Laukik Hase
c23714f775
feat(esp_tee): Add support for flash memory isolation and protection (SPI1)
2025-02-11 12:30:05 +05:30
Laukik Hase
37525c605d
refactor(esp_tee): Migrate secure services list from TBL to YAML
2025-02-11 10:15:20 +05:30
Laukik Hase
8f117c7f4c
refactor(esp_tee): Add local components in TEE examples via idf_component.yml
2025-02-11 10:15:19 +05:30
Marius Vikhammer
85ec6a41f9
Merge branch 'feature/build_docs_h21' into 'master'
...
docs(build): add support for building H21 docs
Closes IDF-12105
See merge request espressif/esp-idf!36632
2025-02-06 11:25:36 +08:00
Marius Vikhammer
1e72b10b26
docs(build): add support for building H21 docs
2025-01-26 11:44:28 +08:00
Laukik Hase
a91f89026c
feat(esp_tee): Make the attestation service configurable
2025-01-23 12:39:17 +05:30
Mahavir Jain
e1a737e401
refactor(docs): re-organize security docs for better navigation
2025-01-09 09:35:12 +05:30
Laukik Hase
cb84119600
docs(esp_tee): Added documentation for the ESP-TEE framework
...
- Co-authored-by: Shen Meng Jing <shenmengjing@espressif.com >
2025-01-08 11:37:42 +05:30
shenmengjing
29a7146b12
docs: Update CN translation for secure-boot-v2.rst
2024-12-20 11:24:49 +08:00
zhangyanjiao
4784b5aad8
fix(wifi): Added CVE-2024-53845 to vulnerabilities list
2024-12-12 14:07:20 +08:00
Mahavir Jain
6a4a124d65
Merge branch 'feature/enable_rsa_based_secure_boot_for_c5_eco1' into 'master'
...
feat(bootloader_support): enabled RSA based secure boot scheme for ESP32C5 ECO1
Closes IDF-10453 and IDF-11441
See merge request espressif/esp-idf!35104
2024-12-04 18:00:34 +08:00
nilesh.kale
1e11340061
feat(bootloader_support): enabled RSA based secure boot scheme for ESP32C5 ECO1
...
This commit enabled RSA based secure boot scheme for ESP32C5 ECO1 module.
This update also adds a check to ensure the selected secure boot scheme is
valid for ECO0 modules.
2024-12-03 16:48:56 +05:30
renpeiying
fb1105f449
docs: Update CN trans for security docs
2024-12-03 11:17:55 +05:30
harshal.patil
f02dc64ce6
feat(bootloader_support): Permanently enable pseudo rounds function for XTS-AES during start-up
2024-12-03 11:17:54 +05:30
harshal.patil
c6ea979efa
feat(hal/aes): Enable pseudo rounds function during AES operations
2024-12-03 11:17:54 +05:30
shenmengjing
6f86f70f0a
docs: Sync CN and EN files
2024-11-05 18:03:42 +08:00
renpeiying
46770a50a6
docs: standardize the names of bootloaders in esp-idf
2024-10-23 11:29:24 +08:00
Aditya Patwardhan
6dc8fe3db3
Merge branch 'docs/update_cn_trans_for_secure_boot_v2' into 'master'
...
docs: Update CN translation for secure-boot-v2.rst
Closes DOC-9082
See merge request espressif/esp-idf!33895
2024-10-08 15:13:59 +08:00
Mahavir Jain
27bcb047b4
Merge branch 'feature/qemu_doc_guide_updates' into 'master'
...
docs: misc updates to qemu guide, now enabled for ESP32-S3
See merge request espressif/esp-idf!33854
2024-10-08 12:45:23 +08:00
Zhang Shuxian
808a82de81
docs: Update CN translation for secure-boot-v2.rst
2024-10-08 11:09:40 +08:00
Mahavir Jain
c90dd52974
Merge branch 'feat/newlib-sbom-exclude_cve-2024-30949' into 'master'
...
fix(newlib): sbom: add CVE-2024-30949 to cve-exclude-list
See merge request espressif/esp-idf!33947
2024-10-03 12:30:44 +08:00
Alexey Lapshin
c4acf3faad
fix(newlib): sbom: add CVE-2024-30949 to cve-exclude-list
2024-10-02 18:01:14 +07:00
Aditya Patwardhan
2c11c2ab81
fix(docs): Fix secure boot v2 documentation
...
Update the secure boot v2 documentation
about the limitation of read-protection
when secure boot is enabled
Closes https://github.com/espressif/esp-idf/issues/14587
2024-10-01 11:56:37 +08:00
Mahavir Jain
1e94096e16
docs: update qemu guide for efuse commands
...
- add mention of qemu guide in security related chapters
- also added a note about secure boot v2 config in qemu workflow
2024-09-27 13:36:15 +05:30
Lucas Dekker
232f219321
docs: Explain revocation of unused but compromised keys
...
Explain the revocation of unused but compromised keys.
docs: Apply updates from code review
Add some nitpicks from AdityaHPatwardhan.
