Crash_Override/OVMS3-idf
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
6442 commits 10 branches 75 tags 114 MiB
Commit graph

11 commits

Author SHA1 Message Date
Jiang Jiang Jian
98eaa5c2ec Merge branch 'docs/security' into 'master' 
docs: Added more wordings to capture secure boot and flash encryption dependency.

See merge request idf/esp-idf!2947
 2018-08-16 19:31:36 +08:00
Sagar Bijwe
b27773e87c docs: Added more wordings to capture secure boot and flash encryption dependency. 2018-08-14 11:27:29 +05:30
Konstantin Kondrashov
117c79eae5 app_update: Add API for getting sha256_of_partition 
Added bootloader_common_get_sha256_of_partition() and esp_partition_get_sha256() - get or calculate SHA-256
digest for app and data partitions.
Added bootloader_sha256_hex_to_str() - helps to print SHA-256 digest
Added esp_partition_check_identity() - compares two partitions by SHA-256 digest

Refactoring a function esp_image_load() in bootloader space to esp_image_verify() and
bootloader_load_image(). Old name function esp_image_load is deprecated
and will remove in V4.0 version.

spi_flash/sim: Fix error test_host. Add stub for bootloader_common_get_sha256_of_partition in sim/stubs
 2018-08-13 13:59:07 +05:00
Angus Gratton
fb439e48f5 bootloader: Don't verify Partition Table as part of Secure Boot 
Partition Tables are still signed for backwards compatibility, but signature is no longer checked as
part of bootloader.

Closes https://github.com/espressif/esp-idf/issues/1641
 2018-07-13 15:45:15 +10:00
Angus Gratton
7a18575af8 flash encryption: Also always disable ROM BASIC console when enabling flash encryption 2017-08-29 14:52:00 +10:00
Angus Gratton
0c8888d68f bootloader: Combine loading from flash & verifying to save boot time 
Still needs updating to account for secure boot.
 2017-07-19 18:25:17 +10:00
Tian Zhong Xing
2173ad3b45 bootloader_support: fix bug OTA & flash encryption incompatible 
ota data partition should be encrypted unconditionally when flash encrypt enable
 2017-01-26 16:20:06 +11:00
Angus Gratton
3922ce47b2 bootloader: Enable early boot RNG entropy source 
This reverts commit ceb8566970.
 2017-01-04 17:07:12 +11:00
Angus Gratton
ceb8566970 Flash encryption / secure boot: Temporarily disable on-device key generation 
Will be enabled after seeding of HWRNG in bootloader is fully tested/qualified.
 2016-12-01 23:49:13 -08:00
Angus Gratton
506c8cd964 secure boot & flash encryption: Rework configuration options 
Add UART bootloader disable options for flash encryption
 2016-12-01 23:49:12 -08:00
Angus Gratton
9eb135fd73 Flash encryption: Support enabling flash encryption in bootloader, app support 
* App access functions are all flash encryption-aware
* Documentation for flash encryption
* Partition read/write is flash aware
* New encrypted write function
 2016-12-01 23:49:12 -08:00