pico-hsm

dearsky/pico-hsm

Fork 0

RSS Feed

v4.0 0c2e728c35

Compare
Version 4.0 Stable

polhenarejos released this 2024-06-29 05:03:03 +08:00 | 259 commits to master since this release
This major release includes several enhancements, with the most important: support for ESP32-S3 boards!

New
- It supports ESP32-S3 boards. Apart from Raspberry Pico boards, Pico HSM can also be flashed onto ESP32-S3 boards, which add natively secure boot and flash encryption.
- VID & PID can be changed on-the-fly with pico-hsm-tool.py.
- pico-hsm-tool.py implements a rescue Pico HSM, which is able to communicate with a Pico HSM not recognized by OS due to bad VID & PID values.
- Added support for Web CCID interface.
- Added support for AES-ECB, AES-CBC with custom IV, AES-OFB, AES-CFB, AES-GCM, AES-CCM, AES-CTR and AES-XTS.
- Added support for CMAC.
- Added support for APDU chaining.
Enhancements
- Added support for OpenSC 0.25.1
- Added -DVIDPID=value flag to build with known VID/PID from known vendors.
- Added keygen command to pico-hsm-tool.py for X25519 and X448 key generation.
- Enable/disable Web CCID interface on-the-fly.
- Added support for EF.DIR AID list.
Changes
- MbedTLS 3.6
- Pull request #40 : Enable/disable BOOTSEL button only by clicking the button.
- ASN.1 parsing and structs.
- New DKEK return format.
- Increased memory pages for handling more files at same time.
Bugfixes
- Fix #43 : listing keys if multiple of 12.
- Fix Windows emulation.
- Fix CVC outer signature length.
- Fix LE computation with wrapped APDU (secure channel).
- Fix asymmetric key exchange.
- Fix byte override with chained response APDU.
- Fix SM wrap for large response APDU (secure channel).
- Fix ATR overwrite.
- Fix PRKD on key unwrap.
- Fix Apple emulation.
- Fix chained responses.
- Fix read binary permissions.
- Fix EF.DIR type identification.
What's Changed
- Security fix for issue 39 by @fastchain in https://github.com/polhenarejos/pico-hsm/pull/40
- Fix for multiples of 64 bytes on cmd_list_keys by @al-heisner in https://github.com/polhenarejos/pico-hsm/pull/43
New Contributors
- @fastchain made their first contribution in https://github.com/polhenarejos/pico-hsm/pull/40
- @al-heisner made their first contribution in https://github.com/polhenarejos/pico-hsm/pull/43
Full Changelog: https://github.com/polhenarejos/pico-hsm/compare/v3.6...v4.0
Downloads
- pico_hsm_adafruit_feather_rp2040-4.0.uf2
  514 KiB
  2024-06-29 05:10:16 +08:00
- pico_hsm_adafruit_itsybitsy_rp2040-4.0.uf2
  514 KiB
  2024-06-29 05:10:17 +08:00
- pico_hsm_adafruit_kb2040-4.0.uf2
  514 KiB
  2024-06-29 05:10:18 +08:00
- pico_hsm_adafruit_macropad_rp2040-4.0.uf2
  512 KiB
  2024-06-29 05:10:18 +08:00
- pico_hsm_adafruit_qtpy_rp2040-4.0.uf2
  514 KiB
  2024-06-29 05:10:19 +08:00
- pico_hsm_adafruit_trinkey_qt2040-4.0.uf2
  512 KiB
  2024-06-29 05:10:19 +08:00
- pico_hsm_arduino_nano_rp2040_connect-4.0.uf2
  512 KiB
  2024-06-29 05:10:19 +08:00
- pico_hsm_datanoisetv_rp2040_dsp-4.0.uf2
  512 KiB
  2024-06-29 05:10:20 +08:00
- pico_hsm_eetree_gamekit_rp2040-4.0.uf2
  510 KiB
  2024-06-29 05:10:20 +08:00
- pico_hsm_garatronic_pybstick26_rp2040-4.0.uf2
  512 KiB
  2024-06-29 05:10:21 +08:00
- pico_hsm_melopero_shake_rp2040-4.0.uf2
  514 KiB
  2024-06-29 05:10:21 +08:00
- pico_hsm_nullbits_bit_c_pro-4.0.uf2
  512 KiB
  2024-06-29 05:10:21 +08:00
- pico_hsm_pico_w-4.0.uf2
  992 KiB
  2024-06-29 05:10:22 +08:00
- pico_hsm_pico-4.0.uf2
  515 KiB
  2024-06-29 05:10:22 +08:00
- pico_hsm_pimoroni_badger2040-4.0.uf2
  512 KiB
  2024-06-29 05:10:24 +08:00
- pico_hsm_pimoroni_interstate75-4.0.uf2
  510 KiB
  2024-06-29 05:10:24 +08:00
- pico_hsm_pimoroni_keybow2040-4.0.uf2
  512 KiB
  2024-06-29 05:10:24 +08:00
- pico_hsm_pimoroni_motor2040-4.0.uf2
  514 KiB
  2024-06-29 05:10:25 +08:00
- pico_hsm_pimoroni_pga2040-4.0.uf2
  512 KiB
  2024-06-29 05:10:25 +08:00
- pico_hsm_pimoroni_picolipo_16mb-4.0.uf2
  512 KiB
  2024-06-29 05:10:26 +08:00
- pico_hsm_pimoroni_picolipo_4mb-4.0.uf2
  512 KiB
  2024-06-29 05:10:26 +08:00
- pico_hsm_pimoroni_picosystem-4.0.uf2
  512 KiB
  2024-06-29 05:10:26 +08:00
- pico_hsm_pimoroni_plasma2040-4.0.uf2
  510 KiB
  2024-06-29 05:10:27 +08:00
- pico_hsm_pimoroni_servo2040-4.0.uf2
  512 KiB
  2024-06-29 05:10:27 +08:00
- pico_hsm_pimoroni_tiny2040_2mb-4.0.uf2
  512 KiB
  2024-06-29 05:10:28 +08:00
- pico_hsm_pimoroni_tiny2040-4.0.uf2
  512 KiB
  2024-06-29 05:10:29 +08:00
- pico_hsm_pololu_3pi_2040_robot-4.0.uf2
  510 KiB
  2024-06-29 05:10:29 +08:00
- pico_hsm_seeed_xiao_rp2040-4.0.uf2
  514 KiB
  2024-06-29 05:10:30 +08:00
- pico_hsm_solderparty_rp2040_stamp_carrier-4.0.uf2
  514 KiB
  2024-06-29 05:10:30 +08:00
- pico_hsm_solderparty_rp2040_stamp_round_carrier-4.0.uf2
  514 KiB
  2024-06-29 05:10:30 +08:00
- pico_hsm_solderparty_rp2040_stamp-4.0.uf2
  514 KiB
  2024-06-29 05:10:31 +08:00
- pico_hsm_sparkfun_micromod-4.0.uf2
  512 KiB
  2024-06-29 05:10:31 +08:00
- pico_hsm_sparkfun_promicro-4.0.uf2
  514 KiB
  2024-06-29 05:10:32 +08:00
- pico_hsm_sparkfun_thingplus-4.0.uf2
  514 KiB
  2024-06-29 05:10:32 +08:00
- pico_hsm_vgaboard-4.0.uf2
  515 KiB
  2024-06-29 05:10:33 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-4.0.uf2
  512 KiB
  2024-06-29 05:10:33 +08:00
- pico_hsm_waveshare_rp2040_lcd_1.28-4.0.uf2
  512 KiB
  2024-06-29 05:10:33 +08:00
- pico_hsm_waveshare_rp2040_one-4.0.uf2
  514 KiB
  2024-06-29 05:10:34 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-4.0.uf2
  512 KiB
  2024-06-29 05:10:35 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-4.0.uf2
  512 KiB
  2024-06-29 05:10:34 +08:00
- pico_hsm_waveshare_rp2040_zero-4.0.uf2
  514 KiB
  2024-06-29 05:10:35 +08:00
- pico_hsm_wiznet_w5100s_evb_pico-4.0.uf2
  512 KiB
  2024-06-29 05:10:35 +08:00
- Source Code (ZIP)
- Source Code (TAR.GZ)
v3.6 98e9b72b42

