feat(security): add AES, SHA, ECC and RSA support for esp32s31
Closes IDF-14633, IDF-14630, IDF-14631, and IDF-14625
See merge request espressif/esp-idf!47286
fix(http_server/ws_echo_server): Fix ws_echo_server test URI registration race condition
Closes IDFCI-8585, IDFCI-6703, and IDFCI-3484
See merge request espressif/esp-idf!47368
- Using PMA, the TEE IRAM is marked as R/X while TEE DRAM is marked as R/W.
Moving the internal memory secure service call table from DRAM to IRAM
makes it immutable.
fix(https_request): write host time to NVS to eliminate SNTP dependency in CI
Closes IDFCI-3371, IDFCI-3294, IDFCI-3480, IDFCI-5982, IDFCI-6184, and IDFCI-3651
See merge request espressif/esp-idf!47201
PMP entry 3 (SOC_DROM_MASK_HIGH, TOR mode) in the memprot path
was incorrectly granted RW permission on esp32h21 and esp32c61.
The mask ROM data region is inherently read-only; remove the W bit.
Also added necessary tests to check voilations and re-enabled
tests for ESP32P4
Commit 64704886b7 (refactor(driver_spi): remove some SPI_LL_xxx SOC_xxx macros)
removed #include "soc/spi_periph.h" from hal/spi_hal.h. Out-of-tree code that
included hal/spi_hal.h and used spi_periph_signal then failed with the symbol
undeclared, because that header had been the transitive source of the declaration.
Partially reverts it.
Add a new CMake function esp_partition_flash_binary() that provides a
unified API for registering partition data binaries to be flashed. It
replaces the direct esptool_py_flash_target calls scattered across
components (spiffs, fatfs, nvs_flash) with a single function that:
- Resolves partition offset from the partition table automatically
- Determines encryption requirements (auto-detect or ALWAYS_PLAINTEXT)
- Creates per-partition flash targets (e.g. idf.py <partition>-flash)
- Optionally includes the binary in `idf.py flash` via FLASH_IN_PROJECT
On the linux target, the function registers binaries for pre-loading
into the emulated flash. A build-time manifest (linux_flash_data.txt)
is generated via file(GENERATE), and partition_linux.c reads it at
runtime to copy each binary into the memory-mapped flash buffer at
the correct offset.
The partition_ops example is updated to use the new function and
includes a custom_partition with pre-built data to demonstrate the
full workflow, including on the linux target.
Add pytest test coverage for cmakev2 build system examples that had
none.
CMakeLists.txt fixes required to enable testing:
conditional_component and plugins: added idf_build_generate_flasher_args()
since these use the low-level build API (idf_build_executable /
idf_flash_binary) which unlike idf_project_default() does not call it
automatically. Without it, flasher_args.json was missing from the build
output and pytest-embedded could not initialize the DUT.
multi_binary: both app1 and app2 were registered in the global flash
target via idf_flash_binary(...FLASH), creating a duplicate key at offset
0x10000 in the flasher_args.json generator expression and preventing the
file from being generated. Fixed by removing FLASH from app2's call so
only app1 is registered in the global flash target. idf_build_generate_flasher_args()
now produces a valid flasher_args.json with app1 as the default app binary.
The test patches the binary path to app2.bin when testing the second app.
Mahavir Jain
morris
Marius Vikhammer
Island
Shu Chen
Armando (Dou Yiwen)
Alexey Gerenkov
Adam Múdry
Sudeep Mohanty
Rahul Tank
Laukik Hase
Chen Chen
Konstantin Kondrashov
Aditya Patwardhan
nilesh.kale
Zhang Shuxian
Omar Chebib
Konstantin Kondrashov
Michael.B
Kapil Gupta
Erhan Kurubas
Alexey Lapshin
Guilherme Ferreira
Song Ruo Jing
Zhang Wen Xu
Ashish Sharma
Wan Lei
Guillaume Souchere