wolfSSL · dgarske · Apr 16, 2026 · Apr 16, 2026 · Apr 16, 2026
diff --git a/.github/workflows/test-renode-fastmath.yml b/.github/workflows/test-renode-fastmath.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   renode_automated_fastmath:
     runs-on: ubuntu-22.04
-    timeout-minutes: 15
+    timeout-minutes: 25
 
     steps:
       - uses: actions/checkout@v4

diff --git a/.github/workflows/test-renode-noasm-smallstack.yml b/.github/workflows/test-renode-noasm-smallstack.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   renode_automated_noasm_smallstack:
     runs-on: ubuntu-22.04
-    timeout-minutes: 15
+    timeout-minutes: 25
 
     steps:
       - uses: actions/checkout@v4

diff --git a/.github/workflows/test-renode-noasm.yml b/.github/workflows/test-renode-noasm.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   renode_automated_noasm:
     runs-on: ubuntu-22.04
-    timeout-minutes: 15
+    timeout-minutes: 25
 
     steps:
       - uses: actions/checkout@v4

diff --git a/.github/workflows/test-renode-nrf52.yml b/.github/workflows/test-renode-nrf52.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   renode_automated_base:
     runs-on: ubuntu-22.04
-    timeout-minutes: 15
+    timeout-minutes: 25
 
     steps:
       - uses: actions/checkout@v4

diff --git a/.github/workflows/test-renode-sha3.yml b/.github/workflows/test-renode-sha3.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   renode_automated_multi_sha:
     runs-on: ubuntu-22.04
-    timeout-minutes: 15
+    timeout-minutes: 25
 
     steps:
       - uses: actions/checkout@v4

diff --git a/.github/workflows/test-renode-sha384.yml b/.github/workflows/test-renode-sha384.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   renode_automated_multi_sha:
     runs-on: ubuntu-22.04
-    timeout-minutes: 15
+    timeout-minutes: 25
 
     steps:
       - uses: actions/checkout@v4

diff --git a/.github/workflows/test-renode-smallstack.yml b/.github/workflows/test-renode-smallstack.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   renode_automated_smallstack:
     runs-on: ubuntu-22.04
-    timeout-minutes: 15
+    timeout-minutes: 25
 
     steps:
       - uses: actions/checkout@v4

diff --git a/CMakeLists.txt b/CMakeLists.txt
@@ -1,6 +1,6 @@
 # CMakeLists.txt
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/README.md b/README.md
@@ -675,3 +675,33 @@ For Visual Studio, the developer command prompt will need to be activated.
     * wolfTPM v2.4.0-594-g6d5df60
     * wolfPKCS11 v2.0.0-stable-33-g81af264
     * wolfHSM v1.3.0 (8ac56d7)
+
+### V 2.8.0 - (2026-04-16)
+  * New hardware targets
+    * AMD/Xilinx Versal Gen 1 VMK180 support, including SD/QSPI boot flows and PetaLinux boot support
+    * Microchip PolarFire SoC MPFS250 support extended to M-mode/QSPI/LIM boot flows, plus eMMC/SD support
+    * New target support for NXP MCXN and MCXW71, NXP S32K14x, NXP LPC55S69, and Nordic nRF54L15
+    * Added NXP T1040 RDB support and refreshed NXP T2080 vendor-board configurations
+  * Improvements to supported targets
+    * STM32H5 TrustZone/PKCS11 integration reworked with NSC veneers, plus additional OTP and flash handling fixes
+    * PSoC6 now supports external flash dual-bank updates and read-modify-erase-write flash programming
+    * AURIX TC3xx self-update and wolfHSM configurations expanded, including RSA4096 and cert-chain examples
+    * Renesas RA6M4 and RX projects refreshed, with improved RAM-function handling for CCRX builds
+    * Improved clang/LLVM support for embedded builds and test-app image generation, with dedicated CI coverage
+  * New features and improvements
+    * Added wolfPSA integration for secure storage and TrustZone-backed PSA services
+    * Added TrustZone PSA-crypto support and PSA attestation compliance, including DICE-based attestation flows
+    * Added Zephyr integration to replace the TEE layer, with PSA-facing interfaces and sample patches
+    * Added a generic hook framework for pre-init, post-init, and boot hooks
+    * Added custom encryption-key hooks, PKCS11-backed encrypted partitions, and improved image inspection/status tooling
+    * Added monolithic self-update builds, reproducible-build support, self-header support, and expanded simulator self-update / TrustZone test coverage
+  * Bug fixes and hardening
+    * Strengthened image parsing, signing, and update flows with stricter bounds/overflow checks for signatures, TLVs, delta images, GPT/FDT parsing, disk I/O, and partition overlap
+    * Added fail-closed flash protection, stricter rollback handling in non-flash paths, and final sanity checks in boot and library boot paths
+    * Expanded constant-time comparisons and zeroization for TPM, DICE, SATA, update, and key-generation code paths
+    * Fixed self-update regressions, encrypted-partition handling, SDHCI/MMC corner cases, and assorted build/test regressions across ARM, PPC, RISC-V, and simulator targets
+  * Updated modules
+    * wolfSSL v5.9.1-stable
+    * wolfTPM v3.10.0-88-gefaab4a
+    * wolfPKCS11 v2.0.0-stable-126-g8fec695
+    * wolfHSM v1.4.0-57-g977bf18
diff --git a/cmake/config_defaults.cmake b/cmake/config_defaults.cmake
@@ -1,6 +1,6 @@
 # wolfboot/cmake/config_defaults.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/cube_ide_config.cmake b/cmake/cube_ide_config.cmake
@@ -1,6 +1,6 @@
 # wolfboot/cmake/cube_ide_config.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/current_user.cmake b/cmake/current_user.cmake
@@ -1,6 +1,6 @@
 # wolfboot/cmake/current_user.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/downloads/stm32l4.cmake b/cmake/downloads/stm32l4.cmake
@@ -1,6 +1,6 @@
 # wolfboot/cmake/downloads/stm32l4.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/functions.cmake b/cmake/functions.cmake
@@ -1,6 +1,6 @@
 # wolfboot/cmake/functions.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/load_dot_config.cmake b/cmake/load_dot_config.cmake
@@ -1,6 +1,6 @@
 # wolfboot/cmake/load_dot_config.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/stm32_hal_download.cmake b/cmake/stm32_hal_download.cmake
@@ -1,6 +1,6 @@
 # wolfboot/cmake/stm32_hal_download.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/toolchain_aarch64-none-elf.cmake b/cmake/toolchain_aarch64-none-elf.cmake
@@ -1,6 +1,6 @@
 # toolchain_aarch64-none-elf.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/toolchain_arm-none-eabi.cmake b/cmake/toolchain_arm-none-eabi.cmake
@@ -1,6 +1,6 @@
 # wolfboot/cmake/toolchain_arm-none-eabi.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/utils.cmake b/cmake/utils.cmake
@@ -1,6 +1,6 @@
 # utils.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/visualgdb_config.cmake b/cmake/visualgdb_config.cmake
@@ -1,6 +1,6 @@
 # wolfboot/cmake/visualgdb_config.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/vs2022_config.cmake b/cmake/vs2022_config.cmake
@@ -1,6 +1,6 @@
 # wolfboot/cmake/vs2022_config.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/wolfboot.cmake b/cmake/wolfboot.cmake
@@ -1,6 +1,6 @@
 # wolfboot.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/cmake/write_size.cmake b/cmake/write_size.cmake
@@ -1,6 +1,6 @@
 # write_size.cmake
 #
-# Copyright (C) 2025 wolfSSL Inc.
+# Copyright (C) 2026 wolfSSL Inc.
 #
 # This file is part of wolfBoot.
 #

