WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
2,026 Commits
29 Branches
28 Tags
20 MiB
Commit Graph

141 Commits (dd113303e24daf9c5bcd6c1dfa94e1a7389c71eb)

Author SHA1 Message Date
Daniele Lacamera 063a120ec5 Update test platform from ubuntu-20.04 to ubuntu-latest 2024-04-10 12:21:25 +02:00
Jim Norton 8fa5562003 Added custom-tlv-string non-regression test to github workflows 2024-04-05 08:52:03 +02:00
Daniele Lacamera 9ea316d18f Disabling build test 2024-03-29 10:46:57 +01:00
Daniele Lacamera ad00db4cc9 Added build test for MCXA153 2024-03-29 10:39:02 +01:00
Daniele Lacamera 00ec1b4395 Added github action to test custom TLV 2024-03-08 18:58:21 +01:00
Daniele Lacamera c7c0e8c686 Ecc521+Sha384: fixed test case 2024-03-01 16:55:22 +01:00
Daniele Lacamera a314875c79 Added support for SIGN=ECC521 2024-03-01 15:32:33 +01:00
Daniele Lacamera 0996e0f31e Added tests for custom-tlv parameters 2024-02-29 17:29:29 +01:00
Daniele Lacamera a9ba39b07e Added more tests 2024-02-26 12:34:55 +01:00
Daniele Lacamera bfe9e4fdf9 Added update+powerfail test for DISABLE_BACKUP 2024-02-22 16:27:59 +01:00
David Garske 11017d8af2
Merge pull request #405 from MulattoKid/mimxrt1040evk_support 
Add support for MIMXRT1042XJM5B
 2024-02-15 15:02:09 -08:00
David Garske aaac032566 Add LPUART1 IO init. Add automated testing for RT1040. 2024-02-15 14:54:46 -08:00
Daniele Lacamera c70c8a470d Added support for Microchip SAM E51 2024-02-15 17:30:11 +01:00
David Garske c6ac284ba0 Fix issue with parse tools installing apt packages. 2024-01-17 14:16:15 +01:00
David Garske 83283c6cf7 Fixes for NXP T1024 and booting Integrity OS: 
* Fixed PPC spin table based on ePAPR 1.1.
* Added flattened device tree (FDT) support. Setting required FDT fields per ePAPR 1.1.
* Added Frame Manager microcode upload.
* Fixed CPLD and setting QE clock.
* Added support for setting logical device numbers and updated device tree.
* Fixed QUICC Engine base address (was incorrect, should be 0x140000).
* Fixed "cpu-release-addr" to use 64-bit value.
* Added secondary cached boot page.
* Added L2 cache support to multi-core.
* Added flattened device tree parser tool for testing (`make fdt-parser` and `tools/fdt-parser/fdt-parser`).
* Added checks for FDT header.
* Added automated test case for NXP T1024 FDT.
 2024-01-17 14:16:15 +01:00
David Garske dd11fad566
Merge pull request #385 from danielinux/test-delta 
Improve delta tests + fix delta+encrypt bug
 2023-11-06 07:52:04 -08:00
jordan c31a2138ee XMSS wolfBoot support: add renode-nrf52 test case. 2023-11-06 14:31:05 +01:00
Daniele Lacamera 8d92547f1e Added test for sim-encrypt-delta-nvm-writeonce 2023-11-04 18:53:08 +01:00
David Garske 9b12acfed3 Fix typo. 2023-10-25 13:24:27 +02:00
David Garske 758eda1ad4 Add support for sealing/unsealing a secret with auth. 2023-10-25 13:24:27 +02:00
David Garske a22f8bce20 Adding GitHub CI for Windows MinGW key tools. 2023-10-25 13:17:24 +02:00
David Garske 426e7d22ff
Merge pull request #380 from danielinux/cppcheck 
Added cppcheck static analisys
 2023-10-13 08:22:50 -07:00
David Garske c1abfdd630
Merge pull request #379 from danielinux/unit-test-extend 
Added more unit tests. Added 'make cov'.
