Skip to content

hal: pic32cz: specify that HSM direct loading is not for production #855

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
danielinux merged 1 commit into from
Aug 13, 2026
+5 −0
Merged

hal: pic32cz: specify that HSM direct loading is not for production #855

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions hal/pic32cz.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -205,6 +205,11 @@ int hal_hsm_init_connect(void)
FCW_MUTEX = FCW_MUTEX_RELEASE;

#if defined(HSM_FW_ADDR) && defined(HSM_FW_SIZE)
/* DEV/NON-PRODUCTION: This code path loads and boots the HSM firmware image
* from a raw address/size without performing any hash or signature
* verification. Production builds must authenticate the HSM firmware via
* ROM root-of-trust */

/* Load/boot the HSM core from the firmware image; blocks until it has booted
* and acknowledged. Skipped when HSM_FW_BIN is unset: the firmware is then
* assumed already resident and wolfBoot connects to the running server. */
Expand Down
Loading