Commit graph

1223 commits

Author SHA1 Message Date
Pol Henarejos
5297e368d1
Sometimes sc-hsm-tool returns $?=1 despite it succeeds.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-20 13:31:05 +01:00
Pol Henarejos
7c8b39ff82
Update tests
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-20 01:20:46 +01:00
Pol Henarejos
254159d44d
Allow access to EE_DEV.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-20 01:19:53 +01:00
Pol Henarejos
75c56bb2c7
Migrate PIN and MKEK to new system.
This new system is more robust, with derived keys by context and safe in case of flash/ram dumps.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-20 01:19:35 +01:00
Pol Henarejos
1f96fe619b
Fix bounds on update ef.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-18 17:42:25 +01:00
Pol Henarejos
3af776ec26
Removed unused functions in extras.
Some of them are transfered to rescue interfaces. Others, like OTP, are supressed for security.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-18 16:57:49 +01:00
Pol Henarejos
54cba3efdf
Remove session pin.
It is intended for bio features, not supported by Pico HSM.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-18 16:40:08 +01:00
Pol Henarejos
1ced9f6267
Check bounds on update ef.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-18 16:04:20 +01:00
Pol Henarejos
c14a12d9d1
Set ACL for all registers.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-18 16:03:39 +01:00
Pol Henarejos
bbbf28cb42
Fix ACL for static files.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-18 14:26:43 +01:00
Pol Henarejos
db9d6ef2f5
Do not allow reading private objects if not authenticated.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-18 13:21:14 +01:00
Pol Henarejos
983a5b7d10
Fix secp521r1 test with newer OpenSSL versions.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-18 13:19:20 +01:00
Pol Henarejos
839fb431c4
Add strict build.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-09 11:02:47 +01:00
Pol Henarejos
cc0e4e43ca
Fix MLKEM build.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-07 17:54:59 +01:00
Pol Henarejos
7a12177745
Update memory layout.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-07 17:54:14 +01:00
Pol Henarejos
2874353804
Merge pull request #127 from ajkrj/patch-1
Update README.md
2026-03-07 17:24:01 +01:00
Pol Henarejos
64c4afb5d9
Small typos
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-07 17:19:20 +01:00
Pol Henarejos
aae66e7db3
Fix link with mbedtls in openssl backend.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-07 17:16:40 +01:00
Pol Henarejos
2d25ed9939
Fix strict non-prototype declaration warn.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-03-07 17:12:49 +01:00
Pol Henarejos
0ad7e3a610
Fix Secure boot enable.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-02-16 16:03:01 +01:00
Pol Henarejos
25889094e5
[BETA] Add support to Secure Boot in ESP32.
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Emulation and test / build (push) Has been cancelled
Emulation and test / test (pkcs11) (push) Has been cancelled
Emulation and test / test (pytest) (push) Has been cancelled
Emulation and test / test (sc-hsm-pkcs11) (push) Has been cancelled
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-02-07 14:32:31 +01:00
ajkrj
710f4324ad
Update README.md 2026-02-05 20:08:14 +05:30
Pol Henarejos
b78c1485c1
Add support for HIGH/LOW ESP32 LED
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Emulation and test / build (push) Has been cancelled
Emulation and test / test (pkcs11) (push) Has been cancelled
Emulation and test / test (pytest) (push) Has been cancelled
Emulation and test / test (sc-hsm-pkcs11) (push) Has been cancelled
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-02-04 23:45:14 +01:00
Pol Henarejos
7e651c78e3
Upgrade to v6.4
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Emulation and test / build (push) Has been cancelled
Emulation and test / test (pkcs11) (push) Has been cancelled
Emulation and test / test (pytest) (push) Has been cancelled
Emulation and test / test (sc-hsm-pkcs11) (push) Has been cancelled
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-02-01 20:34:41 +01:00
Pol Henarejos
2dec7c0b4e
Fix phy marker write.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-02-01 20:34:24 +01:00
Pol Henarejos
0b18ab5e3d
Upgrade to Pico Keys SDK 8.5
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-01-29 16:12:41 +01:00
Pol Henarejos
868caff665
Use new VID:PID allocated to Pico HSM.
