mirrors/pico-hsm
1
0
Fork 0
mirror of https://github.com/polhenarejos/pico-hsm.git synced 2026-01-17 09:28:05 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
1108 commits 2 branches 31 tags 2.8 MiB
Commit graph

60 commits

Author SHA1 Message Date
Pol Henarejos
4c636e0ce5
Upgrade to v5.2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-15 13:07:35 +01:00
Pol Henarejos
d56b540324
Add support for displaying memory usage. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:24:10 +01:00
Pol Henarejos
866aac8fe3
Add reboot extra command. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-27 21:48:04 +01:00
Pol Henarejos
a242a28394
Fix disable secure aut. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-27 16:11:18 +01:00
Pol Henarejos
bb45c9b3a8
Merge branch 'master' into development-eddsa 2024-11-12 20:10:07 +01:00
Pol Henarejos
6f572954d5
If the board is RP2350 or ESP32, the requested certificate must be for secp256k1 key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-12 19:24:10 +01:00
Pol Henarejos
d858a1e1d5
Upgrade to v5.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-09 18:10:56 +01:00
Pol Henarejos
f301b2a1b1
Add --no-dev-cert to do not request a certificate and use a self-signed one. Do not use if attestation is needed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-08 19:13:14 +01:00
Pol Henarejos
f1410bbf04
Only request and upload the device certificate if needed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-08 17:45:48 +01:00
Pol Henarejos
20ef94c301
Upgrade Pico HSM Tool to v2.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:28:49 +01:00
Pol Henarejos
68360978d6
Use BOOTKEY instead of reading json. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:25:22 +01:00
Pol Henarejos
1933498a33
Add optional bootkey index param for secure_boot. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:24:17 +01:00
Pol Henarejos
0ce89ae968
Add support for lock chip on secure_boot. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-28 00:19:55 +01:00
Pol Henarejos
d1ee43baab
Add secure_boot enable. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-27 02:37:16 +02:00
Pol Henarejos
2b77519a3b
Add OTP command to Pico HSM Tool. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-10-15 22:12:34 +02:00
Pol Henarejos
f7451f56ed
Add support for led dimming and max. brightness. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-09-30 09:21:39 +02:00
Pol Henarejos
f450279370
Add support for Edwards curves generation. 
Fixes #51

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-09-03 11:50:46 +02:00
Pol Henarejos
c5714a91ab
Fix AES key generation for 192 and 256. 
Fixes #48.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-08-26 02:39:21 +02:00
Pol Henarejos
dd68554782
Added support for enable/disable Web CCID on the fly. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-06-19 23:29:05 +02:00
Pol Henarejos
07079b6ba1
Add descriptive message. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-05-30 19:19:02 +02:00
Pol Henarejos
623cf10dba
Add phy command to pico-hsm-tool to change VIDPID dynamically. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-04-17 11:51:25 +02:00
Pol Henarejos
2974aa234a
Added required for subparsers. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-13 16:59:15 +01:00
Pol Henarejos
d90b296237
Added keygen command to generate AES, X25519 and X448 keys. 
It replaces x25519/x448 commands and cipher keygen subcommand.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-13 16:57:11 +01:00
Pol Henarejos
e98b26fee5
Flush stderr. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-13 15:34:33 +01:00
Pol Henarejos
2086a68c53
Key id not needed on keygen. 
It also returns the fresh new generated key id.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-13 15:34:21 +01:00
Pol Henarejos
a5ab1cabc5
Add support for AES-ECB, AES-CBC with custom IV, AES-OFB, AES-CFB, AES-GCM, AES-CCM, AES-CTR and AES-XTS. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-11 21:19:31 +01:00
Pol Henarejos
1c7cdc8564
Added support for CMAC. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-11 20:28:13 +01:00
Pol Henarejos
d74b3418bc
Fix typo 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-11 20:13:38 +01:00
Pol Henarejos
3d7f714936
Fix initialization with so-pin. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-05 19:56:11 +02:00
Pol Henarejos
f09654ccf4
Added --silent flag to initialization to avoid prompt display. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-05 19:56:11 +02:00
Pol Henarejos
6af4cc7fec
Fix getting RTC with pico-hsm-tool. 
Closes #25.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-06-20 13:32:30 +02:00
Pol Henarejos
ebcac9dfdc
Upgrade to pico-hsm-tool to use the newer PicoHSM python package. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-23 20:19:53 +01:00
Pol Henarejos
8fd3b4d858
CA cert is also uploaded to perform PKA. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-06 01:01:20 +01:00
Pol Henarejos
b24e109a3c
Fix error message when no card is detected. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-16 22:50:53 +01:00
Pol Henarejos
f2874ae3ef
Fix when ping is provided during the initialization. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:00:19 +01:00
Pol Henarejos
c95dee84f2
Changing backend service url. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 19:00:35 +01:00
Pol Henarejos
63c85000d0
Added support for kdf. 
It supports HKDF, PBKDF2 and X963, with multiple MD (SHA family), salt/nonces and configurable output size.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-15 00:15:59 +01:00
Pol Henarejos
bb4c293736
Adding subparsers for subcommands. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 16:27:51 +01:00
Pol Henarejos
f65167e3c7
Adding support for keypair generation for Curve25519 and Curve448. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-11 17:10:34 +01:00
Pol Henarejos
6bf72e5a59
Added support for HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384 and HMAC-SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-08 17:26:32 +01:00
Pol Henarejos
7c877ebea2
Using file_out parameter. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 22:31:19 +01:00
Pol Henarejos
e1983f7bcc
Now is possible pipe encrypt & decrypt commands. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 22:16:10 +01:00
Pol Henarejos
a5e025a4e5
If no applet is selected, then select it. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 21:37:42 +01:00
Pol Henarejos
a7682d2639
Adding Extended Cipher feature. 
With this new subcommand, Pico HSM will support newer cipher algorithms.
ChaCha20-Poly1305 is the first. It will be based on a custom P2 subcommand to support an arbitrary structure with multiple parameters (AAD, IV, etc.)

pico-hsm-tool.py shall be used.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 21:37:11 +01:00
Pol Henarejos
30301c68f1
Linux uses the generic interface. Needs deep testing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 13:14:37 +01:00
Pol Henarejos
d1a3a24527
Import secure_key only when needed. 
Now, it does not block anymore the entire execution of pico tool.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-03 16:09:42 +01:00
Pol Henarejos
f1058ea611
Merge branch 'master' into small-fixes 2022-11-03 15:48:33 +01:00
Pol Henarejos
00279da8d5
Adding Secure Lock to lock the device with a random 256 bit key. 
This is an extra layer of security to avoid brute force attacks if PIN is too weak.
At every hard reset (on device plug), the device must be unlocked prior any other command. Once unlocked, the device can be used as usual.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-31 15:09:54 +01:00
Reiner Rottmann
1a6cfd17cb Small fix in ModuleNotFoundError handling. 2022-10-30 08:51:57 +01:00
Pol Henarejos
3835507e00
Fix displaying error message if pycvc is missing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-29 11:35:54 +02:00