Add WOLFCRYPT_TZ_WOLFHSM TrustZone engine for STM32H5#769

Open

aidangarske wants to merge 22 commits into

wolfSSL:masterfrom

aidangarske:h5-wolfhsm-port

Commits on Jun 11, 2026

Add WOLFCRYPT_TZ_WOLFHSM scaffolding for STM32H5
aidangarske
committed
Add wolfHSM TrustZone server + NSC bridge for STM32H5
aidangarske
committed
Test on H5 HW wire WOLFBOOT_TZ_TEST_NO_BKPT make-flag through CFLAGS
aidangarske
committed
Phase 1 cleanup: drop debug-era artifacts and Phase labels
aidangarske
committed
Phase 2: SHA256 + AES cached-key round-trips through the bridge
aidangarske
committed
Phase 3: flash-backed NVM via whFlashCb adapter over hal_flash_*
aidangarske
committed
Phase 3: keystore-persist test mirrors PKCS11's first/second-boot pattern
aidangarske
committed
wolfhsm_flash_hal: model on psa_store sector-cache pattern for H5 ECC
aidangarske
committed
Phase 4: docs/wolfHSM.md TZ section + CI lane for stm32h5-tz-wolfhsm
aidangarske
committed
Phase 4: add wolfHSM section to STM32-TZ.md
aidangarske
committed
WOLFCRYPT_TZ_WOLFHSM: Skoll review fixes + flash-adapter unit test
aidangarske
committed
WOLFCRYPT_TZ_WOLFHSM: review fixes and unit-test coverage
aidangarske
committed
lib/wolfHSM: pin to wolfHSM PR 348 head for NSC transport
aidangarske
committed
port/stmicro/stm32h5-tz-wolfhsm: convenience wrapper + CI to whTest_ClientConfig
aidangarske
committed
wolfhsm: re-assert server connected in NSC veneer before dispatch
aidangarske
committed
wolfhsm: size keycache to the wolfHSM test working set (9 + 3)
aidangarske
committed
lib/wolfHSM: bump pin to PR 348 head (transport-only)
aidangarske
committed
ci: drop wolfHSM from per-PR TZ tests; covered by nightly in wolfHSM
aidangarske
committed
stm32h5-tz-wolfhsm: PR review fixes (static flash cfg, cmse arg checks, volatile)
aidangarske
committed
stm32h5-tz-wolfhsm: bind NSC transport via WH_TRANSPORT_NSC_*_CB macros
aidangarske
committed
lib/wolfHSM: bump pin to NSC macro-initializer refactor
aidangarske
committed
Merge remote-tracking branch 'upstream/master' into h5-wolfhsm-port-merge
aidangarske
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add WOLFCRYPT_TZ_WOLFHSM TrustZone engine for STM32H5#769

Add WOLFCRYPT_TZ_WOLFHSM TrustZone engine for STM32H5#769
aidangarske wants to merge 22 commits into
wolfSSL:masterfrom
aidangarske:h5-wolfhsm-port

Commits on Jun 11, 2026

Add WOLFCRYPT_TZ_WOLFHSM scaffolding for STM32H5

Add wolfHSM TrustZone server + NSC bridge for STM32H5

Test on H5 HW wire WOLFBOOT_TZ_TEST_NO_BKPT make-flag through CFLAGS

Phase 1 cleanup: drop debug-era artifacts and Phase labels

Phase 2: SHA256 + AES cached-key round-trips through the bridge

Phase 3: flash-backed NVM via whFlashCb adapter over hal_flash_*

Phase 3: keystore-persist test mirrors PKCS11's first/second-boot pattern

wolfhsm_flash_hal: model on psa_store sector-cache pattern for H5 ECC

Phase 4: docs/wolfHSM.md TZ section + CI lane for stm32h5-tz-wolfhsm

Phase 4: add wolfHSM section to STM32-TZ.md

WOLFCRYPT_TZ_WOLFHSM: Skoll review fixes + flash-adapter unit test

WOLFCRYPT_TZ_WOLFHSM: review fixes and unit-test coverage

lib/wolfHSM: pin to wolfHSM PR 348 head for NSC transport

port/stmicro/stm32h5-tz-wolfhsm: convenience wrapper + CI to whTest_ClientConfig

wolfhsm: re-assert server connected in NSC veneer before dispatch

wolfhsm: size keycache to the wolfHSM test working set (9 + 3)

lib/wolfHSM: bump pin to PR 348 head (transport-only)

ci: drop wolfHSM from per-PR TZ tests; covered by nightly in wolfHSM

stm32h5-tz-wolfhsm: PR review fixes (static flash cfg, cmse arg checks, volatile)

stm32h5-tz-wolfhsm: bind NSC transport via WH_TRANSPORT_NSC_*_CB macros

lib/wolfHSM: bump pin to NSC macro-initializer refactor

Merge remote-tracking branch 'upstream/master' into h5-wolfhsm-port-merge