dearsky/pico-hsm
1
0
Fork 0
Code Issues 17 Pull Requests 4 Actions Packages Projects Releases 26 Wiki Activity
1,193 Commits 2 Branches 32 Tags
60dafec2e85536ebbb233934d8b88d475db8e3fb
Commit Graph

1193 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Pol Henarejos
991f5fc960 More uint funcs. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 21:41:40 +01:00
Pol Henarejos
6d516b1b78 Use BE/LE functions for packing uint16. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 21:01:12 +01:00
Pol Henarejos
2a3ac550ec Pack file struct. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:40:11 +01:00
Pol Henarejos
73232b6de4 Add LE/BE functions for uint16, 32 and 64. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:39:03 +01:00
Pol Henarejos
d56b540324 Add support for displaying memory usage. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:24:10 +01:00
Pol Henarejos
74b635fa3c Increase TinyUSB task stack size. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:12:15 +01:00
Pol Henarejos
07d9e225d2 Use PHY value for LED GPIO number. Fixes #71. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-16 13:12:11 +01:00
Pol Henarejos
3d960b931a Fix MKEK masking order. Fixes #69. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:26:47 +01:00
Pol Henarejos
ff7ef56cda Dev options file must be persistent, since it manipulates MKEK which is in turn persistent. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:25:19 +01:00
Pol Henarejos
320455815f Only allow initialize if secure lock is disabled or has mkek mask. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:24:35 +01:00
Pol Henarejos
859dec7e4a Accept mkek mask only if secure lock is enabled. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:23:51 +01:00
Pol Henarejos
053ccf4a89 Fix esp32 build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-03 08:47:44 +01:00
Pol Henarejos
f88aad1e2c Fixed buffer overflow when unlocking the device. 
Fixes #68.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-03 08:36:05 +01:00
Pol Henarejos
866aac8fe3 Add reboot extra command. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-27 21:48:04 +01:00
Pol Henarejos
a242a28394 Fix disable secure aut. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-27 16:11:18 +01:00
Pol Henarejos
c33ed9b968 Fix autobuild for Pico SDK 2.1.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-25 23:59:54 +01:00
Pol Henarejos
65a4474dec Fix build for RP2350. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-25 23:46:12 +01:00
Pol Henarejos
e243def565 Add UP button timeout for PHY. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-25 15:24:27 +01:00
Pol Henarejos
78bc34827e Autobuild for Pico SDK 2.0.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-25 13:13:31 +01:00
Pol Henarejos
a69cb8a95a Add CCID SET_CLOCK_AND_FREQUENCY command for latest IFD. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-25 12:55:28 +01:00
Pol Henarejos
bb45c9b3a8 Merge branch 'master' into development-eddsa v5.0-eddsa1 2024-11-12 20:10:07 +01:00
Pol Henarejos
1ea0a91ba8 Fix initialization when initializing a RP2350 board for first time. 
Fixes #60.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
v5.0 		2024-11-12 19:25:22 +01:00
Pol Henarejos
6f572954d5 If the board is RP2350 or ESP32, the requested certificate must be for secp256k1 key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-12 19:24:10 +01:00
Pol Henarejos
99a9803328 Update README.md 
Fix headings
 2024-11-10 19:00:29 +01:00
Pol Henarejos
5535f3ec10 No esp32 in eddsa workflows. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 18:47:41 +01:00
Pol Henarejos
f992a04142 Fix eddsa signature. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 18:45:05 +01:00
Pol Henarejos
d858a1e1d5 Upgrade to v5.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 18:10:56 +01:00
Pol Henarejos
b7c6ca58d0 Upgrade to v5.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 15:47:40 +01:00
Pol Henarejos
2f3d70fcac Upgrade mbedtls v3.6.2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 15:16:32 +01:00
Pol Henarejos
91c641033a Merge branch 'development' 2024-11-09 15:00:26 +01:00
Pol Henarejos
f3bf3cd8f4 Do not use pico patcher script anymore. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 14:58:42 +01:00
Pol Henarejos
e4736cc448 Upgrade Pico Keys SDK to v7.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 14:58:06 +01:00
Pol Henarejos
bfa8891c8d Update README. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 14:54:51 +01:00
Pol Henarejos
618fdb4c1a Do not request dev cert when performing tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 00:50:51 +01:00
Pol Henarejos
9457433844 Add compile flags for optimization build in ESP32. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 00:20:31 +01:00
Pol Henarejos
c239b4dd7c Fix secure otp build for non rp2350. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-08 19:46:00 +01:00
Pol Henarejos
96359ebe03 Add secure boot and secure lock commands via rescue. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-08 19:36:54 +01:00
Pol Henarejos
f301b2a1b1 Add --no-dev-cert to do not request a certificate and use a self-signed one. Do not use if attestation is needed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-08 19:13:14 +01:00
Pol Henarejos
4ec1d4d891 Fix initialization and terminal certificate generation. 
Fixes #59.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-08 17:52:13 +01:00
Pol Henarejos
f1410bbf04 Only request and upload the device certificate if needed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-08 17:45:48 +01:00
Pol Henarejos
9b9ea7cae5 Add product and mcu to info in rescue mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-07 20:00:41 +01:00
Pol Henarejos
f5b89aed69 Use DEV key from OTP if available when initializing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-07 00:16:22 +01:00
Pol Henarejos
f74a374c64 Fix version header. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-05 19:33:07 +01:00
Pol Henarejos
3c6684cdab Rename CCID_ codes to PICOKEY_ 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-05 19:29:00 +01:00
Pol Henarejos
20ef94c301 Upgrade Pico HSM Tool to v2.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:28:49 +01:00
Pol Henarejos
68360978d6 Use BOOTKEY instead of reading json. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:25:22 +01:00
Pol Henarejos
1933498a33 Add optional bootkey index param for secure_boot. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:24:17 +01:00
Pol Henarejos
0ce89ae968 Add support for lock chip on secure_boot. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:19:55 +01:00
Pol Henarejos
9fa3758dad Add support for OTP raw read/write. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:15:48 +01:00
Pol Henarejos
d1ee43baab Add secure_boot enable. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-27 02:37:16 +02:00