Add WOLFCRYPT_TZ_WOLFHSM TrustZone engine for STM32H5#769

Open

aidangarske wants to merge 18 commits into

wolfSSL:masterfrom

aidangarske:h5-wolfhsm-port

Commits on May 26, 2026

Add WOLFCRYPT_TZ_WOLFHSM scaffolding for STM32H5
aidangarske
committed
Add wolfHSM TrustZone server + NSC bridge for STM32H5
aidangarske
committed
Test on H5 HW wire WOLFBOOT_TZ_TEST_NO_BKPT make-flag through CFLAGS
aidangarske
committed
Phase 1 cleanup: drop debug-era artifacts and Phase labels
aidangarske
committed
Phase 2: SHA256 + AES cached-key round-trips through the bridge
aidangarske
committed
Phase 3: flash-backed NVM via whFlashCb adapter over hal_flash_*
aidangarske
committed
Phase 3: keystore-persist test mirrors PKCS11's first/second-boot pattern
aidangarske
committed
wolfhsm_flash_hal: model on psa_store sector-cache pattern for H5 ECC
aidangarske
committed
Phase 4: docs/wolfHSM.md TZ section + CI lane for stm32h5-tz-wolfhsm
aidangarske
committed
Phase 4: add wolfHSM section to STM32-TZ.md
aidangarske
committed
WOLFCRYPT_TZ_WOLFHSM: Skoll review fixes + flash-adapter unit test
aidangarske
committed
WOLFCRYPT_TZ_WOLFHSM: review fixes and unit-test coverage
aidangarske
committed
lib/wolfHSM: pin to wolfHSM PR 348 head for NSC transport
aidangarske
committed
port/stmicro/stm32h5-tz-wolfhsm: convenience wrapper + CI to whTest_ClientConfig
aidangarske
committed