883c4f0c26
docs: update vulnerabilities guide to mention CVE-2026-25532
2026-02-04 14:31:12 +05:30
971b8c9c34
docs(ble): add advisory for CVE-2025-55297 found in Blufi example
...
(cherry picked from commit 1952f0333czhanghaipeng@espressif.com >
2025-08-25 17:53:29 +08:00
240e9810c9
fix(wifi): Added CVE-2025-52471 to vulnerabilities list
2025-07-01 14:16:49 +08:00
1f5abb42bc
fix(wifi): Added CVE-2024-53845 to vulnerabilities list
2025-07-01 14:16:49 +08:00
2979fc288b
docs: add page to summarize the security vulnerabilities and advisories
2025-07-01 14:16:43 +08:00
53321dd030
change(bootloader_support/secure_boot): Improve description of the config SECURE_BOOT_V2_ALLOW_EFUSE_RD_DIS
2025-05-06 13:48:30 +05:30
f62b178a65
Merge branch 'refactor/security_docs_re-org_v5.3' into 'release/v5.3'
...
refactor(docs): re-organize security docs for better navigation (v5.3)
See merge request espressif/esp-idf!36961
2025-02-14 16:32:42 +08:00
570b01fd9b
refactor(docs): re-organize security docs for better navigation
2025-02-14 11:48:24 +05:30
db588e04dd
docs: Update CN trans for security docs
2025-01-23 14:06:16 +05:30
ac0dc0d775
feat(bootloader_support): Permanently enable XTS-AES pseudo rounds when FE release mode is enabled
2025-01-23 14:06:16 +05:30
8d30077744
feat(hal/aes): Enable pseudo rounds function during AES operations
2025-01-23 14:06:16 +05:30
18470061ab
docs(secure_boot): Add secure boot signature verification time for esp32p4
2024-06-24 12:25:42 +05:30
530fdacd88
fix(docs): Fix DIS_ICACHE related information in host security workflow
2024-04-19 11:29:21 +05:30
1366949c8a
feat(docs): Add workflow for externally enabling NVS Encryption
...
Fix documentation for host based workflows for flash encryption and
secure boot v2
2024-04-19 11:29:21 +05:30
0dcd692d59
Merge branch 'fix/fix_esp32p4_flash_encryption' into 'master'
...
fix(bootloader_support): Fix default key usage for flash encryption
See merge request espressif/esp-idf!29968
2024-04-02 19:57:38 +08:00
51a91259d7
fix(bootloader_support): Fix default key usage for flash encryption
2024-04-02 12:27:53 +05:30
1975c1c69e
docs(security): Update security-related docs for ESP32-P4
2024-04-01 17:34:28 +05:30
f1e65b8373
docs(misc): fixed typos found with codespell
2024-03-28 11:50:58 +08:00
000d1407ea
Merge branch 'bugfix/host_security_workflow_docs_update' into 'master'
...
fix(docs): correct the UART ROM DL mode disable section for ESP32
See merge request espressif/esp-idf!29046
2024-02-23 11:24:29 +08:00
f4581d7103
docs(secure_boot_v2): Specify the workflow to disable revocation of unused key digests slots
2024-02-15 14:31:41 +05:30
2238e11e90
fix(docs): correct the UART ROM DL mode disable section for ESP32
2024-02-14 14:46:51 +05:30
4d28524bdb
docs(esp32c5): add support for building C5 docs
2024-02-01 10:06:41 +08:00
22a053f1fc
docs(sphinx-lint): Fix issues reported by sphinx-lint before adding it to pre-commit
2024-01-23 15:22:29 +08:00
25c2cc5f03
Merge branch 'feature/esp32p4_enable_flash_encryption' into 'master'
...
Enable Flash Encryption for ESP32P4
Closes IDF-7545
See merge request espressif/esp-idf!26959
2023-12-05 21:42:18 +08:00
a84234c23f
feat(security): Enable Flash encryption for ESP32P4
2023-12-05 13:10:55 +05:30
4cd0a6a4b1
Merge branch 'docs/remove_wifi_related_documentation_for_esp32h2' into 'master'
...
docs: remove WiFi related documentation for ESP32-H2
See merge request espressif/esp-idf!27026
2023-12-05 09:58:06 +08:00
bd1825f9b1
docs: remove WiFi related documentation for ESP32-H2
2023-12-04 11:12:39 +08:00
7bb29086df
docs: add ECDSA peripheral chapter for H2/P4
...
