CW_CryptoProvider implementation for ESP32 using mbedTLS and the hardware TRNG. More...

#include "CW_CryptoProvider.h"
#include "CW_Defs.h"

Include dependency graph for esp32_crypto_provider.h:

This graph shows which files directly or indirectly include this file:

Classes
class	ESP32CryptoProvider
	CW_CryptoProvider backed by mbedTLS and the ESP32 hardware TRNG. More...

Detailed Description

CW_CryptoProvider implementation for ESP32 using mbedTLS and the hardware TRNG.

ESP32CryptoProvider wires the platform-independent CW_CryptoProvider interface to the ESP-IDF cryptographic stack:

Operation	Backend
SHA-256 / SHA-512	mbedTLS (hardware-accelerated on ESP32-S3)
AES-CBC enc / dec	mbedTLS (hardware-accelerated on ESP32-S3)
ECDH / key-gen	uECC shim backed by mbedTLS ECP primitives
ECDSA verify	mbedTLS ECP verify
Random bytes	`esp_fill_random()` — hardware TRNG (SEC-001)

Warning: The ESP32 hardware TRNG delivers full entropy only when Wi-Fi or Bluetooth is active. When neither radio is running the TRNG falls back to thermal noise and ring-oscillator jitter, which provides reduced (but non-zero) entropy. Enable Wi-Fi before performing key generation or signing operations in production firmware.

Classes