From 5b8db86153fed4dcb83a4d9e53fac23cacfe72af Mon Sep 17 00:00:00 2001 From: Marco Oliverio Date: Wed, 12 Aug 2026 11:43:06 +0200 Subject: [PATCH] hal: pic32cz: specify that HSM direct loading is not for production --- hal/pic32cz.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/hal/pic32cz.c b/hal/pic32cz.c index cdbf2af685..90d708ddab 100644 --- a/hal/pic32cz.c +++ b/hal/pic32cz.c @@ -205,6 +205,11 @@ int hal_hsm_init_connect(void) FCW_MUTEX = FCW_MUTEX_RELEASE; #if defined(HSM_FW_ADDR) && defined(HSM_FW_SIZE) + /* DEV/NON-PRODUCTION: This code path loads and boots the HSM firmware image + * from a raw address/size without performing any hash or signature + * verification. Production builds must authenticate the HSM firmware via + * ROM root-of-trust */ + /* Load/boot the HSM core from the firmware image; blocks until it has booted * and acknowledged. Skipped when HSM_FW_BIN is unset: the firmware is then * assumed already resident and wolfBoot connects to the running server. */