 2023-10-13 08:19:02 -07:00
Daniele Lacamera 011fbe7296 Added basic cppcheck static analisys 2023-10-13 15:49:12 +02:00
Daniele Lacamera b497ee31eb Run all unit tests from makefile 2023-10-13 15:34:02 +02:00
David Garske 8d882bc898 Peer review cleanups and added CI test. 2023-10-13 14:34:01 +02:00
John Bland f4ea7784bf add double fallback to update powerfail test since 
NVM_FLASH_WRITEONCE can powerfail after FLAGS_FINAL and TESTING partition states have been set
 2023-10-13 14:30:04 +02:00
David Garske b3e2fb9ddd NXP T1024 wolfBoot support: 
* Added DDR4 w/ECC.
* Added L2 and L2 CPC SRAM support
* Added platform SRAM 160KB support
* Added support for core timers (timebase) and platform clock.
* Added IFC driver with erase/write
* Added stage 1 loader to relocate wolfBoot to DDR
* Added CPLD, QUICC, FMAN and MP drivers
* Added eSPI driver for TPM.
* Added hal_early_init instead of calling ddr_init directly.
* Fixes for device tree (DTB) loading with update_ram and PPC boot.
* Fixes for relocating CCSRBAR to upper.
* Fixes for interrupt offsets.
 2023-10-06 15:28:16 +02:00
Daniele Lacamera dd8fb02e7c keytools: Added tests for new features 2023-09-29 14:54:08 +02:00
David Garske 56be972c9e Spelling and add TODO's for testing new keytool features. 2023-09-28 10:06:07 -07:00
David Garske 9cf947282c * Fix for building on MacOS (new keystore section issues). 
* Fix for library.o workaround.
* Added new `WOLFBOOT_DEBUG_MALLOC` option to help diagnosing malloc failures.
 2023-09-28 17:27:23 +02:00
Daniele Lacamera 291adfe87d Fixed merge of user_settings with new TPM logic 2023-09-21 08:31:28 +02:00
David Garske e3f97f401e Fix for ROT with no auth. Add test case for it. 2023-09-15 07:25:01 +02:00
David Garske c04960c097 Fix simulator to not just while(1) on panic, which causes CI to spin/timeout (instead exit with error). Fix ROT logic and make sure read error code gets passed up stack. 2023-09-12 12:26:48 +02:00
David Garske 2349a68e76 Added support for storing sealed blobs into NV. Refactor the TPM signature verify to use existing load public key function and generic verify hash TPM function. Added support for RSA sign with ASN.1 encoding (Example: `SIGN=RSA2048ENC`). 2023-09-12 12:26:48 +02:00
David Garske 490286be7d Support for sealing/unseal a secret based on an externally signed PCR policy. 
* Added new `WOLFBOOT_TPM_SEAL` and `WOLFBOOT_TPM_SEAL_NV_BASE` config options.
* Added new `tools/tpm/policy_create` tool for assisting with creation of a policy digest. The sign keytool `--policy=file` signs the policy.
* Added new `WOLFBOOT_TPM_VERIFY` option to enable offloading of the asymmetric verification to the TPM. By default wolfCrypt will be used.
* Added example seal/unseal to update_flash for ARCH_SIM.
* Renamed `WOLFBOOT_TPM_KEYSTORE_NV_INDEX` to `WOLFBOOT_TPM_KEYSTORE_NV_BASE` to support multiple public keys.
* Refactored most TPM code into tpm.c.
* Refactored the keystore ROT to use new `wolfBoot_check_rot` API.
* Refactored the sign keytool to have a sign_digest function to allow signing firmware and policy for sealing/unsealing.
* Fix for make distclean && make using the wrong key tools.
