Brett Nicholas
d689656a71
Add support for wolfHSM cert chain verification on TC3xx
2025-05-30 11:15:56 -06:00
Brett Nicholas
7660bf66f8
Add wolfHSM cert chain verification for ECC and RSA
2025-05-27 15:42:59 -06:00
Brett Nicholas
d49e507926
- Support external flash for elf scatter-loading
...
- Support ELF scatter-loading on TC3xx
- Modify TC3xx HAL flash erase to support arbitrary offsets and sizes
- Realign partition size and addresses to support more efficient sector mass erase on update
2025-05-08 08:50:26 -06:00
Daniele Lacamera
9c3e86241a
Some of the fixes requested during review:
...
- ARCH_FLASH_OFFSET only used in simulation (dynamic 'base' address)
- Fixed the DISABLE_BACKUP case
- renamed define to WOLFBOOT_ELF_SCATTERED
2025-04-11 15:55:05 +02:00
Daniele Lacamera
e7cd340ebf
Moved elf parsing/scattering to elf.c, WIP sim
2025-04-03 17:12:42 +02:00
David Garske
574f68b984
Merge pull request #548 from danielinux/encrypt_cache_in_stack
...
Move encrypt cache to stack
2025-03-27 11:07:13 -07:00
David Garske
d13f3260ab
Documentation cleanups. Renamed zynqmp CSU `PKA` to `HW_SHA3`. Disabled CSU PUF code, since it is only supported with eFuses (it cannot be used adhoc).
2025-03-26 09:14:57 +01:00
David Garske
851130293c
Added Xilinx UltraScale+ MPSoC CSU Support CSU support.
...
Enabled support for offloading SHA3 hashing to CSU hardware using PKA=1.
Added support for enabling JTAG at runtime if CSU_DEBUG is set. Requires patching PMUFW to enable register access. See: https://xilinx-wiki.atlassian.net/wiki/spaces/A/pages/2587197506/Zynq+UltraScale+MPSoC+JTAG+Enable+in+U-Boot
2025-03-26 09:14:57 +01:00
Daniele Lacamera
3dc152cf1d
Added ENCRYPT_CACHE= config option
2025-02-12 10:48:23 +01:00
Hideki Miyazaki
b70987f86c
revert simple start-up
...
gard UART int
NO_QNX definition
2025-01-30 07:54:59 +09:00
jordan
e2db8d58c4
Remove external ext_lms, ext_xmss pq integrations.
2025-01-20 16:38:24 +01:00
Brett Nicholas
ceffc788dd
- support for wolfHSM ML-DSA on simulator and AURIX (DMA only)
...
- consolidate AURIX scripts into wbaurixtool.sh
- documentation updates
2024-12-16 19:12:23 +01:00
Brett Nicholas
78e4275f99
Initial wolfHSM support for simulator and AURIX TC3xx
2024-11-13 09:52:49 +01:00
David Garske
aec2809212
Cleanups after hybrid signing PR.
2024-10-31 11:23:52 +01:00
Daniele Lacamera
cc447ea879
Support for hybrid authentication (2 ciphers)
2024-10-30 13:17:06 +01:00
Daniele Lacamera
0b82680b7c
Fix tabs vs. space in .mk files
2024-10-25 09:10:41 +02:00
Daniele Lacamera
72a0aa3853
Added Benchmark script. Added ARMASM support.
2024-10-24 21:20:09 +02:00
jordan
b97abd4ace
Add ML-DSA support.
2024-10-14 10:13:52 +02:00
David Garske
d803a20217
Switch to using IPC for communicating state. Prevents possible hard fault on network core reset. Cleanup make logic for using custom partition id (WOLFBOOT_PART_ID). On net update allow app core to continue booting if synchronization is enabled.
2024-10-11 10:29:59 +02:00
David Garske
7260ecbcbb
Added tests for delta updates. Added logging for delta version errors. Added `SIGN_OPTIONS_EXTRA`.
2024-10-11 10:29:59 +02:00
Daniele Lacamera
294d62d0c6
[SAMA5D3] Support for DDR2 memory on -xplained
2024-09-30 14:06:23 +02:00
Daniele Lacamera
888d538760
[SAMA5D3] Nand flash driver
2024-09-30 14:06:17 +02:00
Daniele Lacamera
6737d7e7ad
Refactoring of PKCS11 store module + unit tests
2024-09-05 18:53:03 +02:00
David Garske
13fc3c069c
Fix for XMSS `WOLFBOOT_XMSS_PARAMS` for Xilinx Vitis symbol with string. Fix stack size for LMS.
2024-08-14 18:06:12 +02:00
David Garske
9e17315d49
Fixes for building wolfBoot with XMSS/LMS.
2024-08-14 18:06:12 +02:00
Brett Nicholas
2d6308ec2c
- Infineon TC3xx support
...
