dearsky/pico-hsm
1
0
Fork 0
Code Issues 17 Pull Requests 4 Actions Packages Projects Releases 26 Wiki Activity
674 Commits 2 Branches 32 Tags
20c01eb08d57c23facaa19d875c35a7dda6d78b1
Commit Graph

315 Commits

Author SHA1 Message Date
Pol Henarejos
20c01eb08d Fix name of x963 function. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-17 23:54:06 +01:00
Pol Henarejos
420e55901c Fix HMAC computation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-17 22:43:09 +01:00
Pol Henarejos
7b62ca5327 Upgrade to mbedtls v3.3.0 2023-02-16 23:33:13 +01:00
Pol Henarejos
9279773073 Removed printf 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-15 19:46:42 +01:00
Pol Henarejos
cd6e280f4f Switching to new style. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-15 00:10:35 +01:00
Pol Henarejos
daaa5bf402 Harmonize coding style. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-14 23:13:46 +01:00
Pol Henarejos
43a49d2a14 Return reference not found when deleting a key domain. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-14 18:51:30 +01:00
Pol Henarejos
3b9c2d159b Fix returning existing key domain. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-14 18:47:43 +01:00
Pol Henarejos
14c7852143 Fix returning shared secret. 
I do not know why a 0x04 was prepended.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-14 11:28:27 +01:00
Pol Henarejos
0685be5f1e EE_CERTIFICATE is added when importing key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-13 23:53:41 +01:00
Pol Henarejos
af16be64a2 Adding checks on ec import. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-13 23:30:27 +01:00
Pol Henarejos
68071825c2 Fix EC public key computation when importing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-13 23:24:04 +01:00
Pol Henarejos
fbabb81acd Fix asymmetric decrypt for OAEP. It only supports SHA256. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-12 21:53:47 +01:00
Pol Henarejos
35c42bccb4 List PRKD if exist. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 01:25:25 +01:00
Pol Henarejos
8976dc1f79 Added support for RSA-PKCSv15-SHA224, SHA384 and SHA512. Also added support for RSA-PSS-SHA224, SHA384 and SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-17 00:41:46 +01:00
Pol Henarejos
9d47e62041 Fix signature for secp521r1. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-17 00:05:46 +01:00
Pol Henarejos
0daddfd477 Fix ECDSA-SHA384 and ECDSA-SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-17 00:05:31 +01:00
Pol Henarejos
89d617110f Add asn1_build_prkd_rsa() 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-16 18:54:28 +01:00
Pol Henarejos
17941397e9 Fix exporting large ECC key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-16 18:54:20 +01:00
Pol Henarejos
5419ff74ee Using file_has_data() to check contents. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-13 18:07:50 +01:00
Pol Henarejos
723011078c Using file_has_data() instead of data directly. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:06:31 +01:00
Pol Henarejos
fe7c0333ab Some emulation fixes. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:06:11 +01:00
Pol Henarejos
c01940b62b Fix accessing way to data. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:05:59 +01:00
Pol Henarejos
7195a8f3ec Fix headers in emulation mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:05:46 +01:00
Pol Henarejos
7764de4e10 Unused headers. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:05:16 +01:00
Pol Henarejos
e05c526b4d Fix printf format. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:55 +01:00
Pol Henarejos
bc20f98b44 In emulation, return always 1mb of memory. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:44 +01:00
Pol Henarejos
742c3f3e3c RTC command is not available in emulation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:23 +01:00
Pol Henarejos
9793977ffc Fixed double counter increment. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:05 +01:00
Pol Henarejos
9ff3254a4c Update to latest HSM SDK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-22 22:50:54 +01:00
Pol Henarejos
691aa3308c Fix when importing a dkek and it fails. 
Now the dkek state is returned to the previous one.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:11:26 +01:00
Pol Henarejos
6a57e67629 Fix importing dkek twice. 
It is not allowed anymore.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:04:18 +01:00
Pol Henarejos
202c8a4b22 Credentials are not necessary when importing DKEK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:00:32 +01:00
Pol Henarejos
9e9cf9b768 Upgrading version to v3.2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 19:00:44 +01:00
Pol Henarejos
4113f6a65d Fix parsing PBKDF2 params. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-15 00:14:39 +01:00
Pol Henarejos
f98d744076 Add apdu.ne check for large buffers. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 18:04:44 +01:00
Pol Henarejos
aa8b1e6efe Added support for X963 KDF. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 15:38:16 +01:00
Pol Henarejos
0cb2e8ec2e Added PBES2 key derivation with encryption and decryption support. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 13:07:49 +01:00
Pol Henarejos
0e96753ccb Added support for PBKDF2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 12:01:27 +01:00
Pol Henarejos
2b2df22d75 Added support for configurable HKDF. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 10:14:54 +01:00
Pol Henarejos
8fe2677a56 Fix cofactor return with cvc. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-11 17:08:36 +01:00
Pol Henarejos
d09a7cf9c8 If self-signature fails, puts all-0. 
When generating a keypair and returns a self-signed CVREQ, the signature might fail for Curve25519 and Curve448. Instead of returning null, it puts zeros in order to return what is expected to return.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-11 17:04:17 +01:00
Pol Henarejos
6bf72e5a59 Added support for HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384 and HMAC-SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-08 17:26:32 +01:00
Pol Henarejos
a7682d2639 Adding Extended Cipher feature. 
With this new subcommand, Pico HSM will support newer cipher algorithms.
ChaCha20-Poly1305 is the first. It will be based on a custom P2 subcommand to support an arbitrary structure with multiple parameters (AAD, IV, etc.)

pico-hsm-tool.py shall be used.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 21:37:11 +01:00
Pol Henarejos
00279da8d5 Adding Secure Lock to lock the device with a random 256 bit key. 
This is an extra layer of security to avoid brute force attacks if PIN is too weak.
At every hard reset (on device plug), the device must be unlocked prior any other command. Once unlocked, the device can be used as usual.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-31 15:09:54 +01:00
Pol Henarejos
eda8b53949 Memory cleanup on ECDH. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-31 12:54:44 +01:00
Pol Henarejos
cfc0cc8f6e Some optimizations. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-31 00:38:30 +01:00
Pol Henarejos
ab61b2a2d5 Fix returning public key of koblitz curve secp_k1. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-31 00:38:21 +01:00
Pol Henarejos
f79a6ed30a Do not override Ne. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-30 23:42:12 +01:00
Pol Henarejos
4313722b06 Fix memory free on keygen ecc. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-30 23:15:22 +01:00