sw/stm32 - Cryptech HSM on STM-32 ARM processor

Age	Commit message (Collapse)	Author
2019-04-09	Merge branch 'master' into js_keywrap	Paul Selkirk

2019-04-06	Remove fmc_[read\|write]_32, since we now memcpy in hal_io_[read\|write].	Paul Selkirk

2019-04-03	Merge branch 'fmc_clk_60mhz' to 'master'	Paul Selkirk

2019-03-31	Remove inclusion of now-deleted hashsig.h	Paul Selkirk

2019-02-28	Report SDRAM usage in `task show`	Paul Selkirk

2018-12-05	Tell libtfm that the ARM is little-endian, so it can optimize ↵	Paul Selkirk
	fp_read_unsigned_bin(). This enables some overflow-detection code, which fixes CT-01-009. It also saves 484us/call, which adds up to 6.3ms/RSA signature.
2018-12-03	Re-delete SysTick_hook (commit 9ffead1), which somehow crept back in.	Paul Selkirk

2018-12-02	Clean up the profiling code to the point where I stand a chance of	Paul Selkirk
	understanding it 6 months from now. While I'm at it, try to make it a little more efficient (because 50-60% of time in a typical profiling run is spent in the function-entry counting), and collapse profil.c into gmon.c.
2018-11-26	Add loop unrolling to bring the profilable mem* functions closer to	Paul Selkirk
	newlib, because memset is called a LOT in the course of RSA signing, and we need to understand how much time we're actually spending there.
2018-11-14	Increase cli task, and move it to SDRAM, because main RAM is getting full.	Paul Selkirk

2018-09-11	Cleanup, move 'keywrap core' command to the hsm project, where it will ↵	Paul Selkirk
	actually be useful for short-term testing.
2018-09-07	Tweak for 60MHz FMC clock.	Rob Austein

2018-09-05	When erasing the whole keystore, optionally preserve the login PINs.	Paul Selkirk

2018-09-04	Make parsing and display of masterkey values consistent with one another,	Paul Selkirk
	so the user might be able to copy and paste a generated key into the CLI for recovery. Display had been a 32-byte hexdump. Parsing (manual re-entry of the KEK) had been 8 32-bit little-endian values. This has been a pain point for literally two years, albeit at a low enough pain level that I've managed to cringe and ignore it.
2018-08-27	Add startup delay to let fmc bus settle	Paul Selkirk

2018-08-17	Add sanity test for arbitrary size keys, to be really sure the keywrap core ↵	Paul Selkirk
	bank-switched memory works.
2018-08-16	Add timing tests for key unwrap.	Paul Selkirk

2018-08-15	Add support for Joachim's keywrap core.	Paul Selkirk

2018-07-25	Merge branch 'hashsig'	Paul Selkirk

2018-07-24	Add dummy hal_free_static_memory to cli-test, to avoid a link error.	Paul Selkirk
	We really ought to rototill cli-test, but not today.
2018-07-16	Whack various bits of sw/stm32 test code to compile on fmc_clk branch.	Rob Austein

2018-07-07	Changed FMC initialization code to match the new sync FMC arbiter. Removed	Pavel V. Shatov (Meister)
	unnecessary code (no more double read, yay!)
2018-05-27	Script to run a test with HSM profiling.	Rob Austein

2018-05-27	FMC cleanup: constification, gratuitous pointer.	Rob Austein

2018-05-27	Convert FMC I/O functions to static inline.	Rob Austein
	fmc_read_32() and fmc_write_32() get called often enough that it's worth eliminating unnecessary function call overhead.
2018-05-23	Simplify FMC I/O code.	Rob Austein
	We're no longer using a preemptive multitasker, and we're on the Alpha, not the old bridge board, so all we really need to do is read or write one word at a time via a pointer then wait for the GPIO idle pin to light. Well, other than needing to read twice because of a known hardware problem with the STM32. So we dont need to fiddle with IRQ, or use the CMSIS SRAM lock, or....
2018-05-20	Mutex for RSA blinding factors cache.	Rob Austein

2018-05-01	Update and expand README	Paul Selkirk

2018-05-01	Fix mbed vpath not to use explicit (and wrong) paths	Paul Selkirk

2018-04-19	Rebase hashsig from master	Paul Selkirk

2018-04-19	Reconstruct the hashsig hash tree(s) on device restart.	Paul Selkirk
	This can take long enough (several minutes for h=10) that we do it in a background task, which is then converted to an RPC dispatch task. Also add a very limited form of free(), to free the topmost allocation in the sdram "heap". I don't want to deal with real heap management, but I do want to be able to recover memory upon deleting a hashsig key, if it's easy to do so.
2018-04-19	Implement hash-based signatures, per draft-mcgrew-hash-sigs-08.txt	Paul Selkirk

2018-04-19	Cleanup: warn of signed/unsigned mismatches in libhal.	Paul Selkirk
	This is from October's cleanup binge, but I forgot to commit it at the time.
2018-04-19	Reconstruct the hashsig hash tree(s) on device restart.	Paul Selkirk
	This can take long enough (several minutes for h=10) that we do it in a background task, which is then converted to an RPC dispatch task. Also add a very limited form of free(), to free the topmost allocation in the sdram "heap". I don't want to deal with real heap management, but I do want to be able to recover memory upon deleting a hashsig key, if it's easy to do so.
2018-04-06	Merge branch 'profiling'	Paul Selkirk

2018-02-26	Implement hash-based signatures, per draft-mcgrew-hash-sigs-08.txt	Paul Selkirk

2018-02-15	Cleanup: warn of signed/unsigned mismatches in libhal.	Paul Selkirk
	This is from October's cleanup binge, but I forgot to commit it at the time.
2017-12-14	Revert a clean up 'fix' which actually broke FPGA upload.	Paul Selkirk

2017-10-17	Overhaul UART API	Paul Selkirk
	MGMT is the default UART, and no one should have to explicitly refer to the UART unless they need USER (hsm.c:hal_serial_send_char). The default UART is now exposed in the header file, so that the default-using functions can be macros, which saves a few bytes in code space, and a few microseconds in function call overhead.
2017-10-15	Cleanup: All drivers return HAL_StatusTypeDef rather than magic values.	Paul Selkirk
	Note: This affects libhal/ks_token.c, which uses the keystore driver directly.
2017-10-11	Cleanup 'unused parameter' warnings, a couple of which are actual coding errors.	Paul Selkirk

2017-10-11	Cleanup: signed/unsigned mismatches, mostly in loop counters	Paul Selkirk

2017-10-11	Cleanup: Remove useless (unsigned < 0) test.	Paul Selkirk

2017-09-21	cleanup	Paul Selkirk

2017-09-21	Make fmc-test less chatty.	Paul Selkirk

2017-09-07	Rebase branch 'profiling' from master	Paul Selkirk

2017-09-07	Add task_yield_maybe	Paul Selkirk

2017-09-07	Duh, actually build task_metrics	Paul Selkirk

2017-09-07	Sigh, right offset for the wrong register. Get the PC (the address we	Paul Selkirk
	interrupted) rather than LR (the return address from the function we interrupted). Also, change u_short and u_int to unsigned short and unsigned int, since gcc recently decided that those aren't part of the C99 standard. Finally, add profilable versions of memcpy, memset, and friends, because they get called a lot in the course of unit testing, and it would be nice to know who's calling them.
2017-09-07	Correct offset to get the PC.	Paul Selkirk
	A previous version of this code ran over the RTOS, where threads used the Process Stack, while the SysTick interrupt used the Main Stack. Now everything's on the main stack, so we need to account for 2 extra words that SysTick_Handler pushes on the stack at entry.