Add WOLFCRYPT_TZ_WOLFHSM TrustZone engine for STM32H5#769

Draft

aidangarske wants to merge 13 commits into

wolfSSL:masterfrom

aidangarske:h5-wolfhsm-port

Commits on May 11, 2026

Add WOLFCRYPT_TZ_WOLFHSM scaffolding for STM32H5
aidangarske
committed
Add wolfHSM TrustZone server + NSC bridge for STM32H5
aidangarske
committed
Test on H5 HW wire WOLFBOOT_TZ_TEST_NO_BKPT make-flag through CFLAGS
aidangarske
committed
Phase 1 cleanup: drop debug-era artifacts and Phase labels
aidangarske
committed
Phase 2: SHA256 + AES cached-key round-trips through the bridge
aidangarske
committed
Phase 3: flash-backed NVM via whFlashCb adapter over hal_flash_*
aidangarske
committed
Phase 3: keystore-persist test mirrors PKCS11's first/second-boot pattern
aidangarske
committed
wolfhsm_flash_hal: model on psa_store sector-cache pattern for H5 ECC
aidangarske
committed
Phase 4: docs/wolfHSM.md TZ section + CI lane for stm32h5-tz-wolfhsm
aidangarske
committed
Phase 4: add wolfHSM section to STM32-TZ.md
aidangarske
committed
WOLFCRYPT_TZ_WOLFHSM: Skoll review fixes + flash-adapter unit test
aidangarske
committed

Commits on May 12, 2026