 13:57:34 +01:00
Daniele Lacamera 5ac5191553 Uniform STM32L5 flash write hal
- update partition is now secure, only accessible via NSC
- removed legacy security settings in hal_flash_write/erase when running
  in secure mode
- Added explicit IMAGE_HEADER_SIZE to default config
2026-01-13 13:46:58 +01:00
David Garske e3803652ba
Merge pull request #658 from bigbrett/imxrt-serial-clk-fix
i.mx RT serial clk fix
2026-01-12 09:08:28 -08:00
Daniele Lacamera d4e66e5c5e
Update src/image.c: remove duplicated code
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-12 12:39:31 +01:00
Daniele Lacamera 7efb613875 Adjusted size limits for gcc 13.2 (CI) 2026-01-12 10:28:44 +01:00
Daniele Lacamera 22d202426c Update size limits 2026-01-12 10:10:34 +01:00
Daniele Lacamera 12f99a8b8c Silencing compiler warning 2026-01-12 09:44:44 +01:00
Daniele Lacamera 50d8aedf8c [ARMORED] Improved redundancy of verification 2026-01-12 09:44:44 +01:00
Daniele Lacamera 08692b1d8e Fix handling rollback when ARMORED=1 and FLASH_TOP 2026-01-12 09:44:44 +01:00
David Garske 8577188eaa
Merge pull request #663 from bigbrett/sim-self-update
basic simulator self-update test
2026-01-09 10:10:03 -08:00
Brett Nicholas e31755be4b sim self update: test external flash 2026-01-08 13:31:33 -08:00
Brett Nicholas d661c2afb3 Add support for simulator self-update test 2026-01-08 09:40:44 -08:00
David Garske 4ff0e0ad7d
Merge pull request #662 from danielinux/zephyr-psa
zephyr integration as TEE.
2026-01-08 08:53:11 -08:00
Daniele Lacamera 087a51ebfa Fixed zephyr patches to include missing files 2026-01-08 16:08:48 +01:00
Daniele Lacamera af670811fe zephyr integration as TEE.
- Integrates wolfPSA as psa_crypto/psa_store engine in TrustZone
- Provides interface to access APIs from non-secure mode
- Patches to enable wolfboot as TEE module in zephyr
- Patches to enable stm32h563-nucleo/ns as target in zephyr
- psa_crypto zephyr example using wolfboot/wolfPSA as secure engine
2026-01-07 08:27:58 +01:00
David Garske 12d7f0a153 Improved encryption constants between the bootloader and the signing tool. Allows the sign tool to properly use the correct block size for each encryption algorithm (64 for ChaCha, 16 for AES). 2026-01-05 20:37:04 +01:00
David Garske 4673c8272d Add support for fixing up the Ethernet MAC using device serial number (matches U-Boot behavior). 2026-01-01 12:52:09 +01:00
David Garske 46677d76e7 Refactor eMMC/SD code to reduce duplicate code. Moved SDHCI driver into generic module that can be used by other platforms. 2026-01-01 12:52:09 +01:00
David Garske 247a9eb20e Add support for eMMC (tested) 2026-01-01 12:52:09 +01:00
David Garske 42dcebb6c4 Add eMMC support. 2026-01-01 12:52:09 +01:00
David Garske cf08819d8e Support for CUSTOM_ENCRYPT_KEY that allows customer to supply their own implementation 2026-01-01 12:52:09 +01:00
David Garske 5a4862525d Fixes for mmc_write. 2026-01-01 12:52:09 +01:00
Brett Nicholas 24d8599e05 imxrt: modify hal_init to no longer override clk frequency and respect CONFIG_SERIAL_CLK_FREQ 2025-12-30 10:50:09 -08:00
Mattia Moffa 0462e0a198 More consistent formatting 2025-12-30 11:15:41 +01:00
Mattia Moffa ce4ae39d65 Address copilot suggestions 2025-12-30 11:15:41 +01:00
Mattia Moffa 7800c364e9 Fix cppcheck complaint 2025-12-30 11:15:41 +01:00
Mattia Moffa f12d2f06b4 Add PKCS11 backend for encrypted partitions 2025-12-30 11:15:41 +01:00
Aidan Garske aa39be21a3 Address copilot review 2025-12-30 11:13:49 +01:00
Aidan Garske 145256ad29 Add Image Inspection Functionality to boot_status.py 2025-12-30 11:13:49 +01:00
gojimmypi c0ef637ae5 Introduce new wolfboot image inspection scripts 2025-12-30 11:13:49 +01:00