Compare
Version 3.6 Stable

polhenarejos released this 2023-11-07 00:58:32 +08:00 | 347 commits to master since this release
This release includes new features:

New
- 4 new supported boards.
- AES algorithms: ECB, CBC with custom IV, OFB, CFB, XTS, CTR, CCM and GCM.
- mbedTLS 3.5
- BIP and SLIP to support crypto wallets. It supports infinite hierarchical deterministic (HD) key derivation.
- Added support for asymmetric and symmetric (SLIP-0021) deterministic derivations.
- Added support for HD symmetric ciphering.
- Added EdDSA support (see separate branch and releases).
- Added support for Ed25519 and Ed448 (see separate branch and releases).
- Added --silent flag to pico-hsm tool initialization.
Enhancements
- Self-signed CVC during the first initialization.
- Added DV to PUK store.
- CVCA is also uploaded for improve PKA.
- Added support for TokenInfo and StaticTokenInfo files.
- Added PKA tests.
- Added XKEK tests.
- Added key domain tests.
- Added DKEK import in key domain tests.
- If public point is not found, it is automatically calculated.
- Added counters, algorithms and key domain in key generation tests.
- Added key wrapping and unwrapping tests.
- Check bad tag in Chachapoly.
- Added Chachapoly tests.
- Added PRKD for AES too.
- Added AES EXT tests.
- Added AES XTS with and without IV.
- Added BIP and SLIP tests.
- Added HD signature tests.
- Added HD symmetric ciphering tests.
- Added PKCS11 tests.
- Added PKCS11-tool tests.
- Added support for Pico W leds.
Changes
- If no key domain is specified, 0 is used by default.
- If a key does not belong to any key domain, it cannot be wrapped.
- PRKD is generated at every import (it can be replaced afterwards).
- Signatures are allowed using key device.
- Accept arbitrary SO-PIN length on reset retry.
- New format for applet selection.
- User must log in after DKEK import.
- Pico HSM SDK is renamed to Pico Keys SDK.
- If an applet is not selected, it returns NOT_FOUND on every command.
Fixes
- PUK initialization.
- PUK reset.
- PUK enabling.
- PUK status.
- PUK authentication.
- ECDH zeroing.
- Potential crash on deleting file.
- Return error when non-initialized key domain is deleted.
- Before wrapping, check DKEK is configured correctly.
- Check key domain reinitialization.
- Key domain check.
- Wrapping EC points.
- Race condition.
- Fixed #22.
- Chachapoly encryption.
- Overflow when importing AES XTS key.
- Fix key size of terminal CVC.
- PRKD for AES.
- AES EXT encoding.
- AES XTS call.
- Return error on reading binary with bad offset.
- Memory free on error for BIP & SLIP command.
- Deriving nodes with retries.
- AES derivation (HKDF).
- Get RTC with pico-hsm tool.
- Fix G point CVC export.
- Sending binary files when ne=0.
- File chunking.
- Key domain deletion.
- DKEK import when user is not logged.
- Potential freeze.
Downloads
- pico_hsm_adafruit_feather_rp2040-3.6.uf2
  479 KiB
  2023-11-07 01:07:40 +08:00
- pico_hsm_adafruit_itsybitsy_rp2040-3.6.uf2
  479 KiB
  2023-11-07 01:07:41 +08:00
- pico_hsm_adafruit_kb2040-3.6.uf2
  478 KiB
  2023-11-07 01:07:42 +08:00
- pico_hsm_adafruit_macropad_rp2040-3.6.uf2
  476 KiB
  2023-11-07 01:07:43 +08:00
- pico_hsm_adafruit_qtpy_rp2040-3.6.uf2
  478 KiB
  2023-11-07 01:07:43 +08:00
- pico_hsm_adafruit_trinkey_qt2040-3.6.uf2
  476 KiB
  2023-11-07 01:07:44 +08:00
- pico_hsm_arduino_nano_rp2040_connect-3.6.uf2
  477 KiB
  2023-11-07 01:07:44 +08:00
- pico_hsm_datanoisetv_rp2040_dsp-3.6.uf2
  477 KiB
  2023-11-07 01:07:45 +08:00
- pico_hsm_eetree_gamekit_rp2040-3.6.uf2
  475 KiB
  2023-11-07 01:07:45 +08:00
- pico_hsm_garatronic_pybstick26_rp2040-3.6.uf2
  477 KiB
  2023-11-07 01:07:46 +08:00
- pico_hsm_melopero_shake_rp2040-3.6.uf2
  479 KiB
  2023-11-07 01:07:46 +08:00
- pico_hsm_nullbits_bit_c_pro-3.6.uf2
  477 KiB
  2023-11-07 01:07:47 +08:00
- pico_hsm_pico_w-3.6.uf2
  956 KiB
  2023-11-07 01:07:48 +08:00
- pico_hsm_pico-3.6.uf2
  480 KiB
  2023-11-07 01:07:48 +08:00
- pico_hsm_pimoroni_badger2040-3.6.uf2
  477 KiB
  2023-11-07 01:07:49 +08:00
- pico_hsm_pimoroni_interstate75-3.6.uf2
  475 KiB
  2023-11-07 01:07:49 +08:00
- pico_hsm_pimoroni_keybow2040-3.6.uf2
  476 KiB
  2023-11-07 01:07:50 +08:00
- pico_hsm_pimoroni_motor2040-3.6.uf2
  478 KiB
  2023-11-07 01:07:50 +08:00
- pico_hsm_pimoroni_pga2040-3.6.uf2
  476 KiB
  2023-11-07 01:07:50 +08:00
- pico_hsm_pimoroni_picolipo_16mb-3.6.uf2
  477 KiB
  2023-11-07 01:07:51 +08:00
- pico_hsm_pimoroni_picolipo_4mb-3.6.uf2
  477 KiB
  2023-11-07 01:07:51 +08:00
- pico_hsm_pimoroni_picosystem-3.6.uf2
  477 KiB
  2023-11-07 01:07:52 +08:00
- pico_hsm_pimoroni_plasma2040-3.6.uf2
  475 KiB
  2023-11-07 01:07:52 +08:00
- pico_hsm_pimoroni_servo2040-3.6.uf2
  476 KiB
  2023-11-07 01:07:53 +08:00
- pico_hsm_pimoroni_tiny2040_2mb-3.6.uf2
  477 KiB
  2023-11-07 01:07:53 +08:00
- pico_hsm_pimoroni_tiny2040-3.6.uf2
  477 KiB
  2023-11-07 01:07:54 +08:00
- pico_hsm_pololu_3pi_2040_robot-3.6.uf2
  475 KiB
  2023-11-07 01:07:54 +08:00
- pico_hsm_seeed_xiao_rp2040-3.6.uf2
  479 KiB
  2023-11-07 01:07:55 +08:00
- pico_hsm_solderparty_rp2040_stamp_carrier-3.6.uf2
  479 KiB
  2023-11-07 01:07:55 +08:00
- pico_hsm_solderparty_rp2040_stamp_round_carrier-3.6.uf2
  479 KiB
  2023-11-07 01:07:56 +08:00
- pico_hsm_solderparty_rp2040_stamp-3.6.uf2
  478 KiB
  2023-11-07 01:07:56 +08:00
- pico_hsm_sparkfun_micromod-3.6.uf2
  477 KiB
  2023-11-07 01:07:57 +08:00
- pico_hsm_sparkfun_promicro-3.6.uf2
  478 KiB
  2023-11-07 01:07:57 +08:00
- pico_hsm_sparkfun_thingplus-3.6.uf2
  479 KiB
  2023-11-07 01:07:58 +08:00
- pico_hsm_vgaboard-3.6.uf2
  480 KiB
  2023-11-07 01:07:59 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-3.6.uf2
  477 KiB
  2023-11-07 01:07:59 +08:00
- pico_hsm_waveshare_rp2040_lcd_1.28-3.6.uf2
  477 KiB
  2023-11-07 01:08:00 +08:00
- pico_hsm_waveshare_rp2040_one-3.6.uf2
  478 KiB
  2023-11-07 01:08:00 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-3.6.uf2
  477 KiB
  2023-11-07 01:08:01 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-3.6.uf2
  477 KiB
  2023-11-07 01:08:01 +08:00
- pico_hsm_waveshare_rp2040_zero-3.6.uf2
  478 KiB
  2023-11-07 01:08:02 +08:00
- pico_hsm_wiznet_w5100s_evb_pico-3.6.uf2
  477 KiB
  2023-11-07 01:08:02 +08:00
- Source Code (ZIP)
- Source Code (TAR.GZ)
v3.4 ccfe7ca8a8

Compare
Version 3.4 Stable

polhenarejos released this 2023-03-04 21:48:54 +08:00 | 522 commits to master since this release
This is maintenance release.

