55a2ad3df3
fix(esp_system): reset crypto peripherals before device restart
...
This change addresses a rare but critical issue observed on certain
ESP32-C3 and ESP32-S3 devices, where secure boot verification
intermittently fails due to improper cleanup of crypto peripherals
during a restart.
Background – Restart Behavior in IDF
------------------------------------
In ESP-IDF, when the device restarts (via `esp_restart()` or due to a
panic/exception), a partial peripheral reset is performed followed by a
CPU reset. However, until now, crypto-related peripherals were not
included in this selective reset sequence.
Problem Scenario
----------------
If a restart occurs while the application is in the middle of a bignum
operation (i.e., using the MPI/Bignum peripheral), the ROM code may
encounter an inconsistent peripheral state during the subsequent boot.
This leads to transient RSA-PSS secure boot verification failures.
Following such a failure, the ROM typically triggers a full-chip reset
via the watchdog timer (WDT). This full reset clears the crypto
peripheral state, allowing secure boot verification to succeed on the
next boot.
Risk with Aggressive Revocation
-------------------------------
If secure boot aggressive revocation is enabled (disabled by default in
IDF), this transient verification failure could mistakenly lead to
revocation of the secure boot digest.
If your product configuration has aggressive revocation enabled,
applying this fix is strongly recommended.
Frequency of Occurrence
-----------------------
The issue is rare and only occurs in corner cases involving
simultaneous use of the MPI peripheral and an immediate CPU reset.
Fix
---
This fix ensures that all crypto peripherals are explicitly reset prior
to any software-triggered restart (including panic scenarios),
guaranteeing a clean peripheral state for the next boot and preventing
incorrect secure boot behavior.
2025-04-15 19:06:26 +05:30
1c6405eb9b
Merge branch 'fix/esp_tee_coverity_bugs' into 'master'
...
fix(security): Fixed coverity warnings related to the `esp_tee` component
Closes IDF-12803, IDF-12804, and IDF-12826
See merge request espressif/esp-idf!38360
2025-04-14 15:05:27 +08:00
1522efa910
Merge branch 'doc/touch_element_support_esp32s3' into 'master'
...
docs(touch): build the touch element doc for esp32s3
Closes IDFGH-15073
See merge request espressif/esp-idf!38366
2025-04-14 14:10:47 +08:00
64e23f3e9a
Merge branch 'fix/usb_host_msc_example_pytest_hub' into 'master'
...
fix(usb_host): Fix msc example pytest to support external hub
Closes IDFCI-2441
See merge request espressif/esp-idf!38385
2025-04-14 14:06:03 +08:00
13aff0b216
fix(security): Fixed coverity warnings related to the esp_tee component
...
- Also, disable the SECP192R1 curve (Mbed TLS config) when TEE Secure Storage
does not require it
2025-04-14 10:12:51 +05:30
11890df95a
Merge branch 'bugfix/fix_cert_verification_ds_tls1.3' into 'master'
...
fix(component/mbedtls): Fix failing cert verification with TLS1.3 and DS peripheral
Closes IDFGH-14097
See merge request espressif/esp-idf!37634
2025-04-14 12:31:50 +08:00
f2cf0f0e92
Merge branch 'refactor/ana_cmpr_driver' into 'master'
...
refactor(ana_cmpr): enhanced the driver implementation
See merge request espressif/esp-idf!38353
2025-04-14 12:03:25 +08:00
03c229e949
Merge branch 'feat/add_l2cap_register_event' into 'master'
...
feat(bt): Added events for l2cap register and unregister vfs
Closes BTQABR2023-465
See merge request espressif/esp-idf!38138
2025-04-14 11:28:20 +08:00
25f9c3715a
Merge branch 'fix/fix_unused_osc_broken_xtal32k_configuration' into 'master'
...
fix(esp_hw_support): fix unused OSC source deinit breaks XTAL32K configuration
See merge request espressif/esp-idf!38361
2025-04-14 10:28:10 +08:00
b7ecab5de3
Merge branch 'ci/refactor_adc_oneshot_test' into 'master'
...
