espressif/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-04-27 19:13:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'fix/migration_guide_secure_boot_192_curve_deprecation' into 'master'

Browse Source 
fix(secure_boot): marks 192 bit support curve legacy

See merge request espressif/esp-idf!46255
This commit is contained in:
Ashish Sharma
2026-03-17 15:32:58 +08:00
parent 7a6cff801f d8b02883dc
commit 2a22a22fd4
4 changed files with 21 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/en/migration-guides/release-6.x/6.0/security.rst
+6
View File
@@ -146,6 +146,12 @@ The following function has been deprecated:
- :cpp:func:`esp_flash_encryption_enabled` – Use :cpp:func:`esp_efuse_is_flash_encryption_enabled` instead. The component dependency has been changed from ``bootloader_support`` to ``efuse``.
**Secure Boot ECDSA curve selection**
- In ESP-IDF v6.0, secure boot ECDSA should use NISTP256/NISTP384.
- Legacy NISTP192 support is deprecated and is only available when explicitly enabled via ``CONFIG_SECURE_BOOT_ECDSA_KEY_LEN_192_BITS``.
- Legacy NISTP192 support may be disabled in the next ESP-IDF release, so migration to NISTP256/NISTP384 is strongly recommended.
**Removed Deprecated APIs**
The following deprecated functions have been removed:
docs/zh_CN/migration-guides/release-6.x/6.0/security.rst
+6
View File
@@ -146,6 +146,12 @@ BluFi（基于 BLE 的 Wi-Fi 配网）功能受到 ESP-IDF v6.0 中 Mbed TLS v4.
- :cpp:func:`esp_flash_encryption_enabled` 已被弃用。请使用 :cpp:func:`esp_efuse_is_flash_encryption_enabled` 代替。需要依赖的组件由 ``bootloader_support`` 替换为 ``efuse``。
**安全启动中的 ECDSA 曲线选择**
- 在 ESP-IDF v6.0 中，用于安全启动的 ECDSA 应为 NISTP256/NISTP384 曲线。
- 对旧版 NISTP192 的支持已弃用，仅当通过 ``CONFIG_SECURE_BOOT_ECDSA_KEY_LEN_192_BITS`` 显式启用时方可使用。
- 对旧版 NISTP192 的支持可能会在下一个 ESP-IDF 版本中被移除，因此强烈建议迁移至 NISTP256/NISTP384。
**已移除的废弃 API**
以下废弃函数已被移除：