- fix (existing) unused variable compiler warnings
- documentation updates
- add multi-sector erase option
2024-07-31 09:22:31 +02:00
David Garske
3444c47fdb
* Added support for RX65N and RX72N with native Makefile and RX ELF GCC compiler.
...
* Added initialization of the clocks and UART driver.
- wolfBoot uses on chip high speed oscillator (HOCO) at (120MHz RX65N and 240Mhz for RX72N).
* Added RX RSPI and QSPI driver support with external SPI flash
* Improve documentation and fix spelling errors.
* Added .srec (s-record) format support
* Added RX TSIP support for ECDSA (requires https://github.com/wolfSSL/wolfssl/pull/7685 ).
* Allow custom implementation of `get_trailer_at`, `set_trailer_at` and `set_partition_magic` using `CUSTOM_PARTITION_TRAILER`
2024-07-17 06:08:31 +02:00
Daniele Lacamera
7b3328ff2f
Fix regression with ECC build
2024-05-29 15:18:19 +02:00
Daniele Lacamera
4dda0571c7
Fix building PKCS11 Trustzone with any auth algo
2024-05-29 15:05:56 +02:00
Daniele Lacamera
9dd8b7cf97
Renamed FLASH_OTP_ROT to FLASH_OTP_KEYSTORE
2024-05-15 10:55:47 +02:00
Daniele Lacamera
62a5b9f8fa
Export hal functions for OTP read/write access
2024-05-15 10:55:46 +02:00
David Garske
027c6847e5
Merge pull request #443 from wolfSSL/x86_fsp_backport
...
x86 fsp backport
2024-05-09 07:46:56 -07:00
Daniele Lacamera
3ec982109c
STM32H5: added support for TrustZone
...
- Unified TZ support for STM32L5, STM32H5, STM32U5
- Fixed/added example configuration files
- Expanded documentation
- Added new configurations to automated tests
2024-05-09 16:33:40 +02:00
jordan
e50ff6e2e8
Small cleanup to LMS build.
2024-05-07 19:25:18 +02:00
jordan
06aba3de2f
Reduce wc_lms build size.
2024-05-07 19:25:18 +02:00
jordan
bd0e25af16
Add wc_lms support.
2024-05-07 19:25:18 +02:00
jordan
13d746ab9a
Add wc_xmss support.
2024-05-07 19:25:18 +02:00
Marco Oliverio
62c938f99d
x86: tgl: remove binary FSP_S upd parameters
...
The parameters are configured in fsp_set_silicon_cfg
2024-04-29 09:53:49 +02:00
Marco Oliverio
b663ebe979
tpm seal: add define to choose the key id to seal with
2024-04-23 10:41:47 +02:00
Daniele Lacamera
12f8f75c89
Add `HAVE_NETDB_H` to tpmtools and sim-wolfboot
2024-04-10 12:45:52 +02:00
jordan
cf0519903c
Fix lms and xmss build.
2024-03-19 21:50:46 +01:00
Daniele Lacamera
a314875c79
Added support for SIGN=ECC521
2024-03-01 15:32:33 +01:00
jordan
79aadb5cc1
XMSS wolfBoot support.
2023-11-06 14:31:05 +01:00
David Garske
758eda1ad4
Add support for sealing/unsealing a secret with auth.
2023-10-25 13:24:27 +02:00
David Garske
b3e2fb9ddd
NXP T1024 wolfBoot support:
...
* Added DDR4 w/ECC.
* Added L2 and L2 CPC SRAM support
* Added platform SRAM 160KB support
* Added support for core timers (timebase) and platform clock.
* Added IFC driver with erase/write
* Added stage 1 loader to relocate wolfBoot to DDR
* Added CPLD, QUICC, FMAN and MP drivers
* Added eSPI driver for TPM.
* Added hal_early_init instead of calling ddr_init directly.
* Fixes for device tree (DTB) loading with update_ram and PPC boot.
* Fixes for relocating CCSRBAR to upper.
* Fixes for interrupt offsets.
2023-10-06 15:28:16 +02:00
Daniele Lacamera
0636e7d882
Added option WOLFBOOT_UNIVERSAL_KEYSTORE
...
- Allows keys with different algorithms and sizes to be imported/generated
- Skips check for keys matching type/length in keystore
2023-09-28 17:28:32 +02:00
David Garske
9cf947282c
* Fix for building on MacOS (new keystore section issues).
...
* Fix for library.o workaround.
* Added new `WOLFBOOT_DEBUG_MALLOC` option to help diagnosing malloc failures.
2023-09-28 17:27:23 +02:00
Marco Oliverio
fa7bb89edb
ahci: add support for disk unlocking based on tpm sealed secret
2023-09-28 13:12:26 +02:00
Daniele Lacamera
b29290b583
Added flag WOLFSSL_PKCS11_RW_TOKENS
...
Writable token support in PR wolfssl/wolfssl#6778
2023-09-21 08:31:30 +02:00
Daniele Lacamera
212d1d834d
Fix build size for PPC stage1
2023-09-21 08:31:30 +02:00