It includes the following enhancements:

Enhancements
- Improved interface with Windows. It includes CCID GET, SET and RESET USB commands.
- Added automatized test suite for CI/CD which enables fast finding bugs.
- Added support for RSA-PKCSv15-SHA224, RSA-PKCSv15-SHA384 and RSA-PKCSv15-SHA512.
- Added support for RSA-PSS-SHA224, RSA-PSS-SHA384 and RSA-PSS-SHA512.
- Upgraded to MbedTLS v3.3.0.
- Upgraded to Pico SDK v1.5.
and the following fixes:

Fixes
- Fixed HMAC calculation.
- Fixed return code on key domain deletion.
- Fixed return code for existing key domain.
- Fixed shared secret return.
- Fixed EE_CERTIFICATE creation on key import.
- Added safety checks on key import.
- Fixed EC public key calculation on key import.
- Fixed asymmetric decryption with OAEP. It supports SHA-256.
- List PRKD if exist.
- Fixed signature calculation for secp521r1.
- Fixed ECDSA-SHA384 and ECDSA-SHA512.
- Fixed large key export.
- Fixed DKEK import.
- Fixed twice DKEK import.
- Fixed credentials permission on DKEK import.
Downloads
- pico_hsm_adafruit_kb2040-3.2.uf2
  455 KiB
  2023-03-04 22:02:42 +08:00
- pico_hsm_adafruit_kb2040-3.4.uf2
  455 KiB
  2023-11-06 23:12:03 +08:00
- pico_hsm_adafruit_qtpy_rp2040-3.2.uf2
  455 KiB
  2023-03-04 22:02:43 +08:00
- pico_hsm_adafruit_qtpy_rp2040-3.4.uf2
  455 KiB
  2023-11-06 23:12:04 +08:00
- pico_hsm_adafruit_trinkey_qt2040-3.2.uf2
  454 KiB
  2023-03-04 22:02:44 +08:00
- pico_hsm_adafruit_trinkey_qt2040-3.4.uf2
  454 KiB
  2023-11-06 23:12:05 +08:00
- pico_hsm_arduino_nano_rp2040_connect-3.2.uf2
  454 KiB
  2023-03-04 22:02:44 +08:00
- pico_hsm_arduino_nano_rp2040_connect-3.4.uf2
  454 KiB
  2023-11-06 23:12:05 +08:00
- pico_hsm_datanoisetv_rp2040_dsp-3.2.uf2
  454 KiB
  2023-03-04 22:02:45 +08:00
- pico_hsm_datanoisetv_rp2040_dsp-3.4.uf2
  454 KiB
  2023-11-06 23:12:06 +08:00
- pico_hsm_eetree_gamekit_rp2040-3.2.uf2
  452 KiB
  2023-03-04 22:02:45 +08:00
- pico_hsm_eetree_gamekit_rp2040-3.4.uf2
  452 KiB
  2023-11-06 23:12:06 +08:00
- pico_hsm_garatronic_pybstick26_rp2040-3.2.uf2
  454 KiB
  2023-03-04 22:02:46 +08:00
- pico_hsm_garatronic_pybstick26_rp2040-3.4.uf2
  454 KiB
  2023-11-06 23:12:07 +08:00
- pico_hsm_pico_w-3.2.uf2
  454 KiB
  2023-03-04 22:02:46 +08:00
- pico_hsm_pico_w-3.4.uf2
  454 KiB
  2023-11-06 23:12:08 +08:00
- pico_hsm_pico-3.2.uf2
  456 KiB
  2023-03-04 22:02:46 +08:00
- pico_hsm_pico-3.4.uf2
  456 KiB
  2023-11-06 23:12:08 +08:00
- pico_hsm_pimoroni_badger2040-3.2.uf2
  454 KiB
  2023-03-04 22:02:47 +08:00
- pico_hsm_pimoroni_badger2040-3.4.uf2
  454 KiB
  2023-11-06 23:12:09 +08:00
- pico_hsm_pimoroni_interstate75-3.2.uf2
  452 KiB
  2023-03-04 22:02:47 +08:00
- pico_hsm_pimoroni_interstate75-3.4.uf2
  452 KiB
  2023-11-06 23:12:09 +08:00
- pico_hsm_pimoroni_keybow2040-3.2.uf2
  454 KiB
  2023-03-04 22:02:48 +08:00
- pico_hsm_pimoroni_keybow2040-3.4.uf2
  454 KiB
  2023-11-06 23:12:10 +08:00
- pico_hsm_pimoroni_motor2040-3.2.uf2
  455 KiB
  2023-03-04 22:02:48 +08:00
- pico_hsm_pimoroni_motor2040-3.4.uf2
  455 KiB
  2023-11-06 23:12:10 +08:00
- pico_hsm_pimoroni_pga2040-3.2.uf2
  454 KiB
  2023-03-04 22:02:49 +08:00
- pico_hsm_pimoroni_pga2040-3.4.uf2
  454 KiB
  2023-11-06 23:12:11 +08:00
- pico_hsm_pimoroni_picolipo_16mb-3.2.uf2
  454 KiB
  2023-03-04 22:02:50 +08:00
- pico_hsm_pimoroni_picolipo_16mb-3.4.uf2
  454 KiB
  2023-11-06 23:12:12 +08:00
- pico_hsm_pimoroni_picolipo_4mb-3.2.uf2
  454 KiB
  2023-03-04 22:02:49 +08:00
- pico_hsm_pimoroni_picolipo_4mb-3.4.uf2
  454 KiB
  2023-11-06 23:12:11 +08:00
- pico_hsm_pimoroni_picosystem-3.2.uf2
  454 KiB
  2023-03-04 22:02:50 +08:00
- pico_hsm_pimoroni_picosystem-3.4.uf2
  454 KiB
  2023-11-06 23:12:13 +08:00
- pico_hsm_pimoroni_plasma2040-3.2.uf2
  452 KiB
  2023-03-04 22:02:51 +08:00
- pico_hsm_pimoroni_plasma2040-3.4.uf2
  452 KiB
  2023-11-06 23:12:14 +08:00
- pico_hsm_pimoroni_servo2040-3.2.uf2
  454 KiB
  2023-03-04 22:02:51 +08:00
- pico_hsm_pimoroni_servo2040-3.4.uf2
  454 KiB
  2023-11-06 23:12:14 +08:00
- pico_hsm_pimoroni_tiny2040_2mb-3.2.uf2
  454 KiB
  2023-03-04 22:02:52 +08:00
- pico_hsm_pimoroni_tiny2040_2mb-3.4.uf2
  454 KiB
  2023-11-06 23:12:15 +08:00
- pico_hsm_pimoroni_tiny2040-3.2.uf2
  454 KiB
  2023-03-04 22:02:52 +08:00
- pico_hsm_pimoroni_tiny2040-3.4.uf2
  454 KiB
  2023-11-06 23:12:15 +08:00
- pico_hsm_solderparty_rp2040_stamp-3.2.uf2
  455 KiB
  2023-03-04 22:02:52 +08:00
- pico_hsm_solderparty_rp2040_stamp-3.4.uf2
  455 KiB
  2023-11-06 23:12:16 +08:00
- pico_hsm_sparkfun_micromod-3.2.uf2
  454 KiB
  2023-03-04 22:02:53 +08:00
- pico_hsm_sparkfun_micromod-3.4.uf2
  454 KiB
  2023-11-06 23:12:16 +08:00
- pico_hsm_sparkfun_promicro-3.2.uf2
  455 KiB
  2023-03-04 22:02:54 +08:00
- pico_hsm_sparkfun_promicro-3.4.uf2
  455 KiB
  2023-11-06 23:12:17 +08:00
- pico_hsm_sparkfun_thingplus-3.2.uf2
  454 KiB
  2023-03-04 22:02:54 +08:00
- pico_hsm_sparkfun_thingplus-3.4.uf2
  454 KiB
  2023-11-06 23:12:18 +08:00
- pico_hsm_vgaboard-3.2.uf2
  456 KiB
  2023-03-04 22:02:55 +08:00
- pico_hsm_vgaboard-3.4.uf2
  456 KiB
  2023-11-06 23:12:18 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-3.2.uf2
  454 KiB
  2023-03-04 22:02:55 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-3.4.uf2
  454 KiB
  2023-11-06 23:12:19 +08:00
- pico_hsm_waveshare_rp2040_lcd_1.28-3.2.uf2
  454 KiB
  2023-03-04 22:02:56 +08:00
- pico_hsm_waveshare_rp2040_lcd_1.28-3.4.uf2
  454 KiB
  2023-11-06 23:12:19 +08:00
- pico_hsm_waveshare_rp2040_one-3.2.uf2
  455 KiB
  2023-03-04 22:02:56 +08:00
- pico_hsm_waveshare_rp2040_one-3.4.uf2
  455 KiB
  2023-11-06 23:12:20 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-3.2.uf2
  454 KiB
  2023-03-04 22:02:57 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-3.4.uf2
  454 KiB
  2023-11-06 23:12:21 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-3.2.uf2
  454 KiB
  2023-03-04 22:02:56 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-3.4.uf2
  454 KiB
  2023-11-06 23:12:20 +08:00
- pico_hsm_waveshare_rp2040_zero-3.2.uf2
  455 KiB
  2023-03-04 22:02:58 +08:00
- pico_hsm_waveshare_rp2040_zero-3.4.uf2
  455 KiB
  2023-11-06 23:12:21 +08:00
- pico_hsm_wiznet_w5100s_evb_pico-3.2.uf2
  454 KiB
  2023-03-04 22:02:58 +08:00
- pico_hsm_wiznet_w5100s_evb_pico-3.4.uf2
  454 KiB
  2023-11-06 23:12:22 +08:00
- Source Code (ZIP)
- Source Code (TAR.GZ)
v3.2 9e9cf9b768

