WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
1,997 Commits
31 Branches
32 Tags
44 MiB
Commit Graph

120 Commits (e2db8d58c4c7fd8d55b07def9cd418134a247183)

Author SHA1 Message Date
Daniele Lacamera a171090a08 Update wolfTPM 2025-01-03 00:18:03 +01:00
Daniele Lacamera 58ca84cea8 Include wolfPKCS11 PR42 2025-01-03 00:02:33 +01:00
Daniele Lacamera fe9eddbd67 wolfPKCS11: include PR 41 2025-01-02 23:37:34 +01:00
Daniele Lacamera 2989ec9628 Updated submodules to wolfSSL 5.7.6 2025-01-02 15:03:33 +01:00
Brett Nicholas ceffc788dd - support for wolfHSM ML-DSA on simulator and AURIX (DMA only) 
- consolidate AURIX scripts into wbaurixtool.sh
- documentation updates
 2024-12-16 19:12:23 +01:00
David Garske 29794f2ad8 Update wolfssl submodule to latest master that includes https://github.com/wolfSSL/wolfssl/pull/8257 2024-12-05 10:50:25 -08:00
David Garske eddf0bd234 Progress getting the Windows tools to build. 2024-12-05 08:36:02 -08:00
Brett Nicholas 78e4275f99 Initial wolfHSM support for simulator and AURIX TC3xx 2024-11-13 09:52:49 +01:00
Daniele Lacamera bc15359521 Update submodules 2024-10-30 10:21:40 +01:00
Daniele Lacamera ca03fd9d85 Updated wolfSSL to latest version 2024-10-21 15:09:16 +02:00
Daniele Lacamera 8386a503f8 Added NO_WOLFSSL_MALLOC 2024-10-11 20:48:34 +02:00
Daniele Lacamera b65879f9a0 Update to wolfssl with PR 8053 2024-10-11 10:30:46 +02:00
Daniele Lacamera 4f5ad04a9a Updated submodule 'wolfssl' to latest master 2024-10-11 10:30:46 +02:00
David Garske 080dae0125 Fixes to properly support TPM policy with more than one PCR. 2024-09-10 20:53:10 +02:00
Daniele Lacamera 5295050071 Updated submodules (wolfSSL 5.7.2) 2024-07-22 16:29:12 +02:00
jordan a17819fef7 Update wolfSSL submodule to include wolfcrypt LMS and XMSS. 2024-05-07 19:25:18 +02:00
Daniele Lacamera fce6149cf8 Update license GPL2 -> GPL3 2024-04-16 16:46:15 +02:00
Daniele Lacamera c64cb4ee06 Updated submodules: wolfSSL-v5.7.0 + wolfTPM latest 2024-04-10 11:25:06 +02:00
David Garske 4408eeaa74 Fixes for sealing/unsealing: 
* Fix for sealing policy, which was not being set on creation.
* Fix to clear the userWithAuth bit requiring policy
* Updated wolfTPM submodule with changes in https://github.com/wolfSSL/wolfTPM/pull/327
 2024-02-03 10:09:03 -08:00
Daniele Lacamera 206116a5ec Updated submodules 2023-12-27 12:01:30 +01:00
Daniele Lacamera 091c036b6c Improve documentation for x86 targets 
+ fix qemu's make_hd.sh script
 2023-11-06 17:15:38 +01:00
Daniele Lacamera 76270eec6b Update submodules to tag versions 
- wolfSSL v5.6.4
- wolfTPM v3.0.0
 2023-11-06 14:32:12 +01:00
David Garske a22f8bce20 Adding GitHub CI for Windows MinGW key tools. 2023-10-25 13:17:24 +02:00
John Bland bfe85d6a2f restore correct wolfTPM and wolfssl versions 2023-10-13 14:30:04 +02:00
John Bland 6c2a37bdea remove complicated key saving process and instead 
leave the encryption key for wolfBoot_success to erase.
FINAL_SWAP was also stopping the case where the partition was put into testing before the update sector status flags could be erased. now, don't erase the update sector flags. instead put the update partition in IMG_STATE_FINAL_FLAGS state before putting the boot partition in IMG_STATE_TESTING. Then only erase the update sector flags on wolfBoot_update_trigger. under this scheme, the sector flags are intact if the power failed before we could set IMG_STATE_TESTING but are wiped if we do need to swap over after after wolfBoot_success fails to be called
 2023-10-13 14:30:04 +02:00
Marco Oliverio 133479f212 fsp: defer SATA init in wolfBoot_start 
In hal_init() TPM is not ready yet. SATA inti code needs TPM to unlock disk when
using TPM sealed secret based disk locking.
