Sachin Parekh
017f7a241a
secure_boot: Do not allow key revocation in bootloader
2021-11-17 12:35:06 +05:30
Angus Gratton
07465563c5
secure boot: Fix incorrect handling of mbedtls_ctr_drbg_seed() failure in signature verification
...
Increase the test app optimization level to one that would find this issue.
2021-07-16 11:03:21 +05:30
KonstantinKondrashov
26d362040e
secure_boot/SIGNED_ON_UPDATE_NO_SECURE_BOOT: Only the first position of signature blocks is used to verify any update
2021-03-25 15:40:24 +08:00
Angus Gratton
502a819757
secure boot v2: Fix issue checking multiple signature blocks on OTA update
2021-03-17 17:08:59 +08:00
Angus Gratton
a479ee30c9
secure boot: Add boot check for SBV2 "check app signature on update"
...
As this mode uses the public keys attached to the existing app's signatures to
verify the next app, checking that a signature block is found on boot prevents
the possibility of deploying a non-updatable device from the factory.
2021-03-17 17:08:59 +08:00
KonstantinKondrashov
46e85ed021
secure_boot: Secure Boot V2 verify app signature on update (without Secure boot)
...
- ESP32 ECO3, ESP32-S2/C3/S3
2021-03-17 17:08:59 +08:00
