librekeys/pico-hsm-sf
0
0
Fork 0
mirror of https://github.com/librekeys/pico-hsm-sf.git synced 2026-07-28 08:01:04 -07:00
Code Issues Packages Projects Releases Wiki Activity
1,184 Commits 1 Branch 0 Tags
feec958d105174acc071f6519581fe88e6b0e219
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Pol Henarejos feec958d10 Not used 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-11 20:05:08 +01:00
Pol Henarejos 9720bcfd4b Fix build 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-11 19:59:39 +01:00
Pol Henarejos 4bb81f5b25 Build only necessary boards. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-11 19:56:01 +01:00
Pol Henarejos c9926a71d1 Do not call pytest 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-11 19:48:23 +01:00
Pol Henarejos 10c25b6a3a Update pointer. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-11 19:36:06 +01:00
Pol Henarejos 629f14ab0d Revert "Move EDDSA to another branch." 
This reverts commit a0faf5308e.
 2025-12-11 19:35:27 +01:00
Pol Henarejos 4d6f6e4635 Revert "Move Secure Boot to another branch." 
This reverts commit 8978456524.
 2025-12-11 19:35:20 +01:00
Pol Henarejos 8e35104695 Update memory.flash for tests 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-10 00:20:28 +01:00
Pol Henarejos 82f4b2201c Remove printf 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-09 21:38:15 +01:00
Pol Henarejos 8978456524 Move Secure Boot to another branch. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-09 21:37:52 +01:00
Pol Henarejos a0faf5308e Move EDDSA to another branch. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-09 15:49:20 +01:00
Pol Henarejos f4df9766b6 Fix MSOS/BOS descriptor. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-03 16:34:24 +01:00
Pol Henarejos a1d64d2523 Set anti-rollback version only when the binary is signed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-02 09:55:49 +01:00
Pol Henarejos 82c6badc48 Increase anti-rollback version to 2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 23:42:16 +01:00
Pol Henarejos 2243629d58 Add anti-rollback argument. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 23:42:01 +01:00
Pol Henarejos b5b5ccd53c Upgrade to v6.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 17:21:26 +01:00
Pol Henarejos 0df97c881f Update mbedtls only when necessary. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 17:20:36 +01:00
Pol Henarejos 3c0706f7b2 Fix on AID selection. It should support shorter AID if matches. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-12-01 01:45:43 +01:00
Pol Henarejos 0d1d77b3f6 Upgrade Pico Keys SDK to v8.0 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-30 18:30:57 +01:00
Pol Henarejos 25301f14e1 Upgrade to mbedtls v3.6.5 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-30 18:28:24 +01:00
Pol Henarejos 256e61d813 Update tests to new CA2/DV2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 12:14:36 +01:00
Pol Henarejos 1fe771f074 Fix tests 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 01:13:27 +01:00
Pol Henarejos 0588dde490 Do not use editable mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 00:53:29 +01:00
Pol Henarejos 1d6cc6ff89 Do not install apt pyscard 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 00:21:42 +01:00
Pol Henarejos 8fde25eff2 Fix build, key generation for RP2040 and added reboot bootsel command. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-28 00:13:10 +01:00
Pol Henarejos 634eac50b1 Moved to pypicohsm. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-18 01:05:49 +01:00
Pol Henarejos c4a1cf32e5 Add Pico Version Major 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-18 01:05:40 +01:00
Pol Henarejos de33124d6b Fix test case with newer openssl. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-09 21:38:52 +01:00
Pol Henarejos ae61150f5c Upgrade Dockerfile for fixing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-09 20:00:23 +01:00
Pol Henarejos 605819f0a3 Fix build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-11-09 19:56:18 +01:00
Pol Henarejos c9dc70b095 Add template for pull requests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-27 08:58:12 +01:00
Pol Henarejos 7060e4df7c Add CONTRIBUTING 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-27 08:53:48 +01:00
Pol Henarejos 28c99a21bd Update license models and add ENTERPRISE.md 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-26 20:46:01 +01:00
Pol Henarejos dba614ed36 Relicense project under the GNU Affero General Public License v3 (AGPLv3) 
and add the Enterprise / Commercial licensing option.

Main changes:
- Replace GPLv3 headers with AGPLv3 headers in source files.
- Update LICENSE file to the full AGPLv3 text.
- Add ENTERPRISE.md describing the dual-licensing model:
  * Community Edition: AGPLv3 (strong copyleft, including network use).
