dearsky/pico-hsm
1
0
Fork 0
Code Issues 17 Pull Requests 4 Actions Packages Projects Releases 26 Wiki Activity
722 Commits 2 Branches 32 Tags
99f1620e7d356bc265971574dcb623f288e01cdb
Commit Graph

722 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Pol Henarejos
99f1620e7d Fixes #22. 
SC-HSM returns the result with a 0x04 prepended. This comes from OpenSC but it is not clear the exact reason. 0x04 is usually for encoding uncompressed EC points but in that case it does not seem to make sense.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-18 18:40:27 +01:00
Pol Henarejos
755570e01a Fix deletion key in test 50. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-18 18:38:05 +01:00
Pol Henarejos
4b264597d6 Fix race condition. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-14 09:58:06 +01:00
Pol Henarejos
67e3d908b3 Fix test key deletion. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-14 09:57:25 +01:00
Pol Henarejos
7ae76354ef Added more tests for key_export. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-13 18:03:21 +01:00
Pol Henarejos
9291c2b4e3 delete_file() supports p1/p2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-13 18:02:47 +01:00
Pol Henarejos
657ee18730 Added assert on deletion 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-13 18:02:31 +01:00
Pol Henarejos
132054c9b9 Public point is calculated everytime a private key is loaded. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-13 18:01:56 +01:00
Pol Henarejos
2a3b9b7474 Fix wrapping points. 
Now it uses mbedtls_ecp_point_write_binary() for better control.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-13 18:01:20 +01:00
Pol Henarejos
4e73723747 Fix checking key domain set. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-10 15:59:52 +01:00
Pol Henarejos
09724d95db Fix XKEK key generation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-10 07:34:15 +01:00
Pol Henarejos
c1bfb597bc Added first tests of key wrapping. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 20:10:25 +01:00
Pol Henarejos
fd53b88397 Added more tests to key domain tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 20:09:58 +01:00
Pol Henarejos
11e5338736 Check if key domain is not already initialized when initializing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 20:09:32 +01:00
Pol Henarejos
3660120b11 Before wrapping, check if DKEK is properly configured. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 20:09:03 +01:00
Pol Henarejos
75ca1b57d9 Added support of counter, algorithms and key domain to AES too. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 18:39:06 +01:00
Pol Henarejos
7af67713e7 Add support for counter, algorithms and key domain in key generation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 18:38:29 +01:00
Pol Henarejos
63c465138b Added delete XKEK tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 18:28:31 +01:00
Pol Henarejos
4d569df108 Added dkek import in key domain tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 18:28:08 +01:00
Pol Henarejos
bee6a7bb92 Return error if a non-initialized key domain is deleted. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 18:27:47 +01:00
Pol Henarejos
e4583eb9c0 Fix potential crash on delete file. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 18:16:38 +01:00
Pol Henarejos
1c8582365d Add manual trigger 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-09 08:48:09 +01:00
Pol Henarejos
daf71678c5 Added first XKEK tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-08 22:15:44 +01:00
Pol Henarejos
26f0775772 Move some certs to common place. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-08 22:15:11 +01:00
Pol Henarejos
ed674b379c Zeroize ecdh key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-08 11:15:02 +01:00
Pol Henarejos
6aa8d37d07 If a key does not belong to any key domain, it cannot be wrapped. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 23:45:37 +01:00
Pol Henarejos
963456051e If public point is not found, it is computed automatically. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 23:45:10 +01:00
Pol Henarejos
1e90699a3f Added more PKA tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 23:16:12 +01:00
Pol Henarejos
f8110a9d75 Update README. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 23:16:01 +01:00
Pol Henarejos
d81b21695f If no key domain is found, 0 is used by default. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 23:15:50 +01:00
Pol Henarejos
51e9e6722e Reset puk status on failed authentication. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 23:14:55 +01:00
Pol Henarejos
dba4630895 Add Public Key Authorization tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 17:28:56 +01:00
Pol Henarejos
ee73c6e781 Code style 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 17:28:23 +01:00
Pol Henarejos
2f63966c60 Fix checking status of PUK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 15:55:59 +01:00
Pol Henarejos
e624f9ff72 Fix checking if PKU is enabled. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 11:15:07 +01:00
Pol Henarejos
fb4ff9424e Call reset puk store on init. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 11:14:42 +01:00
Pol Henarejos
63b245b858 Fix initialize with PUK store memory. 
Now it is cleared.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 11:14:13 +01:00
Pol Henarejos
cd525d91a3 Updated base flash memory for emulation to include CA CVC. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-06 01:09:00 +01:00
Pol Henarejos
8fd3b4d858 CA cert is also uploaded to perform PKA. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-06 01:01:20 +01:00
Pol Henarejos
3c160f69c0 Add DV cert to PUK store. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-06 00:40:31 +01:00
Pol Henarejos
2c9fa8b19f Add two new boards for build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-06 00:39:00 +01:00
Pol Henarejos
ccfe7ca8a8 Upgrade to version 3.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
v3.4 		2023-03-04 14:38:28 +01:00
Pol Henarejos
d2d038f14d Upgrade to version 3.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-04 14:35:33 +01:00
Pol Henarejos
1a05d7b51f Fix conditional interface compilation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-04 14:16:59 +01:00
Pol Henarejos
fa60ed5049 Update code style. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-04 14:05:51 +01:00
Pol Henarejos
35aec06391 Adding support for CCID GET, SET and RESET PARAMS. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-20 13:17:32 +01:00
Pol Henarejos
61359c7ebd Add key derivation tests (HKDF, PBKDF2 and X963). 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-17 23:54:40 +01:00
Pol Henarejos
20c01eb08d Fix name of x963 function. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-17 23:54:06 +01:00
Pol Henarejos
0b71bf693d Added CMAC tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-17 22:46:16 +01:00
Pol Henarejos
a1f478239d Added HMAC tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-17 22:43:28 +01:00