| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-07-12 | Fix checking for multiple errors in one operation. | Paul Selkirk | |
| err = hal_foo() || hal_bar() || hal_baz; maps all errors to 1 (HAL_ERROR_BAD_ARGUMENTS). | |||
| 2016-06-24 | Use hal_error_t as suggested by Rob. | Fredrik Thulin | |
| 2016-06-23 | Implement master key for wrapping keys in the keystore. | Fredrik Thulin | |
| The KEK (Key Encryption Key) is first fetched from the FPGA that gets it from the volatile Master Key Memory (that in theory has tamper*kek_len = len protection with wiping), and secondly from flash. The flash option is meant for development/evaluation use using an Alpha board where the Master Key Memory is not battery backed. For any serious use of an Alpha, an option is to enter the master key into the volatile MKM on each power-on as a way to unlock the keystore. | |||
 |
index : sw/libhal | |
| Cryptech libhal: crypto software, HSM management, RPC | git repositories |
| aboutsummaryrefslogtreecommitdiff |
path: root/masterkey.c