librekeys/pico-hsm-sf
0
0
Fork 0
mirror of https://github.com/librekeys/pico-hsm-sf.git synced 2026-07-28 08:01:04 -07:00
Code Issues Packages Projects Releases Wiki Activity
644 Commits 1 Branch 0 Tags
af16be64a2372abb14915dcf1a9d3324759e0d46
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Pol Henarejos af16be64a2 Adding checks on ec import. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-13 23:30:27 +01:00
Pol Henarejos 68071825c2 Fix EC public key computation when importing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-13 23:24:04 +01:00
Pol Henarejos fbabb81acd Fix asymmetric decrypt for OAEP. It only supports SHA256. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-12 21:53:47 +01:00
Pol Henarejos 8bc4b133ca Adding routine for asymmetric decryption. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-12 21:53:19 +01:00
Pol Henarejos 2ce458dad5 Adding BP curves and RSA 4k to signature test. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-02-12 21:53:01 +01:00
Pol Henarejos 478b186094 Finally it seems to work. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 16:09:57 +01:00
Pol Henarejos ab71b3163b Adding sleep just in case. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 16:07:41 +01:00
Pol Henarejos c4de88e6c6 Moving pointer 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 15:39:31 +01:00
Pol Henarejos 3b0e34f465 More tries... 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 13:23:39 +01:00
Pol Henarejos 9077e78315 More flags to debug 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 13:15:04 +01:00
Pol Henarejos 2f5fcd1f14 Start pcscd with debug flag to get more debug info. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 13:09:17 +01:00
Pol Henarejos 24d430a3ac Updating pointer to include aesni 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 13:04:34 +01:00
Pol Henarejos 307eb63ee5 Init submodules in actions. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 12:59:03 +01:00
Pol Henarejos 07f85dc4b8 Add warning removal 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 12:18:18 +01:00
Pol Henarejos a4026e0ca0 Submodules must be pulled. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 12:09:46 +01:00
Pol Henarejos ebd8dc7bb8 Add apt-utils package. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 12:08:16 +01:00
Pol Henarejos bac15d5472 Removing TTY from docker. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 12:05:03 +01:00
Pol Henarejos 8540fdcf19 Updating pointer. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 12:01:20 +01:00
Pol Henarejos fc8d39882f Add missing build file. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 12:00:57 +01:00
Pol Henarejos ca093eb81e Add emulation and test workflow. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 11:59:26 +01:00
Pol Henarejos 35c42bccb4 List PRKD if exist. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 01:25:25 +01:00
Pol Henarejos 52114b2d85 Added initialization on each keypairgen. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 01:25:05 +01:00
Pol Henarejos 8f593f6357 Added support for build emulation in Apple and Linux. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 01:24:35 +01:00
Pol Henarejos 6f8769ee8d Added scripts for testing in a docker container. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-30 01:24:10 +01:00
Pol Henarejos 1af461c206 Add first battery of tests. 