ci(adc): refactor adc oneshot test
See merge request espressif/esp-idf!38346
2025-04-14 10:02:19 +08:00
07765cde50
fix(usb_host): Fix msc example pytest to support external hub
2025-04-11 17:25:30 +02:00
0ead362761
Merge branch 'fix/usb_host_hcd_dma_ls_via_fs_hubs' into 'master'
...
fix(hcd): Added delay to slow down scatter-gather dma for ls device via fs hubs
Closes IDF-11264 and IDFGH-14984
See merge request espressif/esp-idf!38118
2025-04-11 21:03:30 +08:00
d38c05c10c
Merge branch 'refactor/ldgen_library_deps' into 'master'
...
refactor(cmake): collect libraries from ELF, don't depend on idf_build_target
Closes IDF-10772
See merge request espressif/esp-idf!34520
2025-04-11 21:02:06 +08:00
762cf0539f
Merge branch 'bugfix/fix_touch_tie_option' into 'master'
...
fix(touch): fixed tie option take no effect
See merge request espressif/esp-idf!37907
2025-04-11 20:20:14 +08:00
431ee5c058
refactor(cmake): collect libraries from ELF, don't depend on idf_build_target
2025-04-11 14:00:56 +02:00
87ce14650b
Merge branch 'feat/ws-err-codes' into 'master'
...
feat(ws_transport): include error reason in failure log
Closes IDFGH-13978
See merge request espressif/esp-idf!38216
2025-04-11 19:35:17 +08:00
b62e486247
fix(component/mbedtls): Fix failing cert verification with TLS1.3 and DS peripheral
2025-04-11 18:34:16 +08:00
2b5d91ad1c
refactor(ana_cmpr): enhanced the driver implementation
2025-04-11 17:45:32 +08:00
dbf9d78763
fix(hcd): Added delay to slow down scatter-gather dma for ls device via fs hubs
...
Closes https://github.com/espressif/esp-idf/issues/15683
2025-04-11 17:06:08 +08:00
b282338c68
ci(adc): refactor adc basic oneshot test
2025-04-11 17:04:30 +08:00
4b5ccbe7f1
fix(bt): Fixed the issue with l2cap not using dynamic memory
2025-04-11 16:45:53 +08:00
007a2a30f5
fix(bt): Fixed write_read task stack overflow in l2cap example
2025-04-11 16:45:53 +08:00
1f7658ed42
feat(bt): Added events for l2cap register and unregister vfs
2025-04-11 16:45:53 +08:00
771e9db73e
Merge branch 'fix/fix_incorrect_ota_address_assignment' into 'master'
...
fix(nimble): Fix incorrect OTA address type assignment
See merge request espressif/esp-idf!38342
2025-04-11 14:07:46 +08:00
dfcebcd5cf
Merge branch 'docs/migrate_esp32_bluetooth_networking_to_api_guide' into 'master'
...
docs: Migrate ESP32 Bluetooth Networking PDF content to BluFi API Guide
Closes DOC-7825
See merge request espressif/esp-idf!38043
2025-04-11 14:05:11 +08:00
bff87e206d
Merge branch 'docs/migrate_esp32_bluetooth_architecture_to_idf' into 'master'
...
docs: Migrate ESP32 Bluetooth Architecture PDF content to ESP-IDF
Closes DOC-9217
See merge request espressif/esp-idf!37781
2025-04-11 14:04:36 +08:00
6566068fc9
Merge branch 'refactor/remove_adc_task_sample1' into 'master'
...
refactor(soc): update soc_etm for esp32c61
See merge request espressif/esp-idf!38356
2025-04-11 13:31:52 +08:00
2b21d5a887
docs(touch): build the touch element doc for esp32s3
...