diff --git a/docs/Targets.md b/docs/Targets.md
@@ -1083,7 +1083,7 @@ Use `0x20000` for the boot partition and `0x02000000` for the update partition.
 
 **Expected serial output on successful boot:**
 ```
-wolfBoot Version: 2.7.0 (...)
+wolfBoot Version: 2.8.0 (...)
 Running on E51 (hart 0) in M-mode
 QSPI: Using SC QSPI Controller (0x37020100)
 QSPI: Flash ID = 0x20 0xBA 0x21

diff --git a/hal/armv8m_tz.h b/hal/armv8m_tz.h
@@ -1,6 +1,6 @@
 /* armv8m_tz.h
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/cc26x2.c b/hal/cc26x2.c
@@ -1,6 +1,6 @@
 /* cc26x2.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/filesystem.c b/hal/filesystem.c
@@ -1,6 +1,6 @@
 /* filesystem.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/hal.c b/hal/hal.c
@@ -1,6 +1,6 @@
 /* hal.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/hifive1.c b/hal/hifive1.c
@@ -1,6 +1,6 @@
 /* hifive1.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/imx_rt.c b/hal/imx_rt.c
@@ -3,7 +3,7 @@
  * Custom HAL implementation. Defines the
  * functions used by wolfboot for a specific target.
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/kinetis.c b/hal/kinetis.c
@@ -1,6 +1,6 @@
 /* kinetis.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/kontron_vx3060_s2.c b/hal/kontron_vx3060_s2.c
@@ -1,6 +1,6 @@
 /* kontron_vx3060_s2.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/kontron_vx3060_s2_loader.c b/hal/kontron_vx3060_s2_loader.c
@@ -1,6 +1,6 @@
 /* kontron_vx3060_s2_loader.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/library.c b/hal/library.c
@@ -1,6 +1,6 @@
 /* library.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/library_fs.c b/hal/library_fs.c
@@ -1,6 +1,6 @@
 /* library_fs.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/lpc.c b/hal/lpc.c
@@ -1,6 +1,6 @@
 /* lpc.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/mcxa.c b/hal/mcxa.c
@@ -1,6 +1,6 @@
 /* mcxa.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/mcxn.c b/hal/mcxn.c
@@ -1,6 +1,6 @@
 /* mcxn.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/mcxw.c b/hal/mcxw.c
@@ -3,7 +3,7 @@
  * Stubs for custom HAL implementation. Defines the 
  * functions used by wolfboot for a specific target.
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/mpfs250.c b/hal/mpfs250.c
@@ -1,6 +1,6 @@
 /* mpfs250.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/mpfs250.h b/hal/mpfs250.h
@@ -1,6 +1,6 @@
 /* mpfs250.h
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/nrf52.c b/hal/nrf52.c
@@ -1,6 +1,6 @@
 /* nrf52.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/nrf52.h b/hal/nrf52.h
@@ -1,6 +1,6 @@
 /* nrf52.h
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/nrf5340.c b/hal/nrf5340.c
@@ -1,6 +1,6 @@
 /* nrf5340.c
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *

diff --git a/hal/nrf5340.h b/hal/nrf5340.h
@@ -1,6 +1,6 @@
 /* nrf5340.h
  *
- * Copyright (C) 2025 wolfSSL Inc.
+ * Copyright (C) 2026 wolfSSL Inc.
  *
  * This file is part of wolfBoot.
  *