forked from espressif/arduino-esp32
-
-
Notifications
You must be signed in to change notification settings - Fork 6
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
434 changed files
with
7,258 additions
and
1,989 deletions.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
Large diffs are not rendered by default.
Oops, something went wrong.
Large diffs are not rendered by default.
Oops, something went wrong.
Large diffs are not rendered by default.
Oops, something went wrong.
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
File renamed without changes.
28 changes: 28 additions & 0 deletions
28
tools/sdk/esp32/include/espressif__esp_secure_cert_mgr/include/esp_secure_cert_crypto.h
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,28 @@ | ||
| /* | ||
| * SPDX-FileCopyrightText: 2023 Espressif Systems (Shanghai) CO LTD | ||
| * | ||
| * SPDX-License-Identifier: Apache-2.0 | ||
| */ | ||
| #pragma once | ||
| #include "esp_err.h" | ||
| #include "soc/soc_caps.h" | ||
|
|
||
| #ifdef SOC_HMAC_SUPPORTED | ||
| #include "esp_hmac.h" | ||
| /* | ||
| * @info | ||
| * PBKDF2_hmac- password based key derivation function based on HMAC. | ||
| * The API acts as a password based key derivation function by using the hardware HMAC peripheral present on the SoC. The hmac key shall be used from the efuse key block provided as the hmac_key_id. The API makes use of the hardware HMAC peripheral and hardware SHA peripheral present on the SoC. The SHA operation is limited to SHA256. | ||
| * @input | ||
| * hmac_key_id The efuse_key_id in which the HMAC key has already been burned. | ||
| * This key should be read and write protected for its protection. That way it can only be accessed by the hardware HMAC peripheral. | ||
| * salt The buffer containing the salt value | ||
| * salt_len The length of the salt in bytes | ||
| * key_length The expected length of the derived key. | ||
| * iteration_count The count for which the internal cryptographic operation shall be repeated. | ||
| * output The pointer to the buffer in which the derived key shall be stored. It must of a writable buffer of size key_length bytes | ||
| * | ||
| */ | ||
| int esp_pbkdf2_hmac_sha256(hmac_key_id_t hmac_key_id, const unsigned char *salt, size_t salt_len, | ||
| size_t iteration_count, size_t key_length, unsigned char *output); | ||
| #endif |
165 changes: 165 additions & 0 deletions
165
tools/sdk/esp32/include/espressif__esp_secure_cert_mgr/include/esp_secure_cert_read.h
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,165 @@ | ||
| /* | ||
| * SPDX-FileCopyrightText: 2022 Espressif Systems (Shanghai) CO LTD | ||
| * | ||
| * SPDX-License-Identifier: Apache-2.0 | ||
| */ | ||
| #pragma once | ||
| #include "esp_err.h" | ||
|
|
||
| #include "soc/soc_caps.h" | ||
| #ifdef CONFIG_ESP_SECURE_CERT_DS_PERIPHERAL | ||
| #include "rsa_sign_alt.h" | ||
| #endif | ||
|
|
||
| #ifdef __cplusplus | ||
| extern "C" | ||
| { | ||
| #endif | ||
|
|
||
| /* @info | ||
| * Init the esp_secure_cert nvs partition | ||
| * | ||
| * @return | ||
| * - ESP_OK On success | ||
| * - ESP_FAIL/other relevant esp error code | ||
| * On failure | ||
| */ | ||
| esp_err_t esp_secure_cert_init_nvs_partition(void); | ||
|
|
||
| /* @info | ||
| * Get the device cert from the esp_secure_cert partition | ||
| * | ||
| * @note | ||
| * If your esp_secure_cert partition is of type NVS, the API will dynamically allocate | ||
| * the required memory to store the device cert and return the pointer. | ||
| * The pointer can be freed in this case (NVS) using respective free API | ||
| * | ||
| * In case of cust_flash partition, a read only flash pointer shall be returned here. This pointer should not be freed | ||
| * | ||
| * @params | ||
| * - buffer(out) This value shall be filled with the device cert address | ||
| * on successful completion | ||
| * - len(out) This value shall be filled with the length of the device cert | ||
| * If your esp_secure_cert partition is of type NVS, the API will dynamically allocate | ||
| * the required memory to store the device cert | ||
| * | ||
| * In case of cust_flash partition, a read only flash pointer shall be returned here. | ||
| * @return | ||
| * - ESP_OK On success | ||
| * - ESP_FAIL/other relevant esp error code | ||
| * On failure | ||
| */ | ||