Closes https://github.com/espressif/esp-idf/issues/15755
2025-04-11 13:26:07 +08:00
a2e582db4e
docs: Migrate ESP32 Bluetooth Networking PDF content to BluFi API Guide
2025-04-11 11:12:28 +08:00
d4fc63553d
docs: Migrate ESP32 Bluetooth Architecture PDF content to ESP-IDF
2025-04-11 10:51:19 +08:00
b3911c7c89
fix(esp_hw_support): fix unused OSC source deinit breaks XTAL32K configuration
2025-04-10 20:56:53 +08:00
0b8f661c08
Merge branch 'bugfix/storage_nvs_key_overwrite' into 'master'
...
fix(nvs): fixed erasing of old values if new data type is not the same
Closes IDFGH-14832
See merge request espressif/esp-idf!37888
2025-04-10 20:01:35 +08:00
d4b60bbe3a
fix(nimble): Fix incorrect OTA address assignment
2025-04-10 16:50:45 +05:30
62c1e8171e
refactor(soc): update soc_etm for esp32c61
2025-04-10 18:50:36 +08:00
7dd093fc10
Merge branch 'docs/re-enable-fast-breathe-fork' into 'master'
...
docs: enable BREATHE_ALT_INSTALL_URL_PY39 for fast breathe fork under python3.9
See merge request espressif/esp-idf!38334
2025-04-10 18:33:58 +08:00
5362a03eac
feat(ws_transport): include error reason in failure log
...
When the underlying transport returns a failure,
add the failure result to the log.
2025-04-10 07:22:37 -03:00
2b390b2b22
Merge branch 'feature/add_tx_callback_api_for_80211_tx' into 'master'
...
feat(wifi): Added tx callback function for 80211 tx
Closes WIFI-6820
See merge request espressif/esp-idf!37673
2025-04-10 17:45:30 +08:00
d9bc77e422
fix(nvs): fixed erasing of old values if new data type is not the same
...
Closes https://github.com/espressif/esp-idf/issues/15559
2025-04-10 10:55:51 +02:00
f56cc82c04
Merge branch 'feat/allow_rmt_tx_channel_to_switch_other_gpios' into 'master'
...
feat(rmt_tx): allow to switch gpio in tx channal
See merge request espressif/esp-idf!38318
2025-04-10 15:47:18 +08:00
cad0ad9ccd
fix(wifi): update wifi lib for 80211 tx and espnow
2025-04-10 14:05:12 +08:00
f73e8b2320
fix(docs): update the migration-guides for espnow change
2025-04-10 14:05:12 +08:00
a8bd4f0929
fix(wifi): Return more information in the espnow send callback
2025-04-10 14:05:12 +08:00
d19614738a
feat(wifi): Added tx callback function for 80211 tx
...
Closes https://github.com/espressif/esp-idf/issues/13319
2025-04-10 14:05:07 +08:00
95465323c6
Merge branch 'feature/deploy_chatbot_widget' into 'master'
...
feat(all): deployed chatbot widget
See merge request espressif/esp-idf!37541
2025-04-10 14:02:32 +08:00
b5f8020ad5
feat(all): deployed chatbot widget
2025-04-10 14:02:32 +08:00
3e6c4dad7d
Merge branch 'bugfix/remove_broken_link_for_wifi_expansion' into 'master'
...
bugfix: Remove the broken link in wifi-expansion.rst
Closes DOC-10663
See merge request espressif/esp-idf!38096
2025-04-10 10:41:12 +08:00
4e5b286c67
Merge branch 'feature/update_espnow_documentation' into 'master'
...
feat(docs): update connectionless module window syncronization documentation
Closes WIFIBUG-1110
See merge request espressif/esp-idf!37918
2025-04-10 10:33:34 +08:00
2bd5425a5b
feat(rmt_tx): allow to switch gpio in tx channal
2025-04-10 10:26:27 +08:00
00854b29cc
Merge branch 'bugfix/fix_sscanf_usage' into 'master'
...
fix(nimble): Updated sscanf usage in examples to work for all versions
Closes BLERP-1693
See merge request espressif/esp-idf!38020
2025-04-10 09:15:51 +08:00
7005b101bf
Merge branch 'fix/fatfs_use_dyn_buf_kconfig_mistake' into 'master'
...
fix(fatfs): Mistake in Kconfig for FATFS_USE_DYN_BUFFERS
Closes IDF-11789
See merge request espressif/esp-idf!35182
2025-04-09 23:45:03 +08:00
Mahavir Jain