Compare
Version 3.2 Stable

polhenarejos released this 2022-12-07 02:12:36 +08:00 | 608 commits to master since this release
This release adds the following enhancements:

Enhancements
- Secure lock and unlock to protect the master key from low entropy PIN numbers.
- Added support for ChaChaPoly.
- Added support for Curve25519 and Curve448.
- Added symmetric derivation.
- Added support for HKDF.
- Added support for PBKDF2.
- Added support for X963KDF.
- Added support for HMAC with SHA-1 and SHA-2 families.
- Added support for SO-PIN change.
Bug fixes

And the following bug fixes:
- Bad cofactor return with CVC.
- Bad CVC construction if self-signature fails.
- Bad CVC for Koblitz curves.
- Bug on keypair generation when Ne=0.
- Bug on memory free when keypair generation for ECC.
- Bug when secure message cannot processed.
- Bug with general authentication with AES.
- Bug when multiple card off are sent.
- Bug when no ASN1 tag is found.
- Bug when +2 chunks are chained.
- Bug with secure channel without payload.
What's Changed
- Small fixes by @rrottmann in https://github.com/polhenarejos/pico-hsm/pull/10
Full Changelog: https://github.com/polhenarejos/pico-hsm/compare/v3.0...v3.2
Downloads
- pico_hsm_adafruit_feather_rp2040-3.2.uf2
  452 KiB
  2022-12-06 01:07:54 +08:00
- pico_hsm_adafruit_itsybitsy_rp2040-3.2.uf2
  452 KiB
  2022-12-06 01:07:55 +08:00
- pico_hsm_adafruit_kb2040-3.2.uf2
  451 KiB
  2022-12-06 01:07:55 +08:00
- pico_hsm_adafruit_macropad_rp2040-3.2.uf2
  450 KiB
  2022-12-06 01:07:56 +08:00
- pico_hsm_adafruit_qtpy_rp2040-3.2.uf2
  451 KiB
  2022-12-06 01:07:56 +08:00
- pico_hsm_adafruit_trinkey_qt2040-3.2.uf2
  450 KiB
  2022-12-06 01:07:57 +08:00
- pico_hsm_arduino_nano_rp2040_connect-3.2.uf2
  452 KiB
  2022-12-06 01:07:58 +08:00
- pico_hsm_datanoisetv_rp2040_dsp-3.2.uf2
  452 KiB
  2022-12-06 01:07:58 +08:00
- pico_hsm_eetree_gamekit_rp2040-3.2.uf2
  450 KiB
  2022-12-06 01:07:58 +08:00
- pico_hsm_garatronic_pybstick26_rp2040-3.2.uf2
  452 KiB
  2022-12-06 01:07:59 +08:00
- pico_hsm_melopero_shake_rp2040-3.2.uf2
  452 KiB
  2022-12-06 01:08:00 +08:00
- pico_hsm_pico_w-3.2.uf2
  451 KiB
  2022-12-06 01:08:00 +08:00
- pico_hsm_pico-3.2.uf2
  454 KiB
  2022-12-06 01:08:01 +08:00
- pico_hsm_pimoroni_badger2040-3.2.uf2
  452 KiB
  2022-12-06 01:08:01 +08:00
- pico_hsm_pimoroni_interstate75-3.2.uf2
  450 KiB
  2022-12-06 01:08:02 +08:00
- pico_hsm_pimoroni_keybow2040-3.2.uf2
  451 KiB
  2022-12-06 01:08:02 +08:00
- pico_hsm_pimoroni_motor2040-3.2.uf2
  451 KiB
  2022-12-06 01:08:03 +08:00
- pico_hsm_pimoroni_pga2040-3.2.uf2
  451 KiB
  2022-12-06 01:08:03 +08:00
- pico_hsm_pimoroni_picolipo_16mb-3.2.uf2
  452 KiB
  2022-12-06 01:08:04 +08:00
- pico_hsm_pimoroni_picolipo_4mb-3.2.uf2
  452 KiB
  2022-12-06 01:08:04 +08:00
- pico_hsm_pimoroni_picosystem-3.2.uf2
  452 KiB
  2022-12-06 01:08:05 +08:00
- pico_hsm_pimoroni_plasma2040-3.2.uf2
  450 KiB
  2022-12-06 01:08:05 +08:00
- pico_hsm_pimoroni_servo2040-3.2.uf2
  450 KiB
  2022-12-06 01:08:05 +08:00
- pico_hsm_pimoroni_tiny2040_2mb-3.2.uf2
  452 KiB
  2022-12-06 01:08:06 +08:00
- pico_hsm_pimoroni_tiny2040-3.2.uf2
  452 KiB
  2022-12-06 01:08:06 +08:00
- pico_hsm_seeed_xiao_rp2040-3.2.uf2
  452 KiB
  2022-12-06 01:08:07 +08:00
- pico_hsm_solderparty_rp2040_stamp_carrier-3.2.uf2
  452 KiB
  2022-12-06 01:08:07 +08:00
- pico_hsm_solderparty_rp2040_stamp_round_carrier-3.2.uf2
  452 KiB
  2022-12-06 01:08:08 +08:00
- pico_hsm_solderparty_rp2040_stamp-3.2.uf2
  451 KiB
  2022-12-06 01:08:08 +08:00
- pico_hsm_sparkfun_micromod-3.2.uf2
  452 KiB
  2022-12-06 01:08:09 +08:00
- pico_hsm_sparkfun_promicro-3.2.uf2
  451 KiB
  2022-12-06 01:08:09 +08:00
- pico_hsm_sparkfun_thingplus-3.2.uf2
  452 KiB
  2022-12-06 01:08:10 +08:00
- pico_hsm_vgaboard-3.2.uf2
  454 KiB
  2022-12-06 01:08:10 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-3.2.uf2
  451 KiB
  2022-12-06 01:08:11 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-3.2.uf2
  452 KiB
  2022-12-06 01:08:12 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-3.2.uf2
  452 KiB
  2022-12-06 01:08:11 +08:00
- pico_hsm_waveshare_rp2040_zero-3.2.uf2
  451 KiB
  2022-12-06 01:08:12 +08:00
- pico_hsm_wiznet_w5100s_evb_pico-3.2.uf2
  452 KiB
  2022-12-06 01:08:13 +08:00
- Source Code (ZIP)
- Source Code (TAR.GZ)
v3.0 1e39558fbc

