mirrors/pico-hsm
1
0
Fork 0
mirror of https://github.com/polhenarejos/pico-hsm.git synced 2026-01-17 01:18:06 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
1175 commits 2 branches 31 tags 2.8 MiB
Commit graph

1175 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pol Henarejos
8978456524
Move Secure Boot to another branch. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-09 21:37:52 +01:00
Pol Henarejos
a0faf5308e
Move EDDSA to another branch. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-09 15:49:20 +01:00
Pol Henarejos
f4df9766b6
Fix MSOS/BOS descriptor. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-03 16:34:24 +01:00
Pol Henarejos
a1d64d2523
Set anti-rollback version only when the binary is signed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-02 09:55:49 +01:00
Pol Henarejos
82c6badc48
Increase anti-rollback version to 2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 23:42:16 +01:00
Pol Henarejos
2243629d58
Add anti-rollback argument. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 23:42:01 +01:00
Pol Henarejos
b5b5ccd53c
Upgrade to v6.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 17:21:26 +01:00
Pol Henarejos
0df97c881f
Update mbedtls only when necessary. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 17:20:36 +01:00
Pol Henarejos
3c0706f7b2
Fix on AID selection. It should support shorter AID if matches. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 01:45:43 +01:00
Pol Henarejos
0d1d77b3f6
Upgrade Pico Keys SDK to v8.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-30 18:30:57 +01:00
Pol Henarejos
25301f14e1
Upgrade to mbedtls v3.6.5 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-30 18:28:24 +01:00
Pol Henarejos
256e61d813
Update tests to new CA2/DV2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 12:14:36 +01:00
Pol Henarejos
1fe771f074
Fix tests 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 01:13:27 +01:00
Pol Henarejos
0588dde490
Do not use editable mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 00:53:29 +01:00
Pol Henarejos
1d6cc6ff89
Do not install apt pyscard 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 00:21:42 +01:00
Pol Henarejos
8fde25eff2
Fix build, key generation for RP2040 and added reboot bootsel command. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 00:13:10 +01:00
Pol Henarejos
634eac50b1
Moved to pypicohsm. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-18 01:05:49 +01:00
Pol Henarejos
c4a1cf32e5
Add Pico Version Major 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-18 01:05:40 +01:00
Pol Henarejos
966b12ffad
Merge pull request #108 from MageDelfador/esp32pr 
ESP32 Optimization
 2025-11-10 00:04:25 +01:00
Pol Henarejos
de33124d6b
Fix test case with newer openssl. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-09 21:38:52 +01:00
Pol Henarejos
ae61150f5c
Upgrade Dockerfile for fixing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-09 20:00:23 +01:00
Pol Henarejos
605819f0a3
Fix build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-09 19:56:18 +01:00
Pol Henarejos
c9dc70b095
Add template for pull requests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-27 08:58:12 +01:00
Pol Henarejos
7060e4df7c
Add CONTRIBUTING 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-27 08:53:48 +01:00
Pol Henarejos
28c99a21bd
Update license models and add ENTERPRISE.md 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-26 20:46:01 +01:00
Pol Henarejos
dba614ed36
Relicense project under the GNU Affero General Public License v3 (AGPLv3) 
and add the Enterprise / Commercial licensing option.

Main changes:
- Replace GPLv3 headers with AGPLv3 headers in source files.
- Update LICENSE file to the full AGPLv3 text.
- Add ENTERPRISE.md describing the dual-licensing model:
  * Community Edition: AGPLv3 (strong copyleft, including network use).
  * Enterprise / Commercial Edition: proprietary license for production /
    multi-user / OEM use without the obligation to disclose derivative code.
- Update README with a new "License and Commercial Use" section pointing to
  ENTERPRISE.md and clarifying how companies can obtain a commercial license.

Why this change:
- AGPLv3 ensures that modified versions offered as a service or deployed
  in production environments must provide corresponding source code.
- The Enterprise / Commercial edition provides organizations with an
  alternative proprietary license that allows internal, large-scale, or OEM
  use (bulk provisioning, policy enforcement, inventory / revocation,
  custom attestation, signed builds) without AGPL disclosure obligations.

