Commit Graph
14 Commits
Author SHA1 Message Date
Sosthène Guédonandsosthene-nitrokey cc3e8564b8 Add reset_app_keys and reset_auth_data syscalls.
- `delete_all_pins` now doesn't affect application keys
- `reset_app_keys`: reset all application keys. Getting them again after calling this will not yield the same key
- `reset_auth_data` combines `delete_all_pins` and `reset_app_keys`

This is a breaking change and applications (trussed-secrets) relying on the old `delete_all_pins` behaviour will need to be fixed.
2023-06-09 16:13:47 +02:00
Sosthène GuédonandMarkus Meissner 6beabd125e Add tests for get_application_key 2023-04-25 16:19:39 +02:00
Sosthène Guédonandsosthene-nitrokey 7d429cd831 Fix location of data
This is a temporary fix until trussed gives us a way to have a per-backend store of data
2023-04-05 15:08:11 +02:00
Sosthène Guédonandsosthene-nitrokey cc33cb666c Improve naming 2023-04-05 10:11:39 +02:00
Sosthène Guédonandsosthene-nitrokey 02eb7df2e1 Add reset_pin_key
This syscall allows resetting a pin. Unlike `set_pin`, it takes a key as parameter.
This key will be returned by future calls to `get_pin_key`.
Unlike `change_pin` this doesn't require knowledge of the current value of the PIN.

The goal is to allow resetting a PIN from another source. For example,
OpenPGP smartcards need to be able to reset the user pin given an admin pin
With this patch, this can be done by using the admin key to wrap the user key.
2023-04-05 10:11:39 +02:00
Sosthène GuédonandRobin Krahl 509a810f5e Add support for missing HW key 2023-03-06 18:56:54 +01:00
Sosthène GuédonandMarkus Meissner 53324f61b1 Bump trussed, drop platform as a trait parameter 2023-03-03 11:13:50 +01:00
Sosthène GuédonandMarkus Meissner 7d3dcfe7b7 Fix clippy warnings 2023-03-03 11:13:50 +01:00
Sosthène GuédonandMarkus Meissner b2c06072e1 Implement Pin change 2023-03-03 11:13:50 +01:00
Sosthène GuédonandMarkus Meissner ba9e0f4b6c Implement fetching the pin keys and add tests 2023-03-03 11:13:50 +01:00
Sosthène GuédonandMarkus Meissner 1f83b95678 Add test for wrapped keys 2023-03-03 11:13:50 +01:00
Sosthène GuédonandMarkus Meissner 79b9e8faed Add key wrapping capabilities for PINs 2023-03-03 11:13:50 +01:00
Sosthène GuédonandMarkus Meissner e6dab308b5 Implement application_key derivition 2023-03-03 11:13:50 +01:00
Robin Krahl 97eeb4c4ff Add Auth extension and backend with PIN handling
This patch implements a basic Auth extension and backend that provides
PIN handling.  Policies still have to be enforced by the client.

Fixes https://github.com/trussed-dev/trussed-auth/issues/1
2023-02-20 10:14:12 +01:00