Compare
Version 3.0 Stable

polhenarejos released this 2022-10-10 06:40:00 +08:00 | 650 commits to master since this release
This is a major release.

New tool: pico-hsm-tool.py

It initializes the Pico HSM device and manages multiple options:
- First time of usage, the device must be initialized with this tool to upload the signed device certificate, attestated by an external PKI.
- It performs a report to attestate any key of the device, imported or generated inside.
- It sets and gets the datetime for Real Time Clock operations.
- It allows to modify dynamic options, like enable/disable press-to-confirm button or internal key usage counter for every key.
Internal security refactoring

Previously, the device used the PIN to encrypt safely the stored private and secret keys. However, with the addition of PKA, which does not use PIN, the internal keys were vulnerable, as they were not encrypted with a random passphrase. To solve it, a new method is added.
When the device is initialized with pico-hsm-tool, a unique device certificate is uploaded based on an internal device key (key id 0). This initial key is used to attestate the rest of the keys generated by the user and all of them are encrypted safely with a PIN provided during the initialization.
After this first initialization, the device can also be reinitialized to enable other advanced features, such as PKA.

XKEK

XKEK is a new way to exchange secret and private keys between two Pico HSM devices, in a more sophisticated and secure way. Previously, with DKEK, the keys were exported and encrypted with a secret, shared between all the participations. However, it may break the security is the secret is compromised.

With XKEK, the Pico HSM creates a secure zone (named key domain), where a certificate from a specific Pico HSM device is imported. Then, all keys generated and exported from/to this domain are tied to these Pico HSM devices. These keys cannot leave the domain without creating another domain. Definitively XKEK adds a more robust and secure way to exchange keys.

MKEK

A Master Key Encryption Key (MKEK) is added to the device. This MKEK is generated the first time is initialized and is encrypted with a PIN. MKEK is used to encrypt all generated keys, keeping them safe from unauthorized memory dumps. Though a Pico HSM is an open hardware platform that can be examined by an attacker and dump its flash memory, all keys are encrypted with the MKEK, which is in turn encrypted with PIN.

Other enhancements:
- Upgraded to Pico SDK 1.4
- Added ECDH algorithms for XKEK
- Added key usage counter to link a usage counter for every generated key. It can be used to audit a particular key.
- Using mbedtls_zeroize to zeroing memory zones.
- Device key uses SECP256R1 key.
- Removed 3DES support as it is considered insecure.
- Added a persistent memory zone, which survives after multiple reinitializations.
- Upgraded to Mbedtls 3.2.1
Bug fixes:
- CVC are self-signed (chr=car) by default.
- Fix DKEK status report on multiple boots.
- Fix DKEK deletion.
- Fix wrap/unwrap keys with specific allowed algorithms.
- Fix VID/PID patcher.
- Fix session with SO-PIN.
- Fix changing SO-PIN.
Downloads
- pico_hsm_adafruit_feather_rp2040-3.0.uf2
  433 KiB
  2022-10-10 06:47:01 +08:00
- pico_hsm_adafruit_itsybitsy_rp2040-3.0.uf2
  433 KiB
  2022-10-10 06:47:02 +08:00
- pico_hsm_adafruit_kb2040-3.0.uf2
  432 KiB
  2022-10-10 06:47:03 +08:00
- pico_hsm_adafruit_macropad_rp2040-3.0.uf2
  432 KiB
  2022-10-10 06:47:04 +08:00
- pico_hsm_adafruit_qtpy_rp2040-3.0.uf2
  432 KiB
  2022-10-10 06:47:04 +08:00
- pico_hsm_adafruit_trinkey_qt2040-3.0.uf2
  431 KiB
  2022-10-10 06:47:05 +08:00
- pico_hsm_arduino_nano_rp2040_connect-3.0.uf2
  433 KiB
  2022-10-10 06:47:05 +08:00
- pico_hsm_datanoisetv_rp2040_dsp-3.0.uf2
  433 KiB
  2022-10-10 06:47:06 +08:00
- pico_hsm_eetree_gamekit_rp2040-3.0.uf2
  432 KiB
  2022-10-10 06:47:07 +08:00
- pico_hsm_garatronic_pybstick26_rp2040-3.0.uf2
  433 KiB
  2022-10-10 06:47:08 +08:00
- pico_hsm_melopero_shake_rp2040-3.0.uf2
  433 KiB
  2022-10-10 06:47:09 +08:00
- pico_hsm_pico_w-3.0.uf2
  432 KiB
  2022-10-10 06:47:09 +08:00
- pico_hsm_pico-3.0.uf2
  436 KiB
  2022-10-10 06:47:10 +08:00
- pico_hsm_pimoroni_badger2040-3.0.uf2
  433 KiB
  2022-10-10 06:47:11 +08:00
- pico_hsm_pimoroni_interstate75-3.0.uf2
  432 KiB
  2022-10-10 06:47:12 +08:00
- pico_hsm_pimoroni_keybow2040-3.0.uf2
  432 KiB
  2022-10-10 06:47:12 +08:00
- pico_hsm_pimoroni_motor2040-3.0.uf2
  432 KiB
  2022-10-10 06:47:13 +08:00
- pico_hsm_pimoroni_pga2040-3.0.uf2
  432 KiB
  2022-10-10 06:47:13 +08:00
- pico_hsm_pimoroni_picolipo_16mb-3.0.uf2
  433 KiB
  2022-10-10 06:47:15 +08:00
- pico_hsm_pimoroni_picolipo_4mb-3.0.uf2
  433 KiB
  2022-10-10 06:47:14 +08:00
- pico_hsm_pimoroni_picosystem-3.0.uf2
  433 KiB
  2022-10-10 06:47:15 +08:00
- pico_hsm_pimoroni_plasma2040-3.0.uf2
  432 KiB
  2022-10-10 06:47:16 +08:00
- pico_hsm_pimoroni_servo2040-3.0.uf2
  431 KiB
  2022-10-10 06:47:16 +08:00
- pico_hsm_pimoroni_tiny2040_2mb-3.0.uf2
  433 KiB
  2022-10-10 06:47:17 +08:00
- pico_hsm_pimoroni_tiny2040-3.0.uf2
  433 KiB
  2022-10-10 06:47:18 +08:00
- pico_hsm_seeed_xiao_rp2040-3.0.uf2
  433 KiB
  2022-10-10 06:47:18 +08:00
- pico_hsm_solderparty_rp2040_stamp_carrier-3.0.uf2
  433 KiB
  2022-10-10 06:47:19 +08:00
- pico_hsm_solderparty_rp2040_stamp_round_carrier-3.0.uf2
  433 KiB
  2022-10-10 06:47:19 +08:00
- pico_hsm_solderparty_rp2040_stamp-3.0.uf2
  432 KiB
  2022-10-10 06:47:20 +08:00
- pico_hsm_sparkfun_micromod-3.0.uf2
  433 KiB
  2022-10-10 06:47:20 +08:00
- pico_hsm_sparkfun_promicro-3.0.uf2
  432 KiB
  2022-10-10 06:47:21 +08:00
- pico_hsm_sparkfun_thingplus-3.0.uf2
  433 KiB
  2022-10-10 06:47:21 +08:00
- pico_hsm_vgaboard-3.0.uf2
  436 KiB
  2022-10-10 06:47:22 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-3.0.uf2
  432 KiB
  2022-10-10 06:47:22 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-3.0.uf2
  433 KiB
  2022-10-10 06:47:23 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-3.0.uf2
  433 KiB
  2022-10-10 06:47:23 +08:00
- pico_hsm_waveshare_rp2040_zero-3.0.uf2
  432 KiB
  2022-10-10 06:47:24 +08:00
- pico_hsm_wiznet_w5100s_evb_pico-3.0.uf2
  433 KiB
  2022-10-10 06:47:24 +08:00
- Source Code (ZIP)
- Source Code (TAR.GZ)
v2.6 f122a9ab28