- Add ECDSA peripheral chapter and instructions to program efuse key block
- Update security guide for ECDSA peripheral mention for device identity
- Link with ESP-TLS guide about using ECDSA peripheral in TLS connection
2023-11-15 09:42:26 +05:30
2a09627d03
Merge branch 'bugfix/secure_boot_v2_docs' into 'master'
...
fix(docs): correct the target specific macros for secure boot v2 guide
See merge request espressif/esp-idf!26993
2023-11-15 11:17:43 +08:00
32ce89f3cf
docs: Update CN for security docs
2023-11-14 07:41:58 +00:00
3cb8e18648
docs: Provide CN translation for security/secure-boot-v1.rst
2023-11-09 17:31:54 +08:00
6b823ddb2a
fix(docs): correct the target specific macros for secure boot v2 guide
...
It appears that target specific or'ing is not supported through the
docs build. Actual text rendering on the docs site was still using
"default" field from the custom macro, rather than using target
specific.
2023-11-07 19:38:44 +05:30
64cb35deef
docs(security): add section about managing the root certificates
2023-10-29 12:21:23 +05:30
478879ab0d
Update host-based-security-workflows.rst
...
Fixed typos in the code examples which caused troubles when trying to follow the secure boot workflow and improved the grammar.
Closes https://github.com/espressif/esp-idf/pull/12262
2023-10-17 14:27:30 +05:30
eea2536dc4
Merge branch 'feature/conservative_key_revocation_in_secure_boot_v2' into 'master'
...
feat: Add API to verify the bootloader and application image before revoking...
Closes IDF-7078
See merge request espressif/esp-idf!24572
2023-10-16 12:42:49 +08:00
1501aef1b3
Merge branch 'feature/enable_secure_boot_esp32p4' into 'master'
...
feat(secure_boot): add secure boot support for esp32p4
Closes IDF-7544 and IDF-7745
See merge request espressif/esp-idf!26335
2023-10-16 11:07:14 +08:00
6cf9cc2c9b
docs(secure_boot_v1): add missing digest byte swap information
...
- In the secure bootloader digest algorithm section, the final
four byte word byte-swap information was not mentioned.
2023-10-12 17:35:10 +05:30
1df186d4e1
feat: Add API to verify the bootloader and app image
...
Added an API to verify the bootloader and app image before revoking the key in Secure Boot V2.
This will help in preventing the device to be bricked if the bootloader/application cannot be
verified by any other keys in efuse
2023-10-12 14:53:57 +05:30
f46a93e565
feat(secure_boot): add secure boot support for esp32p4
2023-10-12 10:12:54 +05:30
6fba4113cc
docs: Update Chinese translation for security/flash-encryption.rst and index.rst
2023-10-09 14:31:07 +08:00
3b440adfab
fix(doc): Fix incorrect description for xts_key_length_256 efuse
2023-08-31 04:06:47 +08:00
77fb44a489
Merge branch 'fix/fix_host_based_security_workflow_documentation' into 'master'
...
fix(security): Fixed the host-based security workflows
See merge request espressif/esp-idf!25460
2023-08-23 23:25:58 +08:00
bcb87c4b8f
docs: update format issues for both EN and CN under security and contribute folder
2023-08-22 23:59:44 +08:00
388a61c7b7
fix(security): Fixed the host-based security workflows
2023-08-22 15:05:14 +05:30
27baef2424
docs(esp32p4): added building docs for ESP32-P4
2023-08-16 10:13:47 +08:00
083e943704
docs(security): Added host based workflow to enable secure boot externally
...
* Styling changes for the host-based workflow document
* Fix formatting for the document for host based security wofkflows
2023-07-19 10:11:30 +05:30
3e4152cdcf
docs: Update CN for nvs_flash.rst and flash-encryption.rst
2023-07-14 04:05:53 +00:00
37af2b7a22
Docs: add CN translation for security/security.rst
2023-07-07 17:16:37 +08:00
d9b66226cd
docs/security: Separate documents under different subsection
2023-06-23 08:15:13 +05:30
2a4fddb48b
docs/Security:Add references to second stage bootloader to avoid confusion bettwen
...
bootloader and 2nd stage bootloader
2023-06-22 17:18:08 +05:30
Kapil Gupta
Zhang Hai Peng
zhangyanjiao
Mahavir Jain
harshal.patil
Aditya Patwardhan
renpeiying
Marius Vikhammer
kirill.chalov
Zhang Xiao Yan
Wang Zi Yan
Shang Zhou
walerii
Harshit Malpani
KonstantinKondrashov
Cai Xin Ying
Doc-intern2