| esp_err_t esp_secure_cert_get_device_cert(char **buffer, uint32_t *len); | ||
|
|
||
| /* | ||
| * Free any internally allocated resources for the device cert. | ||
| * @note | ||
| * This API would free the memory if it is dynamically allocated | ||
| * | ||
| * @params | ||
| * - buffer(in) The data pointer | ||
| * This pointer should be the same one which has been obtained | ||
| * through "esp_secure_cert_get_device_cert" API. | ||
| */ | ||
| esp_err_t esp_secure_cert_free_device_cert(char *buffer); | ||
|
|
||
| /* @info | ||
| * Get the ca cert from the esp_secure_cert partition | ||
| * | ||
| * @note | ||
| * The API shall dynamically allocate the memory if required. | ||
| * The dynamic allocation of memory shall be required in following cases: | ||
| * 1) partition type is NVS | ||
| * 2) HMAC encryption is enabled for the API needs to be called | ||
| * | ||
| * The esp_secure_cert_free_ca_cert API needs to be called in order to free the memory. | ||
| * The API shall only free the memory if it has been dynamically allocated. | ||
| * | ||
| * @params | ||
| * - buffer(out) This value shall be filled with the ca cert address | ||
| * on successful completion | ||
| * - len(out) This value shall be filled with the length of the ca cert | ||
| * If your esp_secure_cert partition is of type NVS, the API will dynamically allocate | ||
| * the required memory to store the ca cert | ||
| * | ||
| * In case of cust_flash partition, a read only flash pointer shall be returned here. | ||
| * @return | ||
| * - ESP_OK On success | ||
| * - ESP_FAIL/other relevant esp error code | ||
| * On failure | ||
| */ | ||
| esp_err_t esp_secure_cert_get_ca_cert(char **buffer, uint32_t *len); | ||
|
|
||
| /* | ||
| * Free any internally allocated resources for the ca cert. | ||
| * @note | ||
| * This API would free the memory if it is dynamically allocated | ||
| * | ||
| * @params | ||
| * - buffer(in) The data pointer | ||
| * This pointer should be the same one which | ||
| * has been obtained through "esp_secure_cert_get_ca_cert" API. | ||
| */ | ||
| esp_err_t esp_secure_cert_free_ca_cert(char *buffer); | ||
|
|
||
| #ifndef CONFIG_ESP_SECURE_CERT_DS_PERIPHERAL | ||
| /* @info | ||
| * Get the private key from the esp_secure_cert partition | ||
| * | ||
| * @note | ||
| * The API shall dynamically allocate the memory if required. | ||
| * The dynamic allocation of memory shall be required in following cases: | ||
| * 1) partition type is NVS | ||
| * 2) HMAC encryption is enabled for the API needs to be called | ||
| * | ||
| * The esp_secure_cert_free_priv_key API needs to be called in order to free the memory. | ||
| * The API shall only free the memory if it has been dynamically allocated. | ||
| * | ||
| * @params | ||
| * - buffer(out) This value shall be filled with the private key address | ||
| * on successful completion | ||
| * - len(out) This value shall be filled with the length of the private key | ||
| * | ||
| * | ||
| * @return | ||
| * - ESP_OK On success | ||
| * - ESP_FAIL/other relevant esp error code | ||
| * On failure | ||
| */ | ||
| esp_err_t esp_secure_cert_get_priv_key(char **buffer, uint32_t *len); | ||
|
|
||
| /* | ||
| * Free any internally allocated resources for the priv key. | ||
| * @note | ||
| * This API would free the memory if it is dynamically allocated | ||
| * | ||
| * @params | ||
| * - buffer(in) The data pointer | ||
| * This pointer should be the same one which | ||
| * has been obtained through "esp_secure_cert_get_priv_key" API. | ||
| */ | ||
| esp_err_t esp_secure_cert_free_priv_key(char *buffer); | ||
|
|
||
| #else /* !CONFIG_ESP_SECURE_CERT_DS_PERIPHERAL */ | ||
| /* @info | ||
| * This function returns the flash esp_ds_context which can then be | ||
| * directly provided to an esp-tls connection through its config structure. | ||
| * The memory for the context is dynamically allocated. | ||
| * | ||
| * @params | ||
| * - ds_ctx The pointer to the DS context | ||
| * @return | ||
| * - NULL On failure | ||
| */ | ||
| esp_ds_data_ctx_t *esp_secure_cert_get_ds_ctx(void); | ||
|
|
||
| /* | ||
| *@info | ||
| * Free the ds context | ||
| */ | ||
| void esp_secure_cert_free_ds_ctx(esp_ds_data_ctx_t *ds_ctx); | ||
| #endif /* CONFIG_ESP_SECURE_CERT_DS_PERIPHERAL */ | ||
|
|
||
| #ifdef __cplusplus | ||
| } | ||
| #endif |
Oops, something went wrong.