Compare
Version 2.6 Stable

polhenarejos released this 2022-08-09 06:43:29 +08:00 | 751 commits to master since this release
This release introduces key purposes. When creating a new secret/private key, it can be attached to a particular purpose (sign, checksum, decryption, wrap, etc.). If an algorithm is called to a particular key without the respective purpose, an exception will be thrown.

It also contains some enhancements on setting PKA with PIN jointly (extremely recommended).

Enhancements:
- Added key purposes.
- Added support for PKA and PIN jointly.
- Disabled debug, which boosts the speed.
- Upgraded to PICO SDK v1.4 and added new boards.
- Bugfixes.
Full Changelog: https://github.com/polhenarejos/pico-hsm/compare/v2.4...v2.6
Downloads
- pico_hsm_adafruit_feather_rp2040-2.6.uf2
  424 KiB
  2022-08-09 07:13:02 +08:00
- pico_hsm_adafruit_itsybitsy_rp2040-2.6.uf2
  424 KiB
  2022-08-09 07:13:08 +08:00
- pico_hsm_adafruit_kb2040-2.6.uf2
  422 KiB
  2022-08-09 07:13:14 +08:00
- pico_hsm_adafruit_macropad_rp2040-2.6.uf2
  422 KiB
  2022-08-09 07:13:18 +08:00
- pico_hsm_adafruit_qtpy_rp2040-2.6.uf2
  422 KiB
  2022-08-09 07:13:23 +08:00
- pico_hsm_adafruit_trinkey_qt2040-2.6.uf2
  421 KiB
  2022-08-09 07:13:28 +08:00
- pico_hsm_arduino_nano_rp2040_connect-2.6.uf2
  424 KiB
  2022-08-09 07:13:34 +08:00
- pico_hsm_eetree_gamekit_rp2040-2.6.uf2
  422 KiB
  2022-08-09 07:13:39 +08:00
- pico_hsm_garatronic_pybstick26_rp2040-2.6.uf2
  424 KiB
  2022-08-09 07:13:44 +08:00
- pico_hsm_melopero_shake_rp2040-2.6.uf2
  424 KiB
  2022-08-09 07:13:49 +08:00
- pico_hsm_pico_w-2.6.uf2
  422 KiB
  2022-08-09 07:13:56 +08:00
- pico_hsm_pico-2.6.uf2
  426 KiB
  2022-08-09 07:14:02 +08:00
- pico_hsm_pimoroni_badger2040-2.6.uf2
  424 KiB
  2022-08-09 07:14:07 +08:00
- pico_hsm_pimoroni_interstate75-2.6.uf2
  422 KiB
  2022-08-09 07:14:12 +08:00
- pico_hsm_pimoroni_keybow2040-2.6.uf2
  422 KiB
  2022-08-09 07:14:18 +08:00
- pico_hsm_pimoroni_motor2040-2.6.uf2
  422 KiB
  2022-08-09 07:14:23 +08:00
- pico_hsm_pimoroni_pga2040-2.6.uf2
  422 KiB
  2022-08-09 07:14:28 +08:00
- pico_hsm_pimoroni_picolipo_16mb-2.6.uf2
  424 KiB
  2022-08-09 07:14:36 +08:00
- pico_hsm_pimoroni_picolipo_4mb-2.6.uf2
  424 KiB
  2022-08-09 07:14:32 +08:00
- pico_hsm_pimoroni_picosystem-2.6.uf2
  424 KiB
  2022-08-09 07:14:42 +08:00
- pico_hsm_pimoroni_plasma2040-2.6.uf2
  422 KiB
  2022-08-09 07:14:47 +08:00
- pico_hsm_pimoroni_servo2040-2.6.uf2
  421 KiB
  2022-08-09 07:14:52 +08:00
- pico_hsm_pimoroni_tiny2040_2mb-2.6.uf2
  424 KiB
  2022-08-09 07:14:57 +08:00
- pico_hsm_pimoroni_tiny2040-2.6.uf2
  424 KiB
  2022-08-09 07:15:03 +08:00
- pico_hsm_seeed_xiao_rp2040-2.6.uf2
  424 KiB
  2022-08-09 07:15:08 +08:00
- pico_hsm_solderparty_rp2040_stamp_carrier-2.6.uf2
  424 KiB
  2022-08-09 07:15:16 +08:00
- pico_hsm_solderparty_rp2040_stamp_round_carrier-2.6.uf2
  424 KiB
  2022-08-09 07:15:23 +08:00
- pico_hsm_solderparty_rp2040_stamp-2.6.uf2
  422 KiB
  2022-08-09 07:15:32 +08:00
- pico_hsm_sparkfun_micromod-2.6.uf2
  424 KiB
  2022-08-09 07:15:42 +08:00
- pico_hsm_sparkfun_promicro-2.6.uf2
  422 KiB
  2022-08-09 07:15:51 +08:00
- pico_hsm_sparkfun_thingplus-2.6.uf2
  424 KiB
  2022-08-09 07:16:03 +08:00
- pico_hsm_vgaboard-2.6.uf2
  426 KiB
  2022-08-09 07:16:13 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-2.6.uf2
  422 KiB
  2022-08-09 07:16:22 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-2.6.uf2
  424 KiB
  2022-08-09 07:16:41 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-2.6.uf2
  424 KiB
  2022-08-09 07:16:32 +08:00
- pico_hsm_waveshare_rp2040_zero-2.6.uf2
  422 KiB
  2022-08-09 07:16:50 +08:00
- pico_hsm_wiznet_w5100s_evb_pico-2.6.uf2
  424 KiB
  2022-08-09 07:16:59 +08:00
- Source Code (ZIP)
- Source Code (TAR.GZ)
v2.4 871ff69f56

Compare
Version 2.4 Stable

polhenarejos released this 2022-06-14 17:46:44 +08:00 | 765 commits to master since this release
This release contains a major enhancement: Public Key Authentication (PKA). This mechanism replaces the need of using a PIN. Instead, it uses a private/public key pairs from another trusted device (a Pico HSM or Pico OpenPGP).

