dearsky/pico-hsm
1
0
Fork 0
Code Issues 17 Pull Requests 4 Actions Packages Projects Releases 26 Wiki Activity
1,038 Commits 2 Branches 32 Tags
99a9803328500f8b535c2d5a76b0a87966d38014
Commit Graph

65 Commits

Author SHA1 Message Date
Pol Henarejos
f3bf3cd8f4 Do not use pico patcher script anymore. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 14:58:42 +01:00
Pol Henarejos
f301b2a1b1 Add --no-dev-cert to do not request a certificate and use a self-signed one. Do not use if attestation is needed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-08 19:13:14 +01:00
Pol Henarejos
f1410bbf04 Only request and upload the device certificate if needed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-08 17:45:48 +01:00
Pol Henarejos
20ef94c301 Upgrade Pico HSM Tool to v2.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:28:49 +01:00
Pol Henarejos
68360978d6 Use BOOTKEY instead of reading json. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:25:22 +01:00
Pol Henarejos
1933498a33 Add optional bootkey index param for secure_boot. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:24:17 +01:00
Pol Henarejos
0ce89ae968 Add support for lock chip on secure_boot. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:19:55 +01:00
Pol Henarejos
d1ee43baab Add secure_boot enable. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-27 02:37:16 +02:00
Pol Henarejos
2b77519a3b Add OTP command to Pico HSM Tool. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-15 22:12:34 +02:00
Pol Henarejos
f7451f56ed Add support for led dimming and max. brightness. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-09-30 09:21:39 +02:00
Pol Henarejos
c5714a91ab Fix AES key generation for 192 and 256. 
Fixes #48.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-08-26 02:39:21 +02:00
Pol Henarejos
237e687c3b Upgrade to Pico Keys SDK v6.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-06-22 20:57:28 +02:00
Pol Henarejos
dd68554782 Added support for enable/disable Web CCID on the fly. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-06-19 23:29:05 +02:00
Pol Henarejos
07079b6ba1 Add descriptive message. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-05-30 19:19:02 +02:00
Pol Henarejos
294ca81d7d Upgrade patch_vidpid with newer Pico Keys SDK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-05-30 19:18:37 +02:00
Pol Henarejos
623cf10dba Add phy command to pico-hsm-tool to change VIDPID dynamically. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-04-17 11:51:25 +02:00
Pol Henarejos
38bef5b43f Fix error message 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-01-09 11:26:26 +01:00
Pol Henarejos
2974aa234a Added required for subparsers. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-13 16:59:15 +01:00
Pol Henarejos
d90b296237 Added keygen command to generate AES, X25519 and X448 keys. 
It replaces x25519/x448 commands and cipher keygen subcommand.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-13 16:57:11 +01:00
Pol Henarejos
e98b26fee5 Flush stderr. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-13 15:34:33 +01:00
Pol Henarejos
2086a68c53 Key id not needed on keygen. 
It also returns the fresh new generated key id.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-13 15:34:21 +01:00
Pol Henarejos
a5ab1cabc5 Add support for AES-ECB, AES-CBC with custom IV, AES-OFB, AES-CFB, AES-GCM, AES-CCM, AES-CTR and AES-XTS. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-11 21:19:31 +01:00
Pol Henarejos
1c7cdc8564 Added support for CMAC. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-11 20:28:13 +01:00
Pol Henarejos
d74b3418bc Fix typo 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-11 20:13:38 +01:00
Pol Henarejos
a3bf2e9e14 If no key is found, generate a new one. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-06 17:10:19 +01:00
Pol Henarejos
3d7f714936 Fix initialization with so-pin. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-05 19:56:11 +02:00
Pol Henarejos
f09654ccf4 Added --silent flag to initialization to avoid prompt display. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-05 19:56:11 +02:00
Pol Henarejos
6af4cc7fec Fix getting RTC with pico-hsm-tool. 
Closes #25.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-06-20 13:32:30 +02:00
Pol Henarejos
ebcac9dfdc Upgrade to pico-hsm-tool to use the newer PicoHSM python package. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-23 20:19:53 +01:00
Pol Henarejos
8fd3b4d858 CA cert is also uploaded to perform PKA. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-06 01:01:20 +01:00
Pol Henarejos
b24e109a3c Fix error message when no card is detected. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-16 22:50:53 +01:00
Pol Henarejos
7d906851dd Updating to newer version of Pico HSM SDK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-20 23:51:49 +01:00
Pol Henarejos
f2874ae3ef Fix when ping is provided during the initialization. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:00:19 +01:00
Pol Henarejos
c95dee84f2 Changing backend service url. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 19:00:35 +01:00
Pol Henarejos
63c85000d0 Added support for kdf. 
It supports HKDF, PBKDF2 and X963, with multiple MD (SHA family), salt/nonces and configurable output size.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-15 00:15:59 +01:00
Pol Henarejos
bb4c293736 Adding subparsers for subcommands. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 16:27:51 +01:00
Pol Henarejos
f65167e3c7 Adding support for keypair generation for Curve25519 and Curve448. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-11 17:10:34 +01:00
Pol Henarejos
6bf72e5a59 Added support for HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384 and HMAC-SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-08 17:26:32 +01:00
Pol Henarejos
7c877ebea2 Using file_out parameter. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 22:31:19 +01:00
Pol Henarejos
e1983f7bcc Now is possible pipe encrypt & decrypt commands. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 22:16:10 +01:00
Pol Henarejos
a5e025a4e5 If no applet is selected, then select it. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 21:37:42 +01:00
Pol Henarejos
a7682d2639 Adding Extended Cipher feature. 
With this new subcommand, Pico HSM will support newer cipher algorithms.
ChaCha20-Poly1305 is the first. It will be based on a custom P2 subcommand to support an arbitrary structure with multiple parameters (AAD, IV, etc.)

pico-hsm-tool.py shall be used.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 21:37:11 +01:00
Pol Henarejos
30301c68f1 Linux uses the generic interface. Needs deep testing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 13:14:37 +01:00
Pol Henarejos
abf980d84e Fixes in windows backend. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-03 18:41:02 +01:00
Pol Henarejos
8718f55df2 Adding secure_key for windows. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-03 18:26:35 +01:00
Pol Henarejos
d1a3a24527 Import secure_key only when needed. 
Now, it does not block anymore the entire execution of pico tool.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-03 16:09:42 +01:00
Pol Henarejos
f363b77a07 Adding secure_key for macOS. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-03 16:06:06 +01:00
Pol Henarejos
f1058ea611 Merge branch 'master' into small-fixes 2022-11-03 15:48:33 +01:00
Pol Henarejos
00279da8d5 Adding Secure Lock to lock the device with a random 256 bit key. 
This is an extra layer of security to avoid brute force attacks if PIN is too weak.
At every hard reset (on device plug), the device must be unlocked prior any other command. Once unlocked, the device can be used as usual.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-31 15:09:54 +01:00
Reiner Rottmann
1a6cfd17cb Small fix in ModuleNotFoundError handling. 2022-10-30 08:51:57 +01:00