 2023-09-12 12:26:48 +02:00
jordan e23d450e45 LMS wolfBoot support. 2023-09-06 07:57:10 +02:00
David Garske 19424c86c9 Added optional `WOLFBOOT_TPM_KEYSTORE_AUTH` for build-time NV auth. 2023-08-22 07:12:05 +02:00
John Bland 131df548e6 Merge branch 'master' into nvm-encrypt-configs 2023-08-21 10:13:46 -04:00
David Garske 6ea1a1e4a5 Added GitHub action build tests for NXP parts (iMX RT, Kinetis and LPC). 2023-08-21 11:08:48 +02:00
John Bland 032fa172ec remove missing test 2023-08-21 01:39:31 -04:00
John Bland c32f05c9fb add configs for NVM_FLASH_WRITEONCE with encription, 
FLAGS_HOME, and invert. the powerfail test will fail for these configs to show the problem
 2023-08-21 01:26:55 -04:00
David Garske 701674be4f
Merge pull request #343 from jpbland1/add-nvm-configs 
add combinations of NVM_FLASH_WRITEONCE config tests
 2023-08-17 07:02:51 -07:00
David Garske 9ca58248e4 Adding GitHub Action for testing TPM features. 2023-08-17 13:43:58 +02:00
John Bland baac5cc120 revert unready tests 2023-08-17 01:42:27 -04:00
John Bland 9fa6bb3ade add combinations of NVM_FLASH_WRITEONCE config tests 2023-08-15 17:06:48 -04:00
John Bland f5a2e23de6 remove unready test 2023-08-15 12:53:41 -04:00
John Bland 20184d2b24 add test to demonstrate that NVM_FLASH_WRITEONCE 
is calling nvm_select_fresh_sector on a potentially external partition, which will fail and crashes the simulator. the next commit will hold the fix
 2023-08-15 02:57:46 -04:00
David Garske 7638bfb479
Merge pull request #333 from danielinux/update-submodules 
Updated submodules to latest versions
 2023-08-03 08:07:08 -07:00
Daniele Lacamera ac20d3ae85 Disabled test RSA3072+FASTMATH 
- renode target ran out of memory when running RSA verify
 2023-08-03 09:55:52 +02:00
John Bland f11ae239f9 fix bad genrsa statement 2023-07-28 07:55:16 +02:00
John Bland de1da2c6ca add distclean to rsa test 2023-07-28 07:55:16 +02:00
John Bland 4f4d59e2a3 fix bad trigger on test 2023-07-28 07:55:16 +02:00
John Bland fd08d321e2 fix bad openssl commands, remove redundant test 2023-07-28 07:55:16 +02:00
John Bland 517cf6b9b8 update sign to decode keys instead of assuming they're raw 
add a github workflow for testing external partition signing
 2023-07-28 07:55:16 +02:00
John Bland 1e3f30a1c6 add github action for encryption with delta updates 2023-05-17 19:39:00 +02:00
Daniele Lacamera 46ea4923d1 Build tests: change ubuntu repository 2023-05-15 14:57:27 +02:00
Daniele Lacamera 39d8eedc61 Added sim-encrypt tests to github workflow 2023-05-15 11:54:37 +02:00
John Bland b94249f8f7 correctly identify a forward powerfail vs a revert 
powerfail and add an exception to wolfBoot_delta_update when a revert gets
interrupted since the version will change in the middle of the update process
 2023-04-22 06:13:53 +02:00
John Bland 14ec346e1c before calling wolfBoot_delta_update, check if the 
0th sector has been changed with the update partition still being in
IMG_STATE_UPDATING state. the state still being IMG_STATE_UPDATING means that a
delta update started and that the version may have been switched over, in which
case wolfBoot_current_firmware_version() >= wolfBoot_update_firmware_version()
no longer tells us if we need to perform an inverse operation on it's own.