Enhancements:
- Added Public Key Authentication.
- Cache and storage of 3rd-party public keys.
- Improved interoperability between multiple Pico HSM devices.
- Added PSO command.
- Bugfixes.
Full Changelog: https://github.com/polhenarejos/pico-hsm/compare/v2.2...v2.4
Downloads
- pico_hsm_adafruit_feather_rp2040-2.4.uf2
  420 KiB
  2022-06-14 17:49:35 +08:00
- pico_hsm_adafruit_itsybitsy_rp2040-2.4.uf2
  420 KiB
  2022-06-14 17:49:36 +08:00
- pico_hsm_adafruit_qtpy_rp2040-2.4.uf2
  418 KiB
  2022-06-14 17:49:37 +08:00
- pico_hsm_adafruit_trinkey_qt2040-2.4.uf2
  417 KiB
  2022-06-14 17:49:38 +08:00
- pico_hsm_arduino_nano_rp2040_connect-2.4.uf2
  420 KiB
  2022-06-14 17:49:38 +08:00
- pico_hsm_melopero_shake_rp2040-2.4.uf2
  420 KiB
  2022-06-14 17:49:39 +08:00
- pico_hsm_pico_generic-2.4.uf2
  422 KiB
  2022-06-14 17:49:39 +08:00
- pico_hsm_pimoroni_interstate75-2.4.uf2
  418 KiB
  2022-06-14 17:49:40 +08:00
- pico_hsm_pimoroni_keybow2040-2.4.uf2
  418 KiB
  2022-06-14 17:49:40 +08:00
- pico_hsm_pimoroni_pga2040-2.4.uf2
  418 KiB
  2022-06-14 17:49:41 +08:00
- pico_hsm_pimoroni_picolipo_16mb-2.4.uf2
  420 KiB
  2022-06-14 17:49:42 +08:00
- pico_hsm_pimoroni_picolipo_4mb-2.4.uf2
  420 KiB
  2022-06-14 17:49:42 +08:00
- pico_hsm_pimoroni_picosystem-2.4.uf2
  420 KiB
  2022-06-14 17:49:43 +08:00
- pico_hsm_pimoroni_plasma2040-2.4.uf2
  418 KiB
  2022-06-14 17:49:43 +08:00
- pico_hsm_pimoroni_tiny2040-2.4.uf2
  420 KiB
  2022-06-14 17:49:44 +08:00
- pico_hsm_sparkfun_micromod-2.4.uf2
  420 KiB
  2022-06-14 17:49:44 +08:00
- pico_hsm_sparkfun_promicro-2.4.uf2
  418 KiB
  2022-06-14 17:49:45 +08:00
- pico_hsm_sparkfun_thingplus-2.4.uf2
  420 KiB
  2022-06-14 17:49:46 +08:00
- pico_hsm_vgaboard-2.4.uf2
  422 KiB
  2022-06-14 17:49:46 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-2.4.uf2
  418 KiB
  2022-06-14 17:49:47 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-2.4.uf2
  420 KiB
  2022-06-14 17:49:48 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-2.4.uf2
  420 KiB
  2022-06-14 17:49:47 +08:00
- pico_hsm_waveshare_rp2040_zero-2.4.uf2
  418 KiB
  2022-06-14 17:49:49 +08:00
- Source Code (ZIP)
- Source Code (TAR.GZ)
v2.2 a48dfbbaf4

Compare
Version 2.2 Stable

polhenarejos released this 2022-06-06 20:27:33 +08:00 | 807 commits to master since this release
This version implements a new CCID stack to reduce the original file size by a 30%. It implements only those features that are used by the Pico HSM. In parallel, MbedTLS is also reconfigured to enable only the required algorithms.

Version 2.2 has the following enhancements:
- Key domains: it supports up to 16 different key domains, with their own DKEK and private/secret keys. Key domains can be used with SCS3 tool.
- Key usage counter: when the counter is enabled, the key can be used only n times before being disabled. It allows to limit the use of a key and perform and audit of its usage. The counter is reduced by 1 every time the key is used for signing, decrypting or deriving.
- Optional key usage counter for all keys: when enabled, all generated keys are attached to a counter with the initial value of 2^32-1 (FFFFFFFEh) to track its usage.
- PIN DKEK is encrypted with a random IV.
- DKEK consistency with internal CRC.
- Removed dependency with Gnuk and OpenSC.
- Many fixes.
Full Changelog: https://github.com/polhenarejos/pico-hsm/compare/v2.0...v2.2
Downloads
- pico_hsm_adafruit_feather_rp2040-2.2.uf2
  398 KiB
  2022-06-06 20:33:46 +08:00
- pico_hsm_adafruit_itsybitsy_rp2040-2.2.uf2
  398 KiB
  2022-06-06 20:33:46 +08:00
- pico_hsm_adafruit_qtpy_rp2040-2.2.uf2
  396 KiB
  2022-06-06 20:33:47 +08:00
- pico_hsm_adafruit_trinkey_qt2040-2.2.uf2
  395 KiB
  2022-06-06 20:33:48 +08:00
- pico_hsm_arduino_nano_rp2040_connect-2.2.uf2
  398 KiB
  2022-06-06 20:33:48 +08:00
- pico_hsm_melopero_shake_rp2040-2.2.uf2
  398 KiB
  2022-06-06 20:33:49 +08:00
- pico_hsm_pico_generic-2.2.uf2
  400 KiB
  2022-06-06 20:33:49 +08:00
- pico_hsm_pimoroni_interstate75-2.2.uf2
  396 KiB
  2022-06-06 20:33:50 +08:00
- pico_hsm_pimoroni_keybow2040-2.2.uf2
  396 KiB
  2022-06-06 20:33:51 +08:00
- pico_hsm_pimoroni_pga2040-2.2.uf2
  396 KiB
  2022-06-06 20:33:51 +08:00
- pico_hsm_pimoroni_picolipo_16mb-2.2.uf2
  398 KiB
  2022-06-06 20:33:52 +08:00
- pico_hsm_pimoroni_picolipo_4mb-2.2.uf2
  398 KiB
  2022-06-06 20:33:52 +08:00
- pico_hsm_pimoroni_picosystem-2.2.uf2
  398 KiB
  2022-06-06 20:33:53 +08:00
- pico_hsm_pimoroni_plasma2040-2.2.uf2
  396 KiB
  2022-06-06 20:33:54 +08:00
- pico_hsm_pimoroni_tiny2040-2.2.uf2
  398 KiB
  2022-06-06 20:33:54 +08:00
- pico_hsm_sparkfun_micromod-2.2.uf2
  398 KiB
  2022-06-06 20:33:55 +08:00
- pico_hsm_sparkfun_promicro-2.2.uf2
  396 KiB
  2022-06-06 20:33:55 +08:00
- pico_hsm_sparkfun_thingplus-2.2.uf2
  398 KiB
  2022-06-06 20:33:56 +08:00
- pico_hsm_vgaboard-2.2.uf2
  400 KiB
  2022-06-06 20:33:57 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-2.2.uf2
  396 KiB
  2022-06-06 20:33:57 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-2.2.uf2
  398 KiB
  2022-06-06 20:33:58 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-2.2.uf2
  398 KiB
  2022-06-06 20:33:58 +08:00
- pico_hsm_waveshare_rp2040_zero-2.2.uf2
  396 KiB
  2022-06-06 20:33:59 +08:00
- Source Code (ZIP)
- Source Code (TAR.GZ)
v2.0 86298f3421

