aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-01-15Initialize C_len arg to hal_aes_keywrap, or suffer unpredictable failures.rsa_timingPaul Selkirk
2019-01-12Timing tests for RSA signing and sub-components thereof.Paul Selkirk
This is not the sort of thing that should go anywhere near production code, so it's on a dangling branch. I may rebase it from time to time.
2018-09-11Cleanup, move 'keywrap core' command to the hsm project, where it will ↵Paul Selkirk
actually be useful for short-term testing.
2018-08-17Add sanity test for arbitrary size keys, to be really sure the keywrap core ↵Paul Selkirk
bank-switched memory works.
2018-08-16Add timing tests for key unwrap.Paul Selkirk
2018-08-15Add support for Joachim's keywrap core.Paul Selkirk
2018-07-25Merge branch 'hashsig'Paul Selkirk
2018-07-24Add dummy hal_free_static_memory to cli-test, to avoid a link error.Paul Selkirk
We really ought to rototill cli-test, but not today.
2018-05-27Script to run a test with HSM profiling.Rob Austein
2018-05-27FMC cleanup: constification, gratuitous pointer.Rob Austein
2018-05-27Convert FMC I/O functions to static inline.Rob Austein
fmc_read_32() and fmc_write_32() get called often enough that it's worth eliminating unnecessary function call overhead.
2018-05-23Simplify FMC I/O code.Rob Austein
We're no longer using a preemptive multitasker, and we're on the Alpha, not the old bridge board, so all we really need to do is read or write one word at a time via a pointer then wait for the GPIO idle pin to light. Well, other than needing to read twice because of a known hardware problem with the STM32. So we dont need to fiddle with IRQ, or use the CMSIS SRAM lock, or....
2018-05-20Mutex for RSA blinding factors cache.Rob Austein
2018-05-01Update and expand READMEPaul Selkirk
2018-05-01Fix mbed vpath not to use explicit (and wrong) pathsPaul Selkirk
2018-04-19Rebase hashsig from masterPaul Selkirk
2018-04-19Reconstruct the hashsig hash tree(s) on device restart.Paul Selkirk
This can take long enough (several minutes for h=10) that we do it in a background task, which is then converted to an RPC dispatch task. Also add a very limited form of free(), to free the topmost allocation in the sdram "heap". I don't want to deal with real heap management, but I do want to be able to recover memory upon deleting a hashsig key, if it's easy to do so.
2018-04-19Implement hash-based signatures, per draft-mcgrew-hash-sigs-08.txtPaul Selkirk
2018-04-19Cleanup: warn of signed/unsigned mismatches in libhal.Paul Selkirk
This is from October's cleanup binge, but I forgot to commit it at the time.
2018-04-19Reconstruct the hashsig hash tree(s) on device restart.Paul Selkirk
This can take long enough (several minutes for h=10) that we do it in a background task, which is then converted to an RPC dispatch task. Also add a very limited form of free(), to free the topmost allocation in the sdram "heap". I don't want to deal with real heap management, but I do want to be able to recover memory upon deleting a hashsig key, if it's easy to do so.
2018-04-06Merge branch 'profiling'Paul Selkirk
2018-02-26Implement hash-based signatures, per draft-mcgrew-hash-sigs-08.txtPaul Selkirk
2018-02-15Cleanup: warn of signed/unsigned mismatches in libhal.Paul Selkirk
This is from October's cleanup binge, but I forgot to commit it at the time.
2017-12-14Revert a clean up 'fix' which actually broke FPGA upload.Paul Selkirk
2017-10-17Overhaul UART APIPaul Selkirk
MGMT is the default UART, and no one should have to explicitly refer to the UART unless they need USER (hsm.c:hal_serial_send_char). The default UART is now exposed in the header file, so that the default-using functions can be macros, which saves a few bytes in code space, and a few microseconds in function call overhead.
2017-10-15Cleanup: All drivers return HAL_StatusTypeDef rather than magic values.Paul Selkirk
Note: This affects libhal/ks_token.c, which uses the keystore driver directly.
2017-10-11Cleanup 'unused parameter' warnings, a couple of which are actual coding errors.Paul Selkirk
2017-10-11Cleanup: signed/unsigned mismatches, mostly in loop countersPaul Selkirk
2017-10-11Cleanup: Remove useless (unsigned < 0) test.Paul Selkirk
2017-09-21cleanupPaul Selkirk
2017-09-21Make fmc-test less chatty.Paul Selkirk
2017-09-07Rebase branch 'profiling' from masterPaul Selkirk
2017-09-07Add task_yield_maybePaul Selkirk
2017-09-07Duh, actually build task_metricsPaul Selkirk
2017-09-07Sigh, right offset for the wrong register. Get the PC (the address wePaul Selkirk
interrupted) rather than LR (the return address from the function we interrupted). Also, change u_short and u_int to unsigned short and unsigned int, since gcc recently decided that those aren't part of the C99 standard. Finally, add profilable versions of memcpy, memset, and friends, because they get called a lot in the course of unit testing, and it would be nice to know who's calling them.
2017-09-07Correct offset to get the PC.Paul Selkirk
A previous version of this code ran over the RTOS, where threads used the Process Stack, while the SysTick interrupt used the Main Stack. Now everything's on the main stack, so we need to account for 2 extra words that SysTick_Handler pushes on the stack at entry.
2017-09-07Port profiling code, using a new SysTick hook and new CLI commands.Paul Selkirk
2017-09-07Copy profiling code from MCUOnEclipse.Paul Selkirk
2017-09-07Add some task metrics.Paul Selkirk
2017-08-31CleanupPaul Selkirk
2017-08-31Withdraw SysTick_hook (commit 9ffead1), because it turns out there was ↵Paul Selkirk
already a user-callback mechanism with HAL_SYSTICK_IRQHandler() and HAL_SYSTICK_Callback().
2017-07-31Report UART receive queue length, so we can tune it.Paul Selkirk
2017-07-31Adapt uart_rx_thread to the post-thread tasking model, because we're stillPaul Selkirk
subject to the same forces that made it a good idea in the first place. commit 2b6b9f8 Change RPC UART to have a high-priority thread monitoring a large(ish) DMA buffer, because we've observed out-of-order receives under load.
2017-07-31Add a generic SysTick hook, to call a function on every 1ms tick, because ↵Paul Selkirk
it's easier than setting up a dedicated timer.
2017-06-17Fix optimization settings in HSM's build of libtfm.Rob Austein
2017-05-28Stub out hal_allocate_static_memory() to avoid linker error.Rob Austein
This is a quick fix, so that we can get on with testing the ks9 branch changes. A better fix in the long run might be to add a third keystore ("ks_pin_read_only", or some such) which implemented the bare minimum interface that the bootloader needs and left everything else unimplemented. This would require a bit of refactoring the current PIN code to make it work right with both the bootloader's abbreivated keystore and the normal token keystore. Probably worth doing, but a bit of a can of worms, so postponing for now.
2017-05-28Track API changes in libhal ks9 branch.Rob Austein
2017-05-24Add task_yield_maybePaul Selkirk
2017-05-24Duh, actually build task_metricsPaul Selkirk
2017-05-13Merge branch 'task_metrics' into profilingPaul Selkirk