Mattia Moffa
fcf72e008c
Remove NO_DIRECT_READ_OF_ERASED_SECTOR option; write after erase instead
2026-03-18 11:53:26 +01:00
Thomas Cook
dd4312679b
Deploy NO_DIRECT_READ_OF_ERASED_SECTOR to protect against hardfault with AHB read of erased sector.
2026-03-18 11:53:26 +01:00
David Garske
d62e8ae430
Improve measured boot support
2026-03-17 22:19:32 +01:00
Daniele Lacamera
ea3e1db808
Added missing object in trustzone builds
2026-03-16 10:22:03 +01:00
Daniele Lacamera
4eca085b54
Added USE_CLANG option to Makefile
2026-03-10 15:49:45 +01:00
Daniele Lacamera
19d562dbde
Fixed build errors with cross-clang compiler
2026-03-10 15:49:39 +01:00
Brett Nicholas
04e1e063a2
Fix self-update erase before write in boot partition, add monolithic build option
2026-03-06 17:05:45 +01:00
Brett Nicholas
3f18028e13
add build option to skip verification of boot image
2026-03-06 17:05:45 +01:00
David Garske
a5356b830a
NXP T2080 Port Refresh
...
* Initial port refresh for the NXP T2080 target
* IFC Flash driver and multi-core support on T2080
* Working wolfBoot test-app startup on T2080
* Support for NAII and Curtiss-Wright T2080 vendor boards
2026-03-05 17:49:37 +01:00
Brett Nicholas
3d5499f90a
address review feedback
2026-03-05 10:14:04 +01:00
Brett Nicholas
2924646695
Add generic hook framework with provision for pre-init, post-init, and
...
boot hooks
2026-03-05 10:14:04 +01:00
Brett Nicholas
4d31ef5502
Add self-header feature with support for sim and AURIX TC3xx
2026-02-27 11:39:51 +01:00
Daniele Lacamera
47ad6c21ef
Updated benchmark to run on rpi + stm32h563
2026-02-09 18:48:47 +01:00
Daniele Lacamera
a20101d6df
Add support for DICE attestation + PSA attestation
2026-02-06 18:36:47 +01:00
David Garske
8c3533af4c
Cleanups and added BOOT_EL2 option.
2026-01-26 13:08:50 +01:00
David Garske
dad2888450
Fixes for getting the "test-app" booting
2026-01-26 13:08:50 +01:00
David Garske
7511e2e467
Fix some compiler warnings and CI build test failures
2026-01-26 11:27:39 +01:00
David Garske
e1bef7ac70
PolarFire PQC (ML-DSA) testing
2026-01-26 11:27:39 +01:00
Daniele Lacamera
af670811fe
zephyr integration as TEE.
...
- Integrates wolfPSA as psa_crypto/psa_store engine in TrustZone
- Provides interface to access APIs from non-secure mode
- Patches to enable wolfboot as TEE module in zephyr
- Patches to enable stm32h563-nucleo/ns as target in zephyr
- psa_crypto zephyr example using wolfboot/wolfPSA as secure engine
2026-01-07 08:27:58 +01:00
David Garske
46677d76e7
Refactor eMMC/SD code to reduce duplicate code. Moved SDHCI driver into generic module that can be used by other platforms.
2026-01-01 12:52:09 +01:00
David Garske
cf08819d8e
Support for CUSTOM_ENCRYPT_KEY that allows customer to supply their own implementation
2026-01-01 12:52:09 +01:00
Mattia Moffa
f12d2f06b4
Add PKCS11 backend for encrypted partitions
2025-12-30 11:15:41 +01:00
Brett Nicholas
6a1120d0ab
-add wolfHSM RSA4096 configs for sim and AURIX
...
-various fixes for RSA4096
-remove erroneous coupling between SMALL_STACK and WOLFHSM_SERVER
2025-12-10 07:43:32 +01:00
Brett Nicholas
57b874be2d
Simplify use of user-supplied keys and certificates with test app via
...
new `USER_ variables`
2025-12-10 07:43:32 +01:00
David Garske
95b91b8401
Merge pull request #641 from mattia-moffa/20251125-nrf5340-tz
...
nRF5340 TrustZone
2025-11-25 10:14:33 -08:00
David Garske
d2ed8c0a67
Update submodules for release
2025-11-25 07:44:36 +01:00
Mattia Moffa
5fb5b4b6ea
nRF5340 TrustZone port
2025-11-25 03:01:03 +01:00
David Garske
2546ebcaf9
Fixes for unused variables. Also repaired STM32WB55 build with PKA
2025-11-20 18:26:58 +01:00
David Garske
8cb3d33339
Added STM32H5 SPI Driver and support for TPM
...
Cleanup STM32H5 HAL port.