  * Enterprise / Commercial Edition: proprietary license for production /
    multi-user / OEM use without the obligation to disclose derivative code.
- Update README with a new "License and Commercial Use" section pointing to
  ENTERPRISE.md and clarifying how companies can obtain a commercial license.

Why this change:
- AGPLv3 ensures that modified versions offered as a service or deployed
  in production environments must provide corresponding source code.
- The Enterprise / Commercial edition provides organizations with an
  alternative proprietary license that allows internal, large-scale, or OEM
  use (bulk provisioning, policy enforcement, inventory / revocation,
  custom attestation, signed builds) without AGPL disclosure obligations.

This commit formally marks the first release that is dual-licensed:
AGPLv3 for the Community Edition and a proprietary commercial license
for Enterprise customers.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-10-26 20:18:45 +01:00
Pol Henarejos 5f5e010a19 Stick with Espressif v5.5 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-12 00:51:24 +02:00
Pol Henarejos 5e4f2286e6 Add autobuild for RP2350. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-07-05 00:52:06 +02:00
Pol Henarejos f0f8e4382a Fix cross build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-06-22 20:33:06 +02:00
Pol Henarejos a0f6abf6a6 Remove the tweak for packets multiple of 64 bytes. It was fixed in the USB stack handling (don't remember where). 
Fixes #95.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-23 20:18:29 +02:00
Pol Henarejos defa18a5ec Add ESPICOHSMCA00002 to scs3 docs. 
Fixes #87.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-18 19:06:23 +02:00
Pol Henarejos bf06081b9c Fix interface descriptor when HID is disabled. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-02 18:28:43 +02:00
Pol Henarejos f1a8d8bc91 Use pyscard 2.2.1 since 2.2.2 has a bug 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-24 19:11:32 +02:00
Pol Henarejos d6f15f8384 Fix eddsa output folder. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-10 19:56:20 +02:00
Pol Henarejos dce4e304bc Upgrade to v5.6 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-10 18:41:31 +02:00
Pol Henarejos f97aaadd17 Update build script to automatize EdDSA builds. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-10 18:41:00 +02:00
Pol Henarejos 611b762a1f Use K1 curve in emulation mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:29:02 +02:00
Pol Henarejos 7c1ef56799 Fix ne parameter when secure message protocol is used. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:27:57 +02:00
Pol Henarejos 4b59bd6481 0x85 and 0x86 should return not found to avoid authentication path. 
Fixes #81 and #84.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:27:21 +02:00
Pol Henarejos 9b1dceb8da Use K1 curve for general authentication. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-07 01:24:22 +02:00
Pol Henarejos c4bc346d98 Sign release builds. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-06 18:37:36 +02:00
Pol Henarejos 3e1b29f72a Add support for slot selection. 
Fixes #83.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-23 20:03:46 +01:00
Pol Henarejos bb27c2324b Only pin to core in ESP32-S3 since it is multicore. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-07 19:35:25 +01:00
Pol Henarejos 8c0a7c6681 Fix commissioned values for LED. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-23 00:53:50 +01:00
Pol Henarejos 2db265c9c8 Merge branch 'development' 2025-02-21 20:35:19 +01:00
Pol Henarejos c58823f9ef Build tests for EDDSA. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 20:22:07 +01:00
Pol Henarejos 21b6a7782a Add EdDSA support as a conditional build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 20:20:43 +01:00
Pol Henarejos 26f9e0dd54 Fix cyw43 build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 18:02:42 +01:00
Pol Henarejos 4053b22f2e Fix cyw43 build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 17:32:42 +01:00
Pol Henarejos ef71ec6a29 Upgrade to v5.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-20 18:10:49 +01:00
Pol Henarejos 72f2e0a58b Upgrade to v5.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-20 18:09:50 +01:00
Pol Henarejos 17ca65a41b Upgrade to v5.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 20:21:57 +01:00
Pol Henarejos 92fe26c1e1 Upgrade to v6.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 19:18:02 +01:00
Pol Henarejos 5c2dce9e52 Take led_driver on build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 19:14:07 +01:00
Pol Henarejos 1cbcfce23f Use all available boards. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 19:13:36 +01:00
Pol Henarejos 1f3cecea8b Use fastest clk for rp2040. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 19:13:18 +01:00
Pol Henarejos ac8d05b9e9 Add support for esp32s2 autobuild. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 12:14:47 +01:00
Pol Henarejos e00e620264 Upgrade to Pico SDK 2.1.1 autobuild. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 12:13:58 +01:00
Pol Henarejos 64d8dafa2b Fix multiple interfaces in older PCSC versions. 