It contains keypair generation for ECC and RSA, PIN blocking and signature generation and verification.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-17 13:41:10 +01:00
Pol Henarejos 8976dc1f79 Added support for RSA-PKCSv15-SHA224, SHA384 and SHA512. Also added support for RSA-PSS-SHA224, SHA384 and SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-17 00:41:46 +01:00
Pol Henarejos 9d47e62041 Fix signature for secp521r1. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-17 00:05:46 +01:00
Pol Henarejos 0daddfd477 Fix ECDSA-SHA384 and ECDSA-SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-17 00:05:31 +01:00
Pol Henarejos 89d617110f Add asn1_build_prkd_rsa() 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-16 18:54:28 +01:00
Pol Henarejos 17941397e9 Fix exporting large ECC key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-16 18:54:20 +01:00
Pol Henarejos f2aa4aae79 Moving pointer to latest bug fixes. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-14 00:41:23 +01:00
Pol Henarejos e29b3143ed Moving pointer 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-13 18:49:08 +01:00
Pol Henarejos 5419ff74ee Using file_has_data() to check contents. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-13 18:07:50 +01:00
Pol Henarejos 723011078c Using file_has_data() instead of data directly. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:06:31 +01:00
Pol Henarejos fe7c0333ab Some emulation fixes. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:06:11 +01:00
Pol Henarejos c01940b62b Fix accessing way to data. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:05:59 +01:00
Pol Henarejos 7195a8f3ec Fix headers in emulation mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:05:46 +01:00
Pol Henarejos 7764de4e10 Unused headers. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:05:16 +01:00
Pol Henarejos e05c526b4d Fix printf format. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:55 +01:00
Pol Henarejos bc20f98b44 In emulation, return always 1mb of memory. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:44 +01:00
Pol Henarejos 742c3f3e3c RTC command is not available in emulation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:23 +01:00
Pol Henarejos 9793977ffc Fixed double counter increment. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:04:05 +01:00
Pol Henarejos 6c85772fff Added emulated build capability. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-01-12 20:03:42 +01:00
Pol Henarejos 9ff3254a4c Update to latest HSM SDK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-22 22:50:54 +01:00
Pol Henarejos 7d906851dd Updating to newer version of Pico HSM SDK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-20 23:51:49 +01:00
Pol Henarejos 691aa3308c Fix when importing a dkek and it fails. 
Now the dkek state is returned to the previous one.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:11:26 +01:00
Pol Henarejos 6a57e67629 Fix importing dkek twice. 
It is not allowed anymore.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:04:18 +01:00
Pol Henarejos 202c8a4b22 Credentials are not necessary when importing DKEK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:00:32 +01:00
Pol Henarejos f2874ae3ef Fix when ping is provided during the initialization. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 20:00:19 +01:00
Pol Henarejos 9e9cf9b768 Upgrading version to v3.2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 19:00:44 +01:00
Pol Henarejos c95dee84f2 Changing backend service url. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-06 19:00:35 +01:00
Pol Henarejos 65cde9960f Upgrading version to v3.2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-04 17:42:03 +01:00
Pol Henarejos 7ca96178fb Moving HSM SDK pointer to latest release. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-28 18:54:22 +01:00
Pol Henarejos e70461e551 Merge branch 'master' into development 2022-11-15 17:40:29 +01:00
Pol Henarejos 63c85000d0 Added support for kdf. 
It supports HKDF, PBKDF2 and X963, with multiple MD (SHA family), salt/nonces and configurable output size.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-15 00:15:59 +01:00
Pol Henarejos 4113f6a65d Fix parsing PBKDF2 params. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-15 00:14:39 +01:00
Pol Henarejos f98d744076 Add apdu.ne check for large buffers. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 18:04:44 +01:00
Pol Henarejos bb4c293736 Adding subparsers for subcommands. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 16:27:51 +01:00
Pol Henarejos aa8b1e6efe Added support for X963 KDF. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 15:38:16 +01:00
Pol Henarejos 0cb2e8ec2e Added PBES2 key derivation with encryption and decryption support. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 13:07:49 +01:00
Pol Henarejos 0e96753ccb Added support for PBKDF2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 12:01:27 +01:00
Pol Henarejos 2b2df22d75 Added support for configurable HKDF. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-14 10:14:54 +01:00
Pol Henarejos f65167e3c7 Adding support for keypair generation for Curve25519 and Curve448. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-11 17:10:34 +01:00
Pol Henarejos 8fe2677a56 Fix cofactor return with cvc. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-11 17:08:36 +01:00
Pol Henarejos d09a7cf9c8 If self-signature fails, puts all-0. 
When generating a keypair and returns a self-signed CVREQ, the signature might fail for Curve25519 and Curve448. Instead of returning null, it puts zeros in order to return what is expected to return.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-11 17:04:17 +01:00
Pol Henarejos 6bf72e5a59 Added support for HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384 and HMAC-SHA512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-08 17:26:32 +01:00
Pol Henarejos 7c877ebea2 Using file_out parameter. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 22:31:19 +01:00
Pol Henarejos e1983f7bcc Now is possible pipe encrypt & decrypt commands. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 22:16:10 +01:00
Pol Henarejos a5e025a4e5 If no applet is selected, then select it. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 21:37:42 +01:00
Pol Henarejos a7682d2639 Adding Extended Cipher feature. 