Refactor `__ARM_FEATURE_CMSE` to `TZ_SECURE()`
Refactor attribute cmse_nonsecure_entry to use new macro `CSME_NSE_API`
Added TPM Non Secure Callable API's
Added TPM support to STM32H5 test application
2025-11-19 16:29:28 +01:00
David Garske
ecf1cb8a92
Peer review fixes. Added new WOLFBOOT_RESTORE_CLOCK option
2025-11-19 11:11:28 +01:00
Juliusz Sosinowicz
2345138a1b
Implement filesystem-based partition state access and CLI tools
...
- Add filesystem access implementation in HAL (`hal/filesystem.c`)
- Introduce new library_fs target and build rules for filesystem-backed partition management
- Provide example configuration for library_fs
- Add CLI application (`hal/library_fs.c`) to query and manage partitions
- Update documentation with usage instructions and build steps for the new CLI tool
- Update .gitignore
2025-10-30 16:31:27 +01:00
David Garske
80ec565802
Fixes for test failures
2025-10-23 18:35:09 +02:00
Brett Nicholas
4dd932ed06
fixes for new wolfHSM
2025-10-20 14:28:59 -06:00
David Garske
8ef41994c7
Merge pull request #604 from bigbrett/tc3xx-wolf-startup-integration
...
TC3xx: Replace IDE/AURIX project with new HAL module
2025-10-09 10:16:16 -07:00
Brett Nicholas
42cf7e9b70
TC3xx: Replace IDE/AURIX project with new HAL module
2025-10-08 11:03:44 -06:00
David Garske
21707c7e3b
Merge pull request #595 from danielinux/fix_malloc_pkcs11_store
...
Fix malloc in pkcs11_store
2025-10-06 13:28:27 -07:00
Brett Nicholas
2e06a5fafe
Refactor Makefiles to allow overriding library dependency paths
2025-10-02 15:16:27 +02:00
Daniele Lacamera
6cdf76b54e
Fix malloc in pkcs11_store
2025-09-23 17:54:29 +02:00
Daniele Lacamera
4dd87d766c
Fixed missing long_call attribute, hal erase/write
...
Fix definition of secure/non-secure flash areas
+ other minor fixes
2025-07-31 15:49:20 +02:00
Daniele Lacamera
a54f46415e
Added HAVE_UNISTD_H to TPM build in sim
2025-07-29 15:44:24 +02:00
Brett Nicholas
c106d92a48
wolfHSM server support with X509 auth
2025-06-25 12:17:39 +02:00
Alex Lanzano
f9fd9fec2e
Add config options for stm32f4 boards
...
This introduces the following configuration options to allow for easier
support for boards using the stm32f4 MCU
CLOCK_SPEED: This defines the clock speed in Hz
STM32_PLLM: This defines the PLLM parameter in the pll clock setup
STM32_PLLN: This defines the PLLN parameter in the pll clock setup
STM32_PLLP: This defines the PLLP parameter in the pll clock setup
STM32_PLLQ: This defines the PLLQ parameter in the pll clock setup
2025-06-21 14:54:00 -04:00
David Garske
bd179ed339
Added TSIP support to the set_key, get_key and erase_key API's. Finished full encrypted update testing on Renesas RX with TSIP. Fixed issue with `No rule to make target `NONE’` using encrypted AES.
2025-06-16 19:05:49 +02:00
David Garske
73fc193931
Portability fixes with include < vs ". Added `NO_SWAP_EXT` to allow support for onboard flash swap sector. Added `WOLFSSL_NO_CT_OPS` for ECDSA verify only. Added `WC_NO_DEFAULT_DEVID` to help with code size reduction.
2025-06-16 19:05:49 +02:00
Brett Nicholas
6abf550754
review feedback: tabs to spaces
2025-06-03 13:45:09 -06:00
Brett Nicholas
d689656a71
Add support for wolfHSM cert chain verification on TC3xx
2025-05-30 11:15:56 -06:00
Brett Nicholas
7660bf66f8
Add wolfHSM cert chain verification for ECC and RSA
2025-05-27 15:42:59 -06:00
Brett Nicholas
d49e507926
- Support external flash for elf scatter-loading
...
- Support ELF scatter-loading on TC3xx
- Modify TC3xx HAL flash erase to support arbitrary offsets and sizes
- Realign partition size and addresses to support more efficient sector mass erase on update
2025-05-08 08:50:26 -06:00
Daniele Lacamera
9c3e86241a
Some of the fixes requested during review:
...
- ARCH_FLASH_OFFSET only used in simulation (dynamic 'base' address)
- Fixed the DISABLE_BACKUP case
- renamed define to WOLFBOOT_ELF_SCATTERED
2025-04-11 15:55:05 +02:00
Daniele Lacamera
e7cd340ebf
Moved elf parsing/scattering to elf.c, WIP sim
2025-04-03 17:12:42 +02:00