mirrors/pico-hsm
1
0
Fork 0
mirror of https://github.com/polhenarejos/pico-hsm.git synced 2026-02-07 19:18:23 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
688 commits 2 branches 32 tags 2.9 MiB
Commit graph

321 commits

Author SHA1 Message Date
Pol Henarejos
e624f9ff72
Fix checking if PKU is enabled. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 11:15:07 +01:00
Pol Henarejos
fb4ff9424e
Call reset puk store on init. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 11:14:42 +01:00
Pol Henarejos
63b245b858
Fix initialize with PUK store memory. 
Now it is cleared.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-07 11:14:13 +01:00
Pol Henarejos
3c160f69c0
Add DV cert to PUK store. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-06 00:40:31 +01:00
Pol Henarejos
d2d038f14d
Upgrade to version 3.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-04 14:35:33 +01:00
Pol Henarejos
fa60ed5049
Update code style. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-03-04 14:05:51 +01:00
Pol Henarejos
20c01eb08d
Fix name of x963 function. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-17 23:54:06 +01:00
Pol Henarejos
420e55901c
Fix HMAC computation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-17 22:43:09 +01:00
Pol Henarejos
7b62ca5327
Upgrade to mbedtls v3.3.0 2023-02-16 23:33:13 +01:00
Pol Henarejos
9279773073
Removed printf 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-15 19:46:42 +01:00
Pol Henarejos
cd6e280f4f
Switching to new style. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-15 00:10:35 +01:00
Pol Henarejos
daaa5bf402
Harmonize coding style. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-14 23:13:46 +01:00
Pol Henarejos
43a49d2a14
Return reference not found when deleting a key domain. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-14 18:51:30 +01:00
Pol Henarejos
3b9c2d159b
Fix returning existing key domain. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-14 18:47:43 +01:00
Pol Henarejos
14c7852143
Fix returning shared secret. 
I do not know why a 0x04 was prepended.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-14 11:28:27 +01:00
Pol Henarejos
0685be5f1e
EE_CERTIFICATE is added when importing key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-13 23:53:41 +01:00
Pol Henarejos
af16be64a2
Adding checks on ec import. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-13 23:30:27 +01:00
Pol Henarejos
68071825c2
Fix EC public key computation when importing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-13 23:24:04 +01:00
Pol Henarejos
fbabb81acd
Fix asymmetric decrypt for OAEP. It only supports SHA256. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-12 21:53:47 +01:00
Pol Henarejos
35c42bccb4
List PRKD if exist. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 01:25:25 +01:00
Pol Henarejos
8976dc1f79
Added support for RSA-PKCSv15-SHA224, SHA384 and SHA512. Also added support for RSA-PSS-SHA224, SHA384 and SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-17 00:41:46 +01:00
Pol Henarejos
9d47e62041
Fix signature for secp521r1. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-17 00:05:46 +01:00
Pol Henarejos
0daddfd477
Fix ECDSA-SHA384 and ECDSA-SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-17 00:05:31 +01:00
Pol Henarejos
89d617110f
Add asn1_build_prkd_rsa() 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-16 18:54:28 +01:00
Pol Henarejos
17941397e9
Fix exporting large ECC key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-16 18:54:20 +01:00
Pol Henarejos
5419ff74ee
Using file_has_data() to check contents. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-13 18:07:50 +01:00
Pol Henarejos
723011078c
Using file_has_data() instead of data directly. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:06:31 +01:00
Pol Henarejos
fe7c0333ab
Some emulation fixes. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:06:11 +01:00
Pol Henarejos
c01940b62b
Fix accessing way to data. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:05:59 +01:00
Pol Henarejos
7195a8f3ec
Fix headers in emulation mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:05:46 +01:00
Pol Henarejos
7764de4e10
Unused headers. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:05:16 +01:00
Pol Henarejos
e05c526b4d
Fix printf format. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:55 +01:00
Pol Henarejos
bc20f98b44
In emulation, return always 1mb of memory. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:44 +01:00
Pol Henarejos
742c3f3e3c
RTC command is not available in emulation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:23 +01:00
Pol Henarejos
9793977ffc
Fixed double counter increment. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:05 +01:00
Pol Henarejos
9ff3254a4c
Update to latest HSM SDK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-22 22:50:54 +01:00
Pol Henarejos
691aa3308c
Fix when importing a dkek and it fails. 
Now the dkek state is returned to the previous one.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:11:26 +01:00
Pol Henarejos
6a57e67629
Fix importing dkek twice. 
It is not allowed anymore.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:04:18 +01:00
Pol Henarejos
202c8a4b22
Credentials are not necessary when importing DKEK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:00:32 +01:00
Pol Henarejos
9e9cf9b768
Upgrading version to v3.2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 19:00:44 +01:00
Pol Henarejos
4113f6a65d
Fix parsing PBKDF2 params. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-15 00:14:39 +01:00
Pol Henarejos
f98d744076
Add apdu.ne check for large buffers. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 18:04:44 +01:00
Pol Henarejos
aa8b1e6efe
Added support for X963 KDF. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 15:38:16 +01:00
Pol Henarejos
0cb2e8ec2e
Added PBES2 key derivation with encryption and decryption support. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 13:07:49 +01:00
Pol Henarejos
0e96753ccb
Added support for PBKDF2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 12:01:27 +01:00
Pol Henarejos
2b2df22d75
Added support for configurable HKDF. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 10:14:54 +01:00
Pol Henarejos
8fe2677a56
Fix cofactor return with cvc. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-11 17:08:36 +01:00
Pol Henarejos
d09a7cf9c8
If self-signature fails, puts all-0. 
When generating a keypair and returns a self-signed CVREQ, the signature might fail for Curve25519 and Curve448. Instead of returning null, it puts zeros in order to return what is expected to return.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-11 17:04:17 +01:00
Pol Henarejos
6bf72e5a59
Added support for HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384 and HMAC-SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-08 17:26:32 +01:00
Pol Henarejos
a7682d2639
Adding Extended Cipher feature. 
With this new subcommand, Pico HSM will support newer cipher algorithms.
ChaCha20-Poly1305 is the first. It will be based on a custom P2 subcommand to support an arbitrary structure with multiple parameters (AAD, IV, etc.)

pico-hsm-tool.py shall be used.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 21:37:11 +01:00