dearsky/pico-hsm
1
0
Fork 0
Code Issues 17 Pull Requests 4 Actions Packages Projects Releases 26 Wiki Activity
1,176 Commits 2 Branches 32 Tags
82f4b2201ccfbfa1f2604010b141f66e934b0f65
Commit Graph

484 Commits

Author SHA1 Message Date
Pol Henarejos
82f4b2201c Remove printf 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-09 21:38:15 +01:00
Pol Henarejos
a0faf5308e Move EDDSA to another branch. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-09 15:49:20 +01:00
Pol Henarejos
b5b5ccd53c Upgrade to v6.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 17:21:26 +01:00
Pol Henarejos
c4a1cf32e5 Add Pico Version Major 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-18 01:05:40 +01:00
Pol Henarejos
dba614ed36 Relicense project under the GNU Affero General Public License v3 (AGPLv3) 
and add the Enterprise / Commercial licensing option.

Main changes:
- Replace GPLv3 headers with AGPLv3 headers in source files.
- Update LICENSE file to the full AGPLv3 text.
- Add ENTERPRISE.md describing the dual-licensing model:
  * Community Edition: AGPLv3 (strong copyleft, including network use).
  * Enterprise / Commercial Edition: proprietary license for production /
    multi-user / OEM use without the obligation to disclose derivative code.
- Update README with a new "License and Commercial Use" section pointing to
  ENTERPRISE.md and clarifying how companies can obtain a commercial license.

Why this change:
- AGPLv3 ensures that modified versions offered as a service or deployed
  in production environments must provide corresponding source code.
- The Enterprise / Commercial edition provides organizations with an
  alternative proprietary license that allows internal, large-scale, or OEM
  use (bulk provisioning, policy enforcement, inventory / revocation,
  custom attestation, signed builds) without AGPL disclosure obligations.

This commit formally marks the first release that is dual-licensed:
AGPLv3 for the Community Edition and a proprietary commercial license
for Enterprise customers.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-26 20:18:45 +01:00
Pol Henarejos
f0f8e4382a Fix cross build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-06-22 20:33:06 +02:00
Pol Henarejos
dce4e304bc Upgrade to v5.6 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-10 18:41:31 +02:00
Pol Henarejos
7c1ef56799 Fix ne parameter when secure message protocol is used. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:27:57 +02:00
Pol Henarejos
4b59bd6481 0x85 and 0x86 should return not found to avoid authentication path. 
Fixes #81 and #84.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:27:21 +02:00
Pol Henarejos
9b1dceb8da Use K1 curve for general authentication. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:24:22 +02:00
Pol Henarejos
21b6a7782a Add EdDSA support as a conditional build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 20:20:43 +01:00
Pol Henarejos
ef71ec6a29 Upgrade to v5.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-20 18:10:49 +01:00
Pol Henarejos
17ca65a41b Upgrade to v5.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 20:21:57 +01:00
Pol Henarejos
92fe26c1e1 Upgrade to v6.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 19:18:02 +01:00
Pol Henarejos
747e5fbe86 Added phy_save() and phy_load() to save and load PHY. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-29 17:09:29 +01:00
Pol Henarejos
4c636e0ce5 Upgrade to v5.2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-15 13:07:35 +01:00
Pol Henarejos
297f2e6228 Upgrade to v5.2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-15 12:06:00 +01:00
Pol Henarejos
f0a9d03ca8 Fix storing MKEK in devices with OTP_1 available. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-08 14:38:02 +01:00
Pol Henarejos
c6b03e54ca Fix TX/RX buffers to align them with USB buffers and avoid overflows. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-24 02:06:15 +01:00
Pol Henarejos
991f5fc960 More uint funcs. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 21:41:40 +01:00
Pol Henarejos
6d516b1b78 Use BE/LE functions for packing uint16. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 21:01:12 +01:00
Pol Henarejos
73232b6de4 Add LE/BE functions for uint16, 32 and 64. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:39:03 +01:00
Pol Henarejos
d56b540324 Add support for displaying memory usage. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:24:10 +01:00
Pol Henarejos
3d960b931a Fix MKEK masking order. Fixes #69. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:26:47 +01:00
Pol Henarejos
ff7ef56cda Dev options file must be persistent, since it manipulates MKEK which is in turn persistent. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:25:19 +01:00
Pol Henarejos
320455815f Only allow initialize if secure lock is disabled or has mkek mask. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:24:35 +01:00
Pol Henarejos
859dec7e4a Accept mkek mask only if secure lock is enabled. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:23:51 +01:00
Pol Henarejos
f88aad1e2c Fixed buffer overflow when unlocking the device. 
Fixes #68.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-03 08:36:05 +01:00
Pol Henarejos
866aac8fe3 Add reboot extra command. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-27 21:48:04 +01:00
Pol Henarejos
bb45c9b3a8 Merge branch 'master' into development-eddsa 2024-11-12 20:10:07 +01:00
Pol Henarejos
1ea0a91ba8 Fix initialization when initializing a RP2350 board for first time. 
Fixes #60.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-12 19:25:22 +01:00
Pol Henarejos
d858a1e1d5 Upgrade to v5.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 18:10:56 +01:00
Pol Henarejos
b7c6ca58d0 Upgrade to v5.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 15:47:40 +01:00
Pol Henarejos
4ec1d4d891 Fix initialization and terminal certificate generation. 
Fixes #59.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-08 17:52:13 +01:00
Pol Henarejos
9b9ea7cae5 Add product and mcu to info in rescue mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-07 20:00:41 +01:00
Pol Henarejos
f5b89aed69 Use DEV key from OTP if available when initializing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-07 00:16:22 +01:00
Pol Henarejos
3c6684cdab Rename CCID_ codes to PICOKEY_ 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-05 19:29:00 +01:00
Pol Henarejos
9fa3758dad Add support for OTP raw read/write. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:15:48 +01:00
Pol Henarejos
2856ec6917 Align data in case it's not. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-27 02:14:51 +02:00
Pol Henarejos
ccec83dfb1 Fix otp write length check. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-27 01:41:12 +02:00
Pol Henarejos
9de1b4ca5d Fix OTP data check size. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-27 01:24:49 +02:00
Pol Henarejos
cbd9a5d296 Add sanitize check. 
Only pages 0 and 1 are allowed for reading.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-27 01:24:36 +02:00
Pol Henarejos
812a737ff5 Fix length. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-13 20:52:29 +02:00
Pol Henarejos
6163b870ed Fix haders. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-13 20:51:18 +02:00
Pol Henarejos
08d4dc58aa Add OTP extra command to read/write OTP without bootmode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-13 20:25:59 +02:00
Pol Henarejos
0193e55f7b Use macros in extras. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-13 20:06:58 +02:00
Pol Henarejos
f7451f56ed Add support for led dimming and max. brightness. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-09-30 09:21:39 +02:00
Pol Henarejos
72eb5a2a69 Enable OTP to store a permanent secret key. 
It can be used by HSM or Fido to protect the keys and use it as MKEK.
 2024-09-11 23:16:23 +02:00
Pol Henarejos
b571b0b945 Upgrade to version 4.2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-09-02 20:00:46 +02:00
Pol Henarejos
8e8bd32b44 Upgrade to version 4.2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-09-02 12:04:36 +02:00