sw/stm32 - Cryptech HSM on STM-32 ARM processor

Age	Commit message (Collapse)	Author
2019-01-15	Initialize C_len arg to hal_aes_keywrap, or suffer unpredictable failures.rsa_timing	Paul Selkirk

2019-01-12	Timing tests for RSA signing and sub-components thereof.	Paul Selkirk
	This is not the sort of thing that should go anywhere near production code, so it's on a dangling branch. I may rebase it from time to time.
2018-09-11	Cleanup, move 'keywrap core' command to the hsm project, where it will ↵	Paul Selkirk
	actually be useful for short-term testing.
2018-08-17	Add sanity test for arbitrary size keys, to be really sure the keywrap core ↵	Paul Selkirk
	bank-switched memory works.
2018-08-16	Add timing tests for key unwrap.	Paul Selkirk

2018-08-15	Add support for Joachim's keywrap core.	Paul Selkirk

2018-07-25	Merge branch 'hashsig'	Paul Selkirk

2018-07-24	Add dummy hal_free_static_memory to cli-test, to avoid a link error.	Paul Selkirk
	We really ought to rototill cli-test, but not today.
2018-05-27	Script to run a test with HSM profiling.	Rob Austein

2018-05-27	FMC cleanup: constification, gratuitous pointer.	Rob Austein

2018-05-27	Convert FMC I/O functions to static inline.	Rob Austein
	fmc_read_32() and fmc_write_32() get called often enough that it's worth eliminating unnecessary function call overhead.
2018-05-23	Simplify FMC I/O code.	Rob Austein
	We're no longer using a preemptive multitasker, and we're on the Alpha, not the old bridge board, so all we really need to do is read or write one word at a time via a pointer then wait for the GPIO idle pin to light. Well, other than needing to read twice because of a known hardware problem with the STM32. So we dont need to fiddle with IRQ, or use the CMSIS SRAM lock, or....
2018-05-20	Mutex for RSA blinding factors cache.	Rob Austein

2018-05-01	Update and expand README	Paul Selkirk

2018-05-01	Fix mbed vpath not to use explicit (and wrong) paths	Paul Selkirk

2018-04-19	Rebase hashsig from master	Paul Selkirk

2018-04-19	Reconstruct the hashsig hash tree(s) on device restart.	Paul Selkirk
	This can take long enough (several minutes for h=10) that we do it in a background task, which is then converted to an RPC dispatch task. Also add a very limited form of free(), to free the topmost allocation in the sdram "heap". I don't want to deal with real heap management, but I do want to be able to recover memory upon deleting a hashsig key, if it's easy to do so.
2018-04-19	Implement hash-based signatures, per draft-mcgrew-hash-sigs-08.txt	Paul Selkirk

2018-04-19	Cleanup: warn of signed/unsigned mismatches in libhal.	Paul Selkirk
	This is from October's cleanup binge, but I forgot to commit it at the time.
2018-04-19	Reconstruct the hashsig hash tree(s) on device restart.	Paul Selkirk
	This can take long enough (several minutes for h=10) that we do it in a background task, which is then converted to an RPC dispatch task. Also add a very limited form of free(), to free the topmost allocation in the sdram "heap". I don't want to deal with real heap management, but I do want to be able to recover memory upon deleting a hashsig key, if it's easy to do so.
2018-04-06	Merge branch 'profiling'	Paul Selkirk

2018-02-26	Implement hash-based signatures, per draft-mcgrew-hash-sigs-08.txt	Paul Selkirk

2018-02-15	Cleanup: warn of signed/unsigned mismatches in libhal.	Paul Selkirk
	This is from October's cleanup binge, but I forgot to commit it at the time.
2017-12-14	Revert a clean up 'fix' which actually broke FPGA upload.	Paul Selkirk

2017-10-17	Overhaul UART API	Paul Selkirk
	MGMT is the default UART, and no one should have to explicitly refer to the UART unless they need USER (hsm.c:hal_serial_send_char). The default UART is now exposed in the header file, so that the default-using functions can be macros, which saves a few bytes in code space, and a few microseconds in function call overhead.
2017-10-15	Cleanup: All drivers return HAL_StatusTypeDef rather than magic values.	Paul Selkirk
	Note: This affects libhal/ks_token.c, which uses the keystore driver directly.
2017-10-11	Cleanup 'unused parameter' warnings, a couple of which are actual coding errors.	Paul Selkirk

2017-10-11	Cleanup: signed/unsigned mismatches, mostly in loop counters	Paul Selkirk

2017-10-11	Cleanup: Remove useless (unsigned < 0) test.	Paul Selkirk

2017-09-21	cleanup	Paul Selkirk

2017-09-21	Make fmc-test less chatty.	Paul Selkirk

2017-09-07	Rebase branch 'profiling' from master	Paul Selkirk

2017-09-07	Add task_yield_maybe	Paul Selkirk

2017-09-07	Duh, actually build task_metrics	Paul Selkirk

2017-09-07	Sigh, right offset for the wrong register. Get the PC (the address we	Paul Selkirk
	interrupted) rather than LR (the return address from the function we interrupted). Also, change u_short and u_int to unsigned short and unsigned int, since gcc recently decided that those aren't part of the C99 standard. Finally, add profilable versions of memcpy, memset, and friends, because they get called a lot in the course of unit testing, and it would be nice to know who's calling them.
2017-09-07	Correct offset to get the PC.	Paul Selkirk
	A previous version of this code ran over the RTOS, where threads used the Process Stack, while the SysTick interrupt used the Main Stack. Now everything's on the main stack, so we need to account for 2 extra words that SysTick_Handler pushes on the stack at entry.
2017-09-07	Port profiling code, using a new SysTick hook and new CLI commands.	Paul Selkirk

2017-09-07	Copy profiling code from MCUOnEclipse.	Paul Selkirk

2017-09-07	Add some task metrics.	Paul Selkirk

2017-08-31	Cleanup	Paul Selkirk

2017-08-31	Withdraw SysTick_hook (commit 9ffead1), because it turns out there was ↵	Paul Selkirk
	already a user-callback mechanism with HAL_SYSTICK_IRQHandler() and HAL_SYSTICK_Callback().
2017-07-31	Report UART receive queue length, so we can tune it.	Paul Selkirk

2017-07-31	Adapt uart_rx_thread to the post-thread tasking model, because we're still	Paul Selkirk
	subject to the same forces that made it a good idea in the first place. commit 2b6b9f8 Change RPC UART to have a high-priority thread monitoring a large(ish) DMA buffer, because we've observed out-of-order receives under load.
2017-07-31	Add a generic SysTick hook, to call a function on every 1ms tick, because ↵	Paul Selkirk
	it's easier than setting up a dedicated timer.
2017-06-17	Fix optimization settings in HSM's build of libtfm.	Rob Austein

2017-05-28	Stub out hal_allocate_static_memory() to avoid linker error.	Rob Austein
	This is a quick fix, so that we can get on with testing the ks9 branch changes. A better fix in the long run might be to add a third keystore ("ks_pin_read_only", or some such) which implemented the bare minimum interface that the bootloader needs and left everything else unimplemented. This would require a bit of refactoring the current PIN code to make it work right with both the bootloader's abbreivated keystore and the normal token keystore. Probably worth doing, but a bit of a can of worms, so postponing for now.
2017-05-28	Track API changes in libhal ks9 branch.	Rob Austein

2017-05-24	Add task_yield_maybe	Paul Selkirk

2017-05-24	Duh, actually build task_metrics	Paul Selkirk

2017-05-13	Merge branch 'task_metrics' into profiling	Paul Selkirk