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Emulation and test / build (push) Has been cancelled
Emulation and test / test (pkcs11) (push) Has been cancelled
Emulation and test / test (pytest) (push) Has been cancelled
Emulation and test / test (sc-hsm-pkcs11) (push) Has been cancelled
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-01-22 12:33:42 +01:00
Pol Henarejos
ed980c3093
Use new layout
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-01-22 11:59:46 +01:00
Pol Henarejos
16d4d0d26e
Update README with up-to-date info.
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Emulation and test / build (push) Has been cancelled
Emulation and test / test (pkcs11) (push) Has been cancelled
Emulation and test / test (pytest) (push) Has been cancelled
Emulation and test / test (sc-hsm-pkcs11) (push) Has been cancelled
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-01-06 21:20:13 +01:00
Pol Henarejos
380ff7afa4
Upgrade to v6.2
Some checks are pending
CodeQL / Analyze (push) Waiting to run
Emulation and test / build (push) Waiting to run
Emulation and test / test (pkcs11) (push) Blocked by required conditions
Emulation and test / test (pytest) (push) Blocked by required conditions
Emulation and test / test (sc-hsm-pkcs11) (push) Blocked by required conditions
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-01-05 19:54:07 +01:00
Pol Henarejos
60dafec2e8
Upgrade Pico Keys SDK to v8.2
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-01-05 19:51:51 +01:00
Pol Henarejos
3207fe3451
Disable button press by default since LED may not be properly configured until it is commissioned.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2026-01-05 19:40:50 +01:00
Pol Henarejos
6914be4fea
Fix build.
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Emulation and test / build (push) Has been cancelled
Emulation and test / test (pkcs11) (push) Has been cancelled
Emulation and test / test (pytest) (push) Has been cancelled
Emulation and test / test (sc-hsm-pkcs11) (push) Has been cancelled
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-29 20:36:55 +01:00
Pol Henarejos
7d551f6fea
Blink led three times to acknowledge proper commissioning.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-29 20:17:03 +01:00
Pol Henarejos
d3a7ff425a
Fix pimoroni led
Some checks are pending
CodeQL / Analyze (push) Waiting to run
Emulation and test / build (push) Waiting to run
Emulation and test / test (pkcs11) (push) Blocked by required conditions
Emulation and test / test (pytest) (push) Blocked by required conditions
Emulation and test / test (sc-hsm-pkcs11) (push) Blocked by required conditions
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-27 22:03:47 +01:00
Pol Henarejos
97e7303505
Move pointer
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-26 20:00:59 +01:00
Pol Henarejos
e41f2ba712
Releaser is available up to 6.7.0
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-26 19:54:15 +01:00
Pol Henarejos
710eb70af7
Update reamde & usage.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-13 23:36:43 +01:00
Pol Henarejos
9dbd764c8c
Reset by recopying memory file.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-13 21:12:45 +01:00
Pol Henarejos
feec958d10
Not used
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-11 20:05:08 +01:00
Pol Henarejos
9720bcfd4b
Fix build
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-11 19:59:39 +01:00
Pol Henarejos
4bb81f5b25
Build only necessary boards.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-11 19:56:01 +01:00
Pol Henarejos
c9926a71d1
Do not call pytest
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-11 19:48:23 +01:00
Pol Henarejos
10c25b6a3a
Update pointer.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-11 19:36:06 +01:00
Pol Henarejos
629f14ab0d
Revert "Move EDDSA to another branch."
This reverts commit a0faf5308e.
2025-12-11 19:35:27 +01:00
Pol Henarejos
4d6f6e4635
Revert "Move Secure Boot to another branch."
This reverts commit 8978456524.
2025-12-11 19:35:20 +01:00
Pol Henarejos
8e35104695
Update memory.flash for tests
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-10 00:20:28 +01:00
Pol Henarejos
82f4b2201c
Remove printf
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-09 21:38:15 +01:00
Pol Henarejos
8978456524
Move Secure Boot to another branch.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-09 21:37:52 +01:00
Pol Henarejos
a0faf5308e
Move EDDSA to another branch.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-12-09 15:49:20 +01:00