Compare
Version 2.0 Stable

polhenarejos released this 2022-04-20 01:25:02 +08:00 | 872 commits to master since this release
This version incorporates a major refactor of the core functionalities, which are migrated into another repo.
Version 2.0 has the following capabilities:
- Added Secure Messaging. It stablishes a secure channel, where the information and payloads are ciphered and authenticated to avoid attacks.
- Added Session PIN.
- Introducing the PKI for Pico HSM. It generates CVCerts and burns them onto the firmware. The process is a bit more complex, but it consists in generating a private key, making a CSR and sending to a remote PKI, which returns a signed CVCert. All private key, CVCert and CA CVCert are burned onto the firmware. All are used to stablishing the secure channel for Secure Messaging.
Full Changelog: https://github.com/polhenarejos/pico-hsm/compare/v1.12...v2.0
Downloads
- pico_hsm_adafruit_feather_rp2040-2.0.uf2
  555 KiB
  2022-04-20 01:33:24 +08:00
- pico_hsm_adafruit_itsybitsy_rp2040-2.0.uf2
  555 KiB
  2022-04-20 01:33:25 +08:00
- pico_hsm_adafruit_qtpy_rp2040-2.0.uf2
  554 KiB
  2022-04-20 01:33:26 +08:00
- pico_hsm_adafruit_trinkey_qt2040-2.0.uf2
  553 KiB
  2022-04-20 01:33:26 +08:00
- pico_hsm_arduino_nano_rp2040_connect-2.0.uf2
  555 KiB
  2022-04-20 01:33:27 +08:00
- pico_hsm_melopero_shake_rp2040-2.0.uf2
  555 KiB
  2022-04-20 01:33:27 +08:00
- pico_hsm_pico_generic-2.0.uf2
  558 KiB
  2022-04-20 01:33:28 +08:00
- pico_hsm_pimoroni_interstate75-2.0.uf2
  554 KiB
  2022-04-20 01:33:28 +08:00
- pico_hsm_pimoroni_keybow2040-2.0.uf2
  554 KiB
  2022-04-20 01:33:29 +08:00
- pico_hsm_pimoroni_pga2040-2.0.uf2
  554 KiB
  2022-04-20 01:33:29 +08:00
- pico_hsm_pimoroni_picolipo_16mb-2.0.uf2
  555 KiB
  2022-04-20 01:33:30 +08:00
- pico_hsm_pimoroni_picolipo_4mb-2.0.uf2
  555 KiB
  2022-04-20 01:33:30 +08:00
- pico_hsm_pimoroni_picosystem-2.0.uf2
  555 KiB
  2022-04-20 01:33:31 +08:00
- pico_hsm_pimoroni_plasma2040-2.0.uf2
  554 KiB
  2022-04-20 01:33:31 +08:00
- pico_hsm_pimoroni_tiny2040-2.0.uf2
  555 KiB
  2022-04-20 01:33:32 +08:00
- pico_hsm_pybstick26_rp2040-2.0.uf2
  555 KiB
  2022-04-20 01:33:32 +08:00
- pico_hsm_sparkfun_micromod-2.0.uf2
  555 KiB
  2022-04-20 01:33:33 +08:00
- pico_hsm_sparkfun_promicro-2.0.uf2
  554 KiB
  2022-04-20 01:33:33 +08:00
- pico_hsm_sparkfun_thingplus-2.0.uf2
  555 KiB
  2022-04-20 01:33:34 +08:00
- pico_hsm_vgaboard-2.0.uf2
  558 KiB
  2022-04-20 01:33:34 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-2.0.uf2
  554 KiB
  2022-04-20 01:33:35 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-2.0.uf2
  555 KiB
  2022-04-20 01:33:36 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-2.0.uf2
  555 KiB
  2022-04-20 01:33:35 +08:00
- pico_hsm_waveshare_rp2040_zero-2.0.uf2
  554 KiB
  2022-04-20 01:33:36 +08:00
- Source Code (ZIP)
- Source Code (TAR.GZ)
v1.12 239e01c3f8

Compare
Version 1.12 Stable

polhenarejos released this 2022-04-08 00:34:14 +08:00 | 918 commits to master since this release
This version adds the following features:
- Capability to store and retrieve arbitrary binary files. It can save and recover any data file up to 4 kB of size.
- Real Time Clock to set and get current datetime.
- Time counter to count seconds from boot.
- Press-to-confirm feature to require user confirmation when loading a private/secret key to perform signature, decrypt, etc. With it, we can ensure that no malicious application is able to sign documents silently.
- Capability to enable or disable press-to-confirm feature dynamically without reinitializing the device.
Full Changelog: https://github.com/polhenarejos/pico-hsm/compare/v1.10...v1.12
Downloads
- pico_hsm_adafruit_feather_rp2040-1.12.uf2
  548 KiB
  2022-04-11 18:21:27 +08:00
- pico_hsm_adafruit_itsybitsy_rp2040-1.12.uf2
  548 KiB
  2022-04-11 18:21:28 +08:00
- pico_hsm_adafruit_qtpy_rp2040-1.12.uf2
  548 KiB
  2022-04-11 18:21:29 +08:00
- pico_hsm_adafruit_trinkey_qt2040-1.12.uf2
  546 KiB
  2022-04-11 18:21:30 +08:00
- pico_hsm_arduino_nano_rp2040_connect-1.12.uf2
  548 KiB
  2022-04-11 18:21:30 +08:00
- pico_hsm_melopero_shake_rp2040-1.12.uf2
  548 KiB
  2022-04-11 18:21:31 +08:00
- pico_hsm_pico_generic-1.12.uf2
  551 KiB
  2022-04-11 18:21:31 +08:00
- pico_hsm_pimoroni_interstate75-1.12.uf2
  547 KiB
  2022-04-11 18:21:32 +08:00
- pico_hsm_pimoroni_keybow2040-1.12.uf2
  548 KiB
  2022-04-11 18:21:32 +08:00
- pico_hsm_pimoroni_pga2040-1.12.uf2
  548 KiB
  2022-04-11 18:21:33 +08:00
- pico_hsm_pimoroni_picolipo_16mb-1.12.uf2
  548 KiB
  2022-04-11 18:21:34 +08:00
- pico_hsm_pimoroni_picolipo_4mb-1.12.uf2
  548 KiB
  2022-04-11 18:21:33 +08:00
- pico_hsm_pimoroni_picosystem-1.12.uf2
  548 KiB
  2022-04-11 18:21:34 +08:00
- pico_hsm_pimoroni_plasma2040-1.12.uf2
  547 KiB
  2022-04-11 18:21:35 +08:00
- pico_hsm_pimoroni_tiny2040-1.12.uf2
  548 KiB
  2022-04-11 18:21:35 +08:00
- pico_hsm_pybstick26_rp2040-1.12.uf2
  548 KiB
  2022-04-11 18:21:36 +08:00
- pico_hsm_sparkfun_micromod-1.12.uf2
  548 KiB
  2022-04-11 18:21:36 +08:00
- pico_hsm_sparkfun_promicro-1.12.uf2
  548 KiB
  2022-04-11 18:21:37 +08:00
- pico_hsm_sparkfun_thingplus-1.12.uf2
  548 KiB
  2022-04-11 18:21:37 +08:00
- pico_hsm_vgaboard-1.12.uf2
  551 KiB
  2022-04-11 18:21:38 +08:00
- pico_hsm_waveshare_rp2040_lcd_0.96-1.12.uf2
  548 KiB
  2022-04-11 18:21:39 +08:00
- pico_hsm_waveshare_rp2040_plus_16mb-1.12.uf2
  548 KiB
  2022-04-11 18:21:39 +08:00
- pico_hsm_waveshare_rp2040_plus_4mb-1.12.uf2
  548 KiB
  2022-04-11 18:21:39 +08:00
- pico_hsm_waveshare_rp2040_zero-1.12.uf2
  548 KiB
  2022-04-11 18:21:40 +08:00
- Source Code (ZIP)
- Source Code (TAR.GZ)

1 2 3

26 Releases 32 Tags

Version 4.0 Stable

New

Enhancements

Changes

Bugfixes

What's Changed

New Contributors

Version 3.6 Stable

New

Enhancements

Changes

Fixes

Version 3.4 Stable

Enhancements

Fixes

Version 3.2 Stable

Enhancements

Bug fixes

What's Changed

Version 3.0 Stable

New tool: `pico-hsm-tool.py`

Internal security refactoring

XKEK

MKEK

Version 2.6 Stable

Version 2.4 Stable

Version 2.2 Stable

Version 2.0 Stable

Version 1.12 Stable

26 Releases 32 Tags

Version 4.0 Stable

New

Enhancements

Changes

Bugfixes

What's Changed

New Contributors

Version 3.6 Stable

New

Enhancements

Changes

Fixes

Version 3.4 Stable

Enhancements

Fixes

Version 3.2 Stable

Enhancements

Bug fixes

What's Changed

Version 3.0 Stable

New tool: pico-hsm-tool.py

Internal security refactoring

XKEK

MKEK

Version 2.6 Stable

Version 2.4 Stable

Version 2.2 Stable

Version 2.0 Stable

Version 1.12 Stable

New tool: `pico-hsm-tool.py`