Closes https://github.com/espressif/esp-idf/pull/14563
Co-authored-by: Aditya Patwardhan <aditya.patwardhan@espressif.com >
2024-09-23 12:23:28 +05:30
Mahavir Jain
2b806c9772
Merge branch 'feature/update_security_docs_for_c61' into 'master'
...
feat: update security documents for ESP32C61
Closes IDF-10154, IDF-10155, IDF-10156, IDF-10157, and IDF-10158
See merge request espressif/esp-idf!31959
2024-09-03 19:11:09 +08:00
nilesh.kale
3550e36a68
feat: updated security docs for ESP32C5
...
This commit modified document files for ESP32C5.
This revised chnages for security components, RNG, provisioning and
some minor changes in sample output for flash encryption example.
2024-09-02 11:50:07 +05:30
nilesh.kale
1011cee7a7
feat: udpate security docs for c61 and c5
...
This commit update security documents for ESP32C61.
2024-09-02 11:04:38 +05:30
harshal.patil
e5f22521da
docs(secure_boot_v2): Mention idf.py and openssl commands to generate and verify signatures
...
- Adds support for verify_signature command in idf.py
Closes https://github.com/espressif/esptool/issues/942
2024-08-27 15:44:05 +05:30
harshal.patil
03a15664ee
change(bootloader_support/secure_boot): Improve description of the config SECURE_BOOT_V2_ALLOW_EFUSE_RD_DIS
...
Co-authored-by: Zhang Shuxian <zhangshuxian@espressif.com >
2024-08-21 16:32:54 +05:30
Mahavir Jain
3ec400b332
docs(security): fix ESP32-C3 minimum supported revision for secure boot v2
...
Closes https://github.com/espressif/esp-idf/issues/14377
2024-08-16 15:04:28 +05:30
renpeiying
afd3179ae8
docs: Provide Chinese translation for host-based-security-workflows.rst
2024-08-08 11:03:24 +08:00
nilesh.kale
3aa448ee0d
fix: disable config for RSA during secure boot
...
support for RSA secure boot is disabled for ESP32-ECO0 due to
hardware issue. It will be re-enabled in future version ECO1.
For ESP32C5- ECO0 , ECDSA secure boot is the recommended option.
2024-07-12 12:40:11 +05:30
Mahavir Jain
f5f85803a2
docs(security): use target specific macro for bootloader flash offset
2024-07-09 09:43:16 +05:30
shenmengjing
3cb4880d02
docs: Add often used espefuse subcommands to idf.py
2024-07-03 17:55:26 +08:00
Jiang Jiang Jian
15219e2a7e
Merge branch 'docs/phase2_auth_update' into 'master'
...
docs: Adds document for wifi PEAP phase 2 authentication security advisory.
See merge request espressif/esp-idf!31829
2024-07-02 10:36:44 +08:00
kindaTall
4259df3d56
docs(security): fix typo for key purpose field in flash encryption guide
2024-07-01 12:21:49 +00:00
aditi
df9680b827
docs: Adds document for wifi PEAP phase 2 authentication security advisory.
2024-07-01 14:50:13 +05:30
harshal.patil
4d6cb7bf23
docs(secure_boot): Add secure boot signature verification time for esp32p4
2024-06-21 21:59:55 +05:30
Mahavir Jain
2a4f227c5c
docs: add page to summarize the security vulnerabilities and advisories
2024-06-19 10:06:01 +08:00
shenmengjing
85557380dd
docs: Update the CN translation for three docs in security
2024-06-12 19:01:11 +08:00
Jan Beran
950428c2f4
feat(tools): Add often used espefuse subcommands to idf.py
2024-06-07 16:23:17 +02:00
Aditya Patwardhan
874388c628
Merge branch 'feature/enable_flash_encryption_for_c5' into 'master'
...
feat: enable flash encryption support for c5
Closes IDF-8622 and IDF-9480
See merge request espressif/esp-idf!29578
2024-06-07 14:30:39 +08:00
caixinying-git
64dca12e76
docs: provide CN translation for security/secure-boot-v2.rst
2024-06-06 12:16:08 +08:00
Marius Vikhammer
21c111465a
Merge branch 'docs/c61_support' into 'master'
...
docs(c61): add docs build for C61
Closes IDF-9287
See merge request espressif/esp-idf!31182
2024-06-04 18:13:38 +08:00
nilesh.kale
d1fa51e3c9
feat: enable flash encryption support for c5
...
This commit provide support for flash encryption feature in ESP32C5
2024-06-04 14:10:21 +05:30
Aditya Patwardhan
f412149dc9
Merge branch 'feat/enable_secure_boot_for_c5' into 'master'
...
feat: enable secure boot for c5
Closes IDF-8623 and IDF-9478
See merge request espressif/esp-idf!29774
2024-06-03 15:35:51 +08:00
Marius Vikhammer
2eb4cd3d84
docs(c61): add docs build for C61
2024-06-03 10:24:27 +08:00
Roland Dobai
7b7f73ba2a
Merge branch 'feat/add_espsecure_subcommands' into 'master'
...
feat: Add espsecure subcommands into idf.py
See merge request espressif/esp-idf!29424
2024-05-31 18:29:55 +08:00
nilesh.kale
f5dd1074b6
feat: enable secure boot for c5
...
This MR added suppport for secure boot in ESP32-C5.
2024-05-30 11:43:17 +05:30