sw/libhal - Cryptech libhal: crypto software, HSM management, RPC

Age	Commit message (Collapse)	Author
2016-03-11	First round of debugging based on RPC pkey tests: mostly ASN.1	Rob Austein
	silliness, with a bit of PKCS #1.5 padding silliness for desert.
2016-03-11	First step towards RPC PKEY tests. Currently RSA-only, test-vector	Rob Austein
	only, requires AES core (for key wrapping).
2016-03-09	Tweak handling of byte swapping in software hash cores to get rid of	Rob Austein
	some unnecessary data copying.
2016-03-09	Optional (compile time conditional) software hash cores. At the	Rob Austein
	moment this is all-or-nothing, but could easily be tweaked to allow compile-time selection of particular hashes.
2016-03-03	Initial implementations of ks_get_kek(). Untested, and none of these	Rob Austein
	are secure (the one in ks_flash.c is a stub, and the others are for cases where we have no secure hardware in which to store the KEK). These are primarily for testing, since in the long run the entire software implementation of AES-keywrap will be replaced by Verilog which never lets software see the unwrapped key. Or so says current theory. For the moment, we just need something that will let us test the rest of the RPC and keystore mechanisms.
2016-02-25	RPC over loopback socket, just to work out the mechanics for serialization ↵	Paul Selkirk
	and dispatch.
2015-12-24	Fix dispatch vector names.	Rob Austein

2015-12-24	hal_rpc_logout_all(), hal_rpc_is_logged_in().	Rob Austein

2015-12-24	More work on PIN/login/logout code. Access control still missing,	Rob Austein
	committing now so Paul has a chance to look at the current RPC API.
2015-12-23	RPC interface to TRNG and (incomplete) PIN code.	Rob Austein

2015-12-23	Software modexp() implementation didn't compile due to missing pro	Rob Austein
	forma hal_core_t* argument.
2015-12-23	First round of fixes for new ASN.1 and test code.	Rob Austein

2015-12-22	Reorder tests to put hideously slow RSA tests at the end.	Rob Austein

2015-12-22	Test code for ASN.1 public key functions.	Rob Austein

2015-12-22	Add ASN.1 support for public keys (X.509 SubjectPublicKeyInfo format).	Rob Austein

2015-12-21	Fix names of private key DER functions.	Rob Austein

2015-12-21	Pull .gitignore update from master.	Rob Austein

2015-12-21	Binaries missing from .gitignore make git submodule grumpy.	Rob Austein

2015-12-20	Use sysconf(_SC_PAGESIZE) instead of getpagesize().	Rob Austein

2015-12-20	Consolidating curve names broke the ASN.1 code.	Rob Austein

2015-12-20	Drop support for the ASN.1-based ECDSA signature format in favor of	Rob Austein
	the simpler format which PKCS #11 uses, since we have to support the latter in any case and it's not worth the complexity of supporting both.
2015-12-20	RPC server stuff mostly written. Compiles, not yet tested. RPC	Rob Austein
	public key extraction functions on hold pending ASN.1 cleanup.
2015-12-13	Merge Paul's copyright updates.	Rob Austein

2015-12-13	whack copyrights	Paul Selkirk

2015-12-13	Add rpc_hash.c. Convert dynamic allocator in hash.c to use private	Rob Austein
	pool of pre-configured state blocks, suitable for an embedded system.
2015-12-12	Silence platform-dependent compiler whining: in general, when printf()	Rob Austein
	whines about some platform-dependent integer size issue, it's best to use both an explicitly sized format (eg, "%lu") and an explicit cast (eg, "(unsigned long)") when silencing the warning, otherwise it'll just pop up again in different form on the next platform tested.
2015-12-11	RPC API dispatch, skeleton client functions, mixed-mode handlers for	Rob Austein
	local hashing with remote pkey.
2015-12-10	First cut at public libhal RPC API.	Rob Austein

2015-11-17	More post-merge cleanup.	Paul Selkirk
	- Joachim says always check entropy and csprng for 'valid' before reading. - Harmonize RNG status valid bit with other cores. - Clean up compiler warnings about printf formats.
2015-11-16	new test to exercise trng cores	Paul Selkirk

2015-11-16	remove dependency on csprng	Paul Selkirk

2015-11-16	harmonize ctrl and status addresses with other cores	Paul Selkirk

2015-11-14	Catch up with other branch merges.	Paul Selkirk
	- TRNG cores are contiguous (but they still have their own mux, so occupy a block of 16 cores). - Use Rob's updated libhal in my new apps.
2015-11-13	Merge branch 'config_core_selector'	Paul Selkirk

2015-11-12	fix printf warnings, fix time_check calculation	Paul Selkirk

2015-10-31	add core probe utility	Paul Selkirk

2015-10-31	add bus performance test	Paul Selkirk

2015-10-31	fix time calculation in test-ecdsa	Paul Selkirk

2015-10-29	change CFLAGS assignment to += for cross-building	Paul Selkirk

2015-10-29	Remove unused includes.	Paul Selkirk

2015-10-26	Use ${AR} for cross-building.	Paul Selkirk
	Regular ar is fine, but this feels cleaner.
2015-10-19	catch up to changes in core version numbers	Paul Selkirk

2015-10-04	Handle missing hash cores more gracefully.	Rob Austein

2015-10-04	Disallow NULL core argument in lowest-level HAL I/O routines.	Rob Austein

2015-10-04	Helps to select the CSPRNG core before trying to call it.	Rob Austein

2015-10-04	Whack libhal API to use current configure_core_selector mechanism.	Rob Austein
	Compiles, not yet tested.
2015-10-04	off_t => hal_addr_t.	Rob Austein

2015-10-03	Use initializers for automatic variables of type fp_int because it's a	Rob Austein
	bit more obvious when we've forgotten to do this than when we've forgotten to call fp_init() or memset(). Convert rsa.c to use the one-element-array idiom so we can get stop prefixing every bignum reference with "&".
2015-10-02	Impressive how much trouble one can get into with one uninitialized bignum.	Rob Austein

2015-10-02	Testing shows that signature and verification are both faster with	Rob Austein
	mixed Jacobian-affine addition, so go with that. Minor additional clean-up and comments.