also removes part of the update powerfail test that does checks for the
previous version without triggering a rollback
 2023-04-21 20:31:58 +02:00
Daniele Lacamera 56a1158241 Disable DELTA/powerfail test 2023-03-21 18:03:38 +01:00
Daniele Lacamera 9759773f9d Added simulator tests with delta updates 2023-03-21 18:03:38 +01:00
Daniele Lacamera 49c6b46456 Fixed make commands in workflows 2023-03-21 18:03:38 +01:00
Daniele Lacamera 7e9ecbad50 Added github action for powerfail tests 2023-03-21 18:03:38 +01:00
David Garske 6f12975bc5
Merge pull request #289 from danielinux/gh-action-rsa4096 
Parallelize renode tests execution, remove unfeasible test, add compile-time check for large stack usage
 2023-03-21 10:01:17 -07:00
Daniele Lacamera 8c47d5c496 Disable TFM+RSA4096 test 2023-03-21 17:05:48 +01:00
Daniele Lacamera 40bd66dd96 Parallel memory/sha renode tests 2023-03-21 16:44:52 +01:00
Daniele Lacamera c36819ad0b Run 4 unit tests made out of unit-extflash.c 
- clear text test of ext_flash_check r/w/erase
- Aes128
- Aes256
- ChaCha
 2023-03-14 08:57:15 +01:00
Daniele Lacamera 3910ef7da9 Action name updated 2023-03-14 08:57:15 +01:00
Daniele Lacamera 645a310e26 Added libcheck installation to workflow for unit t 2023-03-14 08:57:15 +01:00
Daniele Lacamera 0b06efd347 Added unit test for encrypted external flash 2023-03-14 08:57:14 +01:00
David Garske 8dd0ee347f Support for the STM32 OCTOSPI peripheral. 2023-02-02 12:11:23 -08:00
David Garske 034fa093da Add the new example configurations to the tests. 2022-12-29 18:27:40 +01:00
David Garske 4c4fab7612 Expand build tests for aarch64 and ppc. Fixes for some minor build errors uncovered. 2022-12-28 22:47:27 +01:00
David Garske 005df0949d Disabled builds that have requirements not supported yet. Fixed L0 build. 2022-12-28 19:15:50 +01:00
David Garske 8662f2539a Adding build tests for all ARM based example configs. 2022-12-28 19:15:50 +01:00
Daniele Lacamera 186027b122 Github workflows: new test scripts 
Moved most of the commands inside the renode container.

Updated docker image to compile and run all tools, wolfboot and test
image within the renode container.
 2022-12-13 16:45:57 +01:00
Lealem Amedie 8f0e4d23aa github test: Specify image version so GLIB_C 2.34 is available 2022-12-07 11:16:36 -08:00
Daniele Lacamera 1542a15c90 Keystore: array of public keys generated by keygen 2022-07-19 15:32:28 +02:00
Daniele Lacamera acfdd1f676 Added support for RSA3072 2022-05-31 12:13:34 +02:00
David Garske 6b61b812a6
Merge pull request #194 from danielinux/footprint 
Added automated footprint regression tests
 2022-04-08 11:19:07 -07:00
Daniele Lacamera 07d5b50ce7 Fixed multi-mem SMALL_STACK test 2022-04-08 13:26:55 +02:00
Daniele Lacamera 40012321df Fixed workflow tests 2022-04-08 13:25:25 +02:00
Daniele Lacamera 3815067fa0 Fixed SIGN=NONE. Improved tests 2022-04-08 13:04:26 +02:00
Daniele Lacamera 6ff04647e9 Added automated footprint regression tests 2022-04-08 10:54:17 +02:00
Daniele Lacamera 26ba8c81bb Fixed syntax error in multi-mem workflow 2022-04-07 18:38:16 +02:00
Daniele Lacamera 4872a71e5e Update test-renode-multi-sha.yml 2022-04-07 18:38:16 +02:00
Daniele Lacamera e0214e1eed Update test-renode-multi-mem.yml 2022-04-07 18:38:16 +02:00
Daniele Lacamera 0a03cb9a45 Added more test cases to github automation 2022-04-07 18:38:16 +02:00
Daniele Lacamera d06178c3a8 Added new signature algo: ECC384 2022-04-01 12:21:42 -07:00
Daniele Lacamera 3f2eec8299 Add github actions for renode tests on docker 2022-03-03 16:40:46 +01:00