sw/libhal - Cryptech libhal: crypto software, HSM management, RPC

Age	Commit message (Collapse)	Author
2016-05-10	Merge branch 'master' into rpc	Rob Austein

2016-05-10	Update ECDSA description in README.md -- the point multiplication	Rob Austein
	algorithm hasn't been a Montgomery Ladder for a long time, if indeed it ever was.
2016-04-24	Break the RPC dispatch out of hal_rpc_server_main, for the benefit of the ↵	Paul Selkirk
	threaded server.
2016-04-11	Fix includes to bring hal_io_fmc.c in line with hal_io_eim.c.	Paul Selkirk

2016-03-29	Client includes rsa, ecdsa, asn1.	Paul Selkirk
	Server includes rpc_api because rpc_pkey.c calls hal_rpc_hash_* Remote client uses software modexp. Mixed client uses software hash. Add convenience targets for client, server, etc.
2016-03-29	Client-side rsa and ecdsa need to call remote get_random.	Paul Selkirk

2016-03-29	Enable 'mixed' mode, with client-side hashing.	Paul Selkirk

2016-03-29	Add xdr-specific error codes; update caller's length in hal_xdr_decode_buffer().	Paul Selkirk

2016-03-29	Add rpc error codes.	Paul Selkirk

2016-03-29	Remove unneeded hal_internal.h	Paul Selkirk

2016-03-29	Add test-rpc_get_random	Paul Selkirk

2016-03-21	Merge branch 'master' into rpc	Paul Selkirk

2016-03-21	stupid fixes	Paul Selkirk

2016-03-21	Don't build position-independent code for stm32.	Paul Selkirk

2016-03-21	Skip tests we know are going to fail.	Paul Selkirk

2016-03-16	Added serial RPC transport and lots more...	Paul Selkirk
	Added RPC function to get server version number. Substantially reworked GNUMakefile with conditionals. Renamed rpc_() and xdr_() to hal_*() for consistency. Moved hal_io_fmc.c from stm32 repo.
2016-03-12	Merge branch 'master' into rpc	Rob Austein

2016-03-12	Disable ECDSA static-test-vectors hack, fix call to hal_get_random()	Rob Austein
	which was using the old (pre-hal_core_t) calling sequence.
2016-03-12	Test RPC key generation API.	Rob Austein

2016-03-12	Doh, helps to specify the curve.	Rob Austein

2016-03-12	Basic RPC ECDSA tests.	Rob Austein

2016-03-11	First round of debugging based on RPC pkey tests: mostly ASN.1	Rob Austein
	silliness, with a bit of PKCS #1.5 padding silliness for desert.
2016-03-11	First step towards RPC PKEY tests. Currently RSA-only, test-vector	Rob Austein
	only, requires AES core (for key wrapping).
2016-03-09	Tweak handling of byte swapping in software hash cores to get rid of	Rob Austein
	some unnecessary data copying.
2016-03-09	Optional (compile time conditional) software hash cores. At the	Rob Austein
	moment this is all-or-nothing, but could easily be tweaked to allow compile-time selection of particular hashes.
2016-03-03	Initial implementations of ks_get_kek(). Untested, and none of these	Rob Austein
	are secure (the one in ks_flash.c is a stub, and the others are for cases where we have no secure hardware in which to store the KEK). These are primarily for testing, since in the long run the entire software implementation of AES-keywrap will be replaced by Verilog which never lets software see the unwrapped key. Or so says current theory. For the moment, we just need something that will let us test the rest of the RPC and keystore mechanisms.
2016-02-25	RPC over loopback socket, just to work out the mechanics for serialization ↵	Paul Selkirk
	and dispatch.
2015-12-24	Fix dispatch vector names.	Rob Austein

2015-12-24	hal_rpc_logout_all(), hal_rpc_is_logged_in().	Rob Austein

2015-12-24	More work on PIN/login/logout code. Access control still missing,	Rob Austein
	committing now so Paul has a chance to look at the current RPC API.
2015-12-23	RPC interface to TRNG and (incomplete) PIN code.	Rob Austein

2015-12-23	Software modexp() implementation didn't compile due to missing pro	Rob Austein
	forma hal_core_t* argument.
2015-12-23	First round of fixes for new ASN.1 and test code.	Rob Austein

2015-12-22	Reorder tests to put hideously slow RSA tests at the end.	Rob Austein

2015-12-22	Test code for ASN.1 public key functions.	Rob Austein

2015-12-22	Add ASN.1 support for public keys (X.509 SubjectPublicKeyInfo format).	Rob Austein

2015-12-21	Fix names of private key DER functions.	Rob Austein

2015-12-21	Pull .gitignore update from master.	Rob Austein

2015-12-21	Binaries missing from .gitignore make git submodule grumpy.	Rob Austein

2015-12-20	Use sysconf(_SC_PAGESIZE) instead of getpagesize().	Rob Austein

2015-12-20	Consolidating curve names broke the ASN.1 code.	Rob Austein

2015-12-20	Drop support for the ASN.1-based ECDSA signature format in favor of	Rob Austein
	the simpler format which PKCS #11 uses, since we have to support the latter in any case and it's not worth the complexity of supporting both.
2015-12-20	RPC server stuff mostly written. Compiles, not yet tested. RPC	Rob Austein
	public key extraction functions on hold pending ASN.1 cleanup.
2015-12-13	Merge Paul's copyright updates.	Rob Austein

2015-12-13	whack copyrights	Paul Selkirk

2015-12-13	Add rpc_hash.c. Convert dynamic allocator in hash.c to use private	Rob Austein
	pool of pre-configured state blocks, suitable for an embedded system.
2015-12-12	Silence platform-dependent compiler whining: in general, when printf()	Rob Austein
	whines about some platform-dependent integer size issue, it's best to use both an explicitly sized format (eg, "%lu") and an explicit cast (eg, "(unsigned long)") when silencing the warning, otherwise it'll just pop up again in different form on the next platform tested.
2015-12-11	RPC API dispatch, skeleton client functions, mixed-mode handlers for	Rob Austein
	local hashing with remote pkey.
2015-12-10	First cut at public libhal RPC API.	Rob Austein

2015-11-17	More post-merge cleanup.	Paul Selkirk
	- Joachim says always check entropy and csprng for 'valid' before reading. - Harmonize RNG status valid bit with other cores. - Clean up compiler warnings about printf formats.