Fixes #74 again.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-12 13:25:43 +01:00
Pol Henarejos 0f3bb8242c Fix multiple interfaces in older PCSC versions. 
Fixes #74 again.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-12 13:25:07 +01:00
Pol Henarejos 747e5fbe86 Added phy_save() and phy_load() to save and load PHY. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-29 17:09:29 +01:00
Pol Henarejos 8eb4669c0f Fixes #74. 
LibCCID allows propietary class for CCID (ALLOW_PROPIETARY_CLASS in LibCCID). Then both interfaces are loaded but since both belong to same device, only the last is opened.

We change maxSlot value even it breaks the ICCD spec to cause a timeout in LibCCID and deactivate WebCCID interface.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-17 20:56:11 +01:00
Pol Henarejos 4c636e0ce5 Upgrade to v5.2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-15 13:07:35 +01:00
Pol Henarejos 297f2e6228 Upgrade to v5.2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-15 12:06:00 +01:00
Pol Henarejos 12a26f8506 Merge branch 'development' 2025-01-15 12:04:47 +01:00
Pol Henarejos 45a96f8742 Add rollback version to 1. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-15 12:04:20 +01:00
Pol Henarejos ca2e04af53 Update initial memory for tests and KDM 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-08 14:47:23 +01:00
Pol Henarejos f0a9d03ca8 Fix storing MKEK in devices with OTP_1 available. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-08 14:38:02 +01:00
Pol Henarejos 2502f99aff Add OTP for emulation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-08 13:26:08 +01:00
Pol Henarejos 71636f4d66 Use partition bounds if available. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-30 21:42:33 +01:00
Pol Henarejos 310bcb8092 Fix bin name. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-27 02:22:20 +01:00
Pol Henarejos 6c5735fc4b Fix bin name. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-27 02:21:58 +01:00
Pol Henarejos 3430655897 Fix merge file. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-27 02:09:16 +01:00
Pol Henarejos 3d9e806409 Fix merge file. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-27 02:09:05 +01:00
Pol Henarejos ff8b343df4 Auto generate an esp32-s3 firmware bin file. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-27 02:08:30 +01:00
Pol Henarejos 0c6b0d295f Auto generate an esp32-s3 firmware bin file. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-27 02:03:08 +01:00
Pol Henarejos c6b03e54ca Fix TX/RX buffers to align them with USB buffers and avoid overflows. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-24 02:06:15 +01:00
Pol Henarejos 991f5fc960 More uint funcs. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 21:41:40 +01:00
Pol Henarejos 6d516b1b78 Use BE/LE functions for packing uint16. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 21:01:12 +01:00
Pol Henarejos 2a3ac550ec Pack file struct. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:40:11 +01:00
Pol Henarejos 73232b6de4 Add LE/BE functions for uint16, 32 and 64. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:39:03 +01:00
Pol Henarejos d56b540324 Add support for displaying memory usage. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:24:10 +01:00
Pol Henarejos 74b635fa3c Increase TinyUSB task stack size. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-23 20:12:15 +01:00
Pol Henarejos 07d9e225d2 Use PHY value for LED GPIO number. Fixes #71. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-16 13:12:11 +01:00
Pol Henarejos 3d960b931a Fix MKEK masking order. Fixes #69. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:26:47 +01:00
Pol Henarejos ff7ef56cda Dev options file must be persistent, since it manipulates MKEK which is in turn persistent. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:25:19 +01:00
Pol Henarejos 320455815f Only allow initialize if secure lock is disabled or has mkek mask. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:24:35 +01:00
Pol Henarejos 859dec7e4a Accept mkek mask only if secure lock is enabled. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-08 01:23:51 +01:00
Pol Henarejos 053ccf4a89 Fix esp32 build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-03 08:47:44 +01:00
Pol Henarejos f88aad1e2c Fixed buffer overflow when unlocking the device. 
Fixes #68.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-12-03 08:36:05 +01:00
Pol Henarejos 866aac8fe3 Add reboot extra command. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-27 21:48:04 +01:00
Pol Henarejos a242a28394 Fix disable secure aut. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-11-27 16:11:18 +01:00