 2023-09-28 13:12:26 +02:00
Daniele Lacamera e4abcbd78b Expanded RAM space for App 64->128 KB 2023-09-21 08:29:16 +02:00
Daniele Lacamera fd862cbd8f Working PKCS11 test. 
Temporarily removed some features so the image fits in 64Kb
 2023-09-21 08:28:09 +02:00
Daniele Lacamera 5b57d2d08f PKCS11 store functions using wolfBoot hal 2023-09-21 07:57:18 +02:00
Daniele Lacamera f7d6c17685 TZ: PKCS11 wrappers via wolfPKCS11 in S world 2023-09-21 07:57:18 +02:00
David Garske bc90f85f1b Fix to use the new unset auth session API, that captures the last TPM nonce, so the session auth can be properly set again. Requires wolfTPM PR https://github.com/wolfSSL/wolfTPM/pull/299 2023-09-18 15:09:53 +02:00
David Garske c04960c097 Fix simulator to not just while(1) on panic, which causes CI to spin/timeout (instead exit with error). Fix ROT logic and make sure read error code gets passed up stack. 2023-09-12 12:26:48 +02:00
David Garske 490286be7d Support for sealing/unseal a secret based on an externally signed PCR policy. 
* Added new `WOLFBOOT_TPM_SEAL` and `WOLFBOOT_TPM_SEAL_NV_BASE` config options.
* Added new `tools/tpm/policy_create` tool for assisting with creation of a policy digest. The sign keytool `--policy=file` signs the policy.
* Added new `WOLFBOOT_TPM_VERIFY` option to enable offloading of the asymmetric verification to the TPM. By default wolfCrypt will be used.
* Added example seal/unseal to update_flash for ARCH_SIM.
* Renamed `WOLFBOOT_TPM_KEYSTORE_NV_INDEX` to `WOLFBOOT_TPM_KEYSTORE_NV_BASE` to support multiple public keys.
* Refactored most TPM code into tpm.c.
* Refactored the keystore ROT to use new `wolfBoot_check_rot` API.
* Refactored the sign keytool to have a sign_digest function to allow signing firmware and policy for sealing/unsealing.
* Fix for make distclean && make using the wrong key tools.
 2023-09-12 12:26:48 +02:00
David Garske 95b0d9090d Fixes for building TPM keystore with arch x86_64. 2023-08-24 16:38:20 +02:00
Tesfa Mael 6e1c24947b update wolfTPM 2023-08-22 07:18:15 +02:00
Tesfa Mael a29b78d680 Add function headers 2023-08-22 07:18:15 +02:00
David Garske 9ca58248e4 Adding GitHub Action for testing TPM features. 2023-08-17 13:43:58 +02:00
David Garske 69adb25496 wolfBoot TPM improvements: 
* Added TPM SPI wait state support and debug logging.
* Added platform auth ownership (change platform password to random value before boot). Can be disabled using `WOLFBOOT_TPM_NO_CHG_PLAT_AUTH`.
* Added parameter encryption support.
* Added TPM based root of trust based on https://github.com/wolfSSL/wolfTPM/pull/276
* Removed the TPM hashing feature (not practical).
* Fixed RSA with wolfTPM build.
* Fixed cleanup wolfTPM objects on make clean.
 2023-08-17 13:43:58 +02:00
Daniele Lacamera 3bd3fa14a9 Updated submodules to latest version 2023-08-03 08:07:38 +02:00
Marco Oliverio c4ec5eef35 x86: support Intel FSP (TigerLake and QEMU) 2023-07-24 18:12:32 +00:00
Daniele Lacamera 8bab854ec9 Added changelog 2023-07-06 14:16:58 +02:00
Daniele Lacamera b131ae553e Updated submodules 2023-07-05 18:34:42 +02:00
John Bland c6629ed86a add missing steps for policy pubkey sealing 
update wolfTPM version to include new sealing functions, add preseal helper commands
 2023-05-18 12:33:49 +02:00
Daniele Lacamera 769cbb8b1e Updated submodule to wolfSSL latest tag 2023-04-13 17:14:44 +02:00
Daniele Lacamera 3ecf85efec Updated submodules to latest version 2023-04-13 17:13:14 +02:00
Daniele Lacamera 4e34b7cbe2 Updated submodules to latest versions 2022-12-30 10:57:05 +01:00
Lealem Amedie 18bfcecd6b wolfBoot cmake support 2022-12-07 13:00:10 -08:00
Daniele Lacamera 3522780c7d Updated lib/wolfssl to v5.5.3-stable 2022-11-03 14:13:01 +01:00
Daniele Lacamera c41f84d356 lib/wolfssl updated to v5.5.2-stable 2022-11-03 08:37:30 +01:00
Daniele Lacamera 24faa4f091 Update to wolfSSL master 2022-10-25 17:56:18 +02:00