With this new subcommand, Pico HSM will support newer cipher algorithms.
ChaCha20-Poly1305 is the first. It will be based on a custom P2 subcommand to support an arbitrary structure with multiple parameters (AAD, IV, etc.)

pico-hsm-tool.py shall be used.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 21:37:11 +01:00
Pol Henarejos 30301c68f1 Linux uses the generic interface. Needs deep testing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-07 13:14:37 +01:00
Pol Henarejos abf980d84e Fixes in windows backend. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-03 18:41:02 +01:00
Pol Henarejos 8718f55df2 Adding secure_key for windows. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-03 18:26:35 +01:00
Pol Henarejos d1a3a24527 Import secure_key only when needed. 
Now, it does not block anymore the entire execution of pico tool.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-03 16:09:42 +01:00
Pol Henarejos f363b77a07 Adding secure_key for macOS. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-03 16:06:06 +01:00
Pol Henarejos 00279da8d5 Adding Secure Lock to lock the device with a random 256 bit key. 
This is an extra layer of security to avoid brute force attacks if PIN is too weak.
At every hard reset (on device plug), the device must be unlocked prior any other command. Once unlocked, the device can be used as usual.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-31 15:09:54 +01:00
Pol Henarejos eda8b53949 Memory cleanup on ECDH. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-31 12:54:44 +01:00
Pol Henarejos cfc0cc8f6e Some optimizations. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-31 00:38:30 +01:00
Pol Henarejos ab61b2a2d5 Fix returning public key of koblitz curve secp_k1. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-31 00:38:21 +01:00
Pol Henarejos f79a6ed30a Do not override Ne. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-30 23:42:12 +01:00
Pol Henarejos 4313722b06 Fix memory free on keygen ecc. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-30 23:15:22 +01:00
Pol Henarejos eec4612a6f Fix when secure message cannot be correctly processed. 
It is discarded.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-30 21:11:06 +01:00
Pol Henarejos b2ac893efc Fix general authentication with AES. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-30 21:09:41 +01:00
Pol Henarejos 3835507e00 Fix displaying error message if pycvc is missing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-29 11:35:54 +02:00
Pol Henarejos 4536589e2c Added error message if package is missing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-10 11:02:07 +02:00
Pol Henarejos 1e39558fbc Typo 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-10 00:39:32 +02:00
Pol Henarejos a089cc279b Adding support for changing SO-PIN. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-10 00:37:56 +02:00
Pol Henarejos 84f646dbad Fix storing SO-PIN session when checking PIN with SO-PIN. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-10 00:37:33 +02:00
Pol Henarejos b9ec473aaa Fix critical bug saving SO-PIN securely. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-10 00:27:46 +02:00
Pol Henarejos b7eb0dff02 Upgrade to Version 3.0. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-09 22:27:11 +02:00
Pol Henarejos 67ea640a14 Fix endianness of patcher (again) 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-09 22:20:41 +02:00
Pol Henarejos f593060007 Moving delete_file() outside. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-09 22:07:21 +02:00
Pol Henarejos 8504eed35c Adding fixes and moving to Mbedtls 3.2.1 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-09 22:07:10 +02:00
Pol Henarejos 8b29b137a8 Small fixes. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-09 22:04:30 +02:00
Pol Henarejos e6767f4c0a Moving pointer. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-09-25 23:25:16 +02:00
Pol Henarejos 6affe64ec5 Adding missing file to pico-hsm-sdk. 2022-08-31 14:19:32 +02:00
Pol Henarejos ab75718927 Using pico_hsm_sdk library instead. 2022-08-31 14:10:04 +02:00
Pol Henarejos 9e1747e539 Upgrading pico-hsm-sdk version to v3.0 2022-08-31 14:09:02 +02:00
Pol Henarejos a7396dc698 Fix the endianness of vid/pid patcher. 2022-08-31 14:08:29 +02:00
Pol Henarejos 67699bd24c Before initializing, we select the applet. 2022-08-30 17:55:56 +02:00