This commit formally marks the first release that is dual-licensed:
AGPLv3 for the Community Edition and a proprietary commercial license
for Enterprise customers.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-26 20:18:45 +01:00
MageDelfador
2471c747d6 Update sdkconfig.defaults 2025-10-15 23:52:34 +08:00
Pol Henarejos
c7006b6319
Merge pull request #102 from eliasnaur/push-upprymyooxrs
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Details
Emulation and test / build (push) Has been cancelled
Details
Emulation and test / test (pkcs11) (push) Has been cancelled
Details
Emulation and test / test (pytest) (push) Has been cancelled
Details
Emulation and test / test (sc-hsm-pkcs11) (push) Has been cancelled
Details 
implement bip32 operations in pico-hsm-tool
 2025-08-12 12:29:23 +02:00
Pol Henarejos
5f5e010a19
Stick with Espressif v5.5
Some checks failed
CodeQL / Analyze (push) Has been cancelled
Details
Emulation and test / build (push) Has been cancelled
Details
Emulation and test / test (pkcs11) (push) Has been cancelled
Details
Emulation and test / test (pytest) (push) Has been cancelled
Details
Emulation and test / test (sc-hsm-pkcs11) (push) Has been cancelled
Details 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-12 00:51:24 +02:00
Elias Naur
ad5a503d36 implement bip32 operations in pico-hsm-tool 2025-08-08 16:32:01 +02:00
Pol Henarejos
5e4f2286e6
Add autobuild for RP2350. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-07-05 00:52:06 +02:00
Pol Henarejos
f0f8e4382a
Fix cross build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-06-22 20:33:06 +02:00
Pol Henarejos
a0f6abf6a6
Remove the tweak for packets multiple of 64 bytes. It was fixed in the USB stack handling (don't remember where). 
Fixes #95.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-23 20:18:29 +02:00
Pol Henarejos
cbf9bb9281
Update scs3.md 2025-05-19 09:16:43 +02:00
Pol Henarejos
bd0796b217
Update scs3.md 2025-05-18 19:34:48 +02:00
Pol Henarejos
defa18a5ec
Add ESPICOHSMCA00002 to scs3 docs. 
Fixes #87.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-18 19:06:23 +02:00
Pol Henarejos
bf06081b9c
Fix interface descriptor when HID is disabled. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-02 18:28:43 +02:00
Pol Henarejos
f1a8d8bc91
Use pyscard 2.2.1 since 2.2.2 has a bug 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-24 19:11:32 +02:00
Pol Henarejos
d6f15f8384
Fix eddsa output folder. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-10 19:56:20 +02:00
Pol Henarejos
dce4e304bc
Upgrade to v5.6 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-10 18:41:31 +02:00
Pol Henarejos
f97aaadd17
Update build script to automatize EdDSA builds. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-10 18:41:00 +02:00
Pol Henarejos
611b762a1f
Use K1 curve in emulation mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:29:02 +02:00
Pol Henarejos
7c1ef56799
Fix ne parameter when secure message protocol is used. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:27:57 +02:00
Pol Henarejos
4b59bd6481
0x85 and 0x86 should return not found to avoid authentication path. 
Fixes #81 and #84.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:27:21 +02:00
Pol Henarejos
9b1dceb8da
Use K1 curve for general authentication. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:24:22 +02:00
Pol Henarejos
c4bc346d98
Sign release builds. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-06 18:37:36 +02:00
Pol Henarejos
3e1b29f72a
Add support for slot selection. 
Fixes #83.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-23 20:03:46 +01:00
Pol Henarejos
bb27c2324b
Only pin to core in ESP32-S3 since it is multicore. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-07 19:35:25 +01:00
Pol Henarejos
8c0a7c6681
Fix commissioned values for LED. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-23 00:53:50 +01:00
Pol Henarejos
2db265c9c8
Merge branch 'development' 2025-02-21 20:35:19 +01:00