dearsky/pico-hsm
1
0
Fork 0
Code Issues 17 Pull Requests 4 Actions Packages Projects Releases 26 Wiki Activity
766 Commits 2 Branches 32 Tags
b61a34d41590adbcc04dd99d3ef72351f4e0d8bc
Commit Graph

766 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Pol Henarejos
b61a34d415 Added more tests for secp256r1 curves. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-24 12:47:49 +02:00
Pol Henarejos
0eea0fb096 Fix deriving nodes with retries (invalid first key). 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-24 12:47:27 +02:00
Pol Henarejos
82c03ee6c4 Fix memory free on error. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-24 12:40:51 +02:00
Pol Henarejos
20dfbcaaed Fix xpub for masters. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-24 11:25:36 +02:00
Pol Henarejos
a9fb170c58 Added tests for BIP and SLIP. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-23 20:40:31 +02:00
Pol Henarejos
46d85c029e Added first commit with BIP and SLIP support for cryptowallets. 
Needs more work.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-23 20:40:16 +02:00
Pol Henarejos
279df32acc Update README.md 
Added link to Pico Patcher tool.
 2023-05-11 20:05:28 +02:00
Pol Henarejos
c402b884cc Upgrade to mbedtls 3.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-10 00:17:32 +02:00
Pol Henarejos
8316196b42 Using forked vsmartcard just in case 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-04 11:10:58 +02:00
Pol Henarejos
7a6dafd7b6 Moving HSM SDK pointer 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-04 09:13:15 +02:00
Pol Henarejos
6d3809a792 Allow signatures with device key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-04-06 14:09:18 +02:00
Pol Henarejos
f22f58f983 Fix returning EOF when reading an element outside the size. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-04-06 14:08:43 +02:00
Pol Henarejos
405bf92e18 Added support for TokenInfo and StaticTokenInfo files. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-04-04 09:53:26 +02:00
Pol Henarejos
b5b6dcd2e6 Fix conditional build for WS2812. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-26 20:16:09 +02:00
Pol Henarejos
d637dbec01 Added CMAC and AES generation to README. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-26 18:42:12 +02:00
Pol Henarejos
ebcac9dfdc Upgrade to pico-hsm-tool to use the newer PicoHSM python package. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-23 20:19:53 +01:00
Pol Henarejos
510b148adf Update README with latest AES algorithms. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-23 20:19:15 +01:00
Pol Henarejos
371ae93fcd Added support for AES CCM. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-23 19:20:33 +01:00
Pol Henarejos
f5e875a6b7 Added support for AES CTR. 
Note: the OID used by CTR does not exist.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-23 18:47:32 +01:00
Pol Henarejos
ad3304a384 Added AES XTS tests, with and without IV. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-22 23:29:31 +01:00
Pol Henarejos
4d647ba3c8 Add sanity check if wrong oid is provided. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-22 23:28:55 +01:00
Pol Henarejos
008db87fa7 Fix AES XTS call. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-22 23:28:22 +01:00
Pol Henarejos
1d80b45439 Add tests for AES extended. 
It tests ECB, CBC, OFB, CFB and GCM.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-22 23:25:25 +01:00
Pol Henarejos
17560034ec Fix AES extended encoding call. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-22 23:23:12 +01:00
Pol Henarejos
8b0d85fbd4 Fix PRKD generation for AES. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-22 22:57:15 +01:00
Pol Henarejos
3dcb2e9d70 A PRKD is generated on every key import, regardless it might be replaced later. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-22 22:56:55 +01:00
Pol Henarejos
0f12ff1c48 Added support for PRKD for AES. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-22 22:07:34 +01:00
Pol Henarejos
2a5fe1cc6d Added initialization with self-signed certificate. 
It will allow the initialization with OpenSC tool (sc-hsm-tool --initialize). However, it will not allow the use of card with SCS3, as it needs a PKI with trust chain. In this case, pico-hsm-tool.py shall be used for initialization.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-22 01:04:24 +01:00
Pol Henarejos
5e0f62265d Fix key size of terminal cert. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 21:41:38 +01:00
Pol Henarejos
0990805fb6 More code style. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 20:08:29 +01:00
Pol Henarejos
18bcf532e7 PicoHSM always returns bytes(). 
No need for casting.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 20:07:33 +01:00
Pol Henarejos
9f0316aedd Add chachapoly tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 18:08:00 +01:00
Pol Henarejos
088002863c Before cloning, it should be removed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 18:03:49 +01:00
Pol Henarejos
7876f4b32a pypicohsm is built everytime that test is run, since it could implement more features used by tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 18:02:33 +01:00
Pol Henarejos
a5e3d4e0e5 Added dockerfile for debian. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 18:01:48 +01:00
Pol Henarejos
0c842773d2 Move to debian docker. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 17:58:43 +01:00
Pol Henarejos
0aaf339353 Fix error message. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 17:58:17 +01:00
Pol Henarejos
efba39adc5 Add SW_WRONG_DATA return on bad tag for Chachapoly. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 17:58:01 +01:00
Pol Henarejos
13755cb4d5 Fix buffer overflow when importing AES 512 key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 17:06:06 +01:00
Pol Henarejos
11a30863e8 Using new package pypicohsm. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-20 17:05:46 +01:00
Pol Henarejos
a69d06b2d9 Fixed chachapoly crypt algorithm. 
It missed setkey function. So, no key was used at any moment.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-19 20:24:32 +01:00
Pol Henarejos
1c7bc18161 Added support for AES 512 bit key size. 
AES XTS uses two keys. Therefore, XTS with 2 AES 256 implies 64 bytes key length.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-19 20:22:40 +01:00
Pol Henarejos
86ce01cac2 Added AES XTS via AES_EXT command. 
Note that it requires 32 bytes or 64 bytes key length.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-19 19:42:37 +01:00
Pol Henarejos
9cb60ba420 Added AES ECB (insecure), CBC (with custom IV), OFB, CFB and GCM (with 16-byte tag) via AES_EXT command. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-19 19:34:34 +01:00
Pol Henarejos
99f1620e7d Fixes #22. 
SC-HSM returns the result with a 0x04 prepended. This comes from OpenSC but it is not clear the exact reason. 0x04 is usually for encoding uncompressed EC points but in that case it does not seem to make sense.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-18 18:40:27 +01:00
Pol Henarejos
755570e01a Fix deletion key in test 50. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-18 18:38:05 +01:00
Pol Henarejos
4b264597d6 Fix race condition. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-14 09:58:06 +01:00
Pol Henarejos
67e3d908b3 Fix test key deletion. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-14 09:57:25 +01:00
Pol Henarejos
7ae76354ef Added more tests for key_export. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-13 18:03:21 +01:00
Pol Henarejos
9291c2b4e3 delete_file() supports p1/p2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-13 18:02:47 +01:00