aboutsummaryrefslogtreecommitdiff
path: root/projects/hsm
AgeCommit message (Collapse)Author
2016-11-15Reinitialize keystore data structures after wiping keystore flash.Rob Austein
2016-11-14Track removal of hal_rpc_pkey_list().Rob Austein
2016-11-14hal_rpc_pkey_find() -> hal_rpc_pkey_open().Rob Austein
2016-11-01Tweak CLI keystore commands for latest libhal RPC keystore API.Rob Austein
Using {-1} as a client handle in the CLI is a kludge, but the new stricter libhal keystore code really wants us to be consistent about this, so as long as any part of the CLI is using client {-1}, it all needs to do so. This still isn't really right, the CLI probably needs a different set of access rules than those which apply to the RPC calls, but I'm deferring that until we know what the "final" (for this branch) version of the RPC API looks like, and have done whatever refactoring might be required in the libhal keystore drivers.
2016-10-09Track changes to libhal pkey API.Rob Austein
2016-10-07Track changes to libhal RPC pkey API.Rob Austein
2016-09-27"keystore erase" now clears entire keystore flash.Rob Austein
Now that we're using more than just the first few sectors of the keystore flash, we need a command to clear the whole thing. This is not quite right yet, because it doesn't yet notify libhal's ks_flash driver that the entire content of the flash has been yanked out from under it. In theory, we should be able to erase the entire flash in a single operation using the bulk erase command command (0xC7), but I couldn't get that to do anything (no error reported, no visible effect), so, for now, we erase by sectors.
2016-09-23Use subsectors instead of sectors in keystore.Rob Austein
2016-09-16Revised ks_flash. Compiles, not yet tested.Rob Austein
2016-09-13Track libhal cleanup (function names, const-ification).Rob Austein
2016-09-09Track removal of `type` argument from hal_rpc_pkey_find().Rob Austein
2016-09-02Whack with club until working with new keystore API.Rob Austein
Basic stuff like "keystore show keys", "keystore delete key", and the PIN commands all work with the new keystore code. Some of the management commands are still broken. Some of the old management commands were using libhal-internal APIs for which no real equivalent exists anymore. Some of the old management commands were doing things that, um, never could have worked as written.
2016-08-23Show running threads.Paul Selkirk
2016-08-23Reset table of cores after resetting FPGA from CLI.Paul Selkirk
2016-08-23Multi-client testing revealed race conditions in uart receive codePaul Selkirk
(dropped characters, improper handoff of message buffers). Fixed by a) changing the uart receiver from interrupt to DMA mode, and b) replacing the dispatch mutex and rpc semaphore with a mail queue (memory pool + message queue).
2016-08-11Multiple threads and multiple cores, to deal with multiple clients.Paul Selkirk
2016-07-21Use a fresh port of libcli, which retains more of the original API.Paul Selkirk
2016-07-16Don't run empty "export" command.Rob Austein
2016-07-13'masterkey set' without args sets master key to a random valuePaul Selkirk
2016-07-13probe_cores() finally does the right thing, so we don't have to call it early.Paul Selkirk
2016-07-12Make username a command-line option, default "so" as it used to be.Rob Austein
2016-07-12Allow wheel to upload firmware/bitstreamsPaul Selkirk
2016-07-12Re-disable 'keystore set key'; hexdump binary key names; remove unused ↵Paul Selkirk
'show' commands.
2016-07-12Restore 'keystore set|rename|delete' commands; access key by index as well ↵Paul Selkirk
as name.
2016-07-09Clean up the CLI.Fredrik Thulin
A lot of the commands were just useful when testing/implementing features for the Alpha. Remove them now that they have been merged to projects/cli-test.
2016-07-08Add upload from firmware tarball, gussie up command parser, add dire warnings.Rob Austein
Command parser now enforces little things like mutually-exclusive required options so we warn users who attempt something silly. Preferred source for uploads is now the firmware tarball installed along with the client software; we still support uploading from an explictly-specified source file, but one must now say "-i file". Updating the bootloader is dangerous, we now say so and also require an additional option before we'll even attempt it. For the record, while testing this I did manage to brick my Alpha and had to use an ST-LINK to recover, exactly as predicted by the new dire warning.
2016-07-07Merge branch 'master' of https://git.cryptech.is/sw/stm32.git.Rob Austein
2016-07-07Add cryptech_miniterm; tweak cryptech_probe to write environment variables ↵Rob Austein
like ssh-agent.
2016-07-07Drop bad request packets.Paul Selkirk
Also, if the UART receive callback fails to re-enable receive (because dispatch_thread is in the middle of transmitting a response), signal dispatch_thread to re-enable receive after it's done.
2016-07-07Default to one RPC worker thread.Paul Selkirk
2016-07-07Rewrite and add cleanup sequences to avoid confusing the RPC server.Rob Austein
2016-07-06Add uart_set_default() to make debugging output easier.Paul Selkirk
2016-07-06Cleanup - remove demo filetransfer command.Paul Selkirk
2016-07-06Add 'show fpga status' and 'show fpga cores'.Paul Selkirk
2016-07-06Small improvements to try to suck less.Paul Selkirk
2016-07-05Add horrible kludge of a script to probe USB ports and report whichRob Austein
ones look like console and RPC ports for the HSM.
2016-06-30RPC wire format now includes client handle in all requests, and opcode andPaul Selkirk
client handle in all responses.
2016-06-29add commands to clear pin or whole keystoreFredrik Thulin
2016-06-29cleanupFredrik Thulin
2016-06-28Only SO and wheel are allowed to upload.Paul Selkirk
Also add bootloader upload.
2016-06-27Remove old default user.Paul Selkirk
2016-06-27Modify cli-test/filetransfer to prompt for PIN.Paul Selkirk
2016-06-26PIN-based loginPaul Selkirk
2016-06-25Merge branch 'alternate_dma'Paul Selkirk
2016-06-25Split LIB*_DIR into _SRC and _BLD.Paul Selkirk
Also rename all instances of GNUmakefile to Makefile.
2016-06-25Finish unwinding subrepository hairball: VPATH setup.Rob Austein
2016-06-24Masterkey functions now return hal_error_t as suggested by Rob.Fredrik Thulin
2016-06-23Add masterkey and keystore commands.Fredrik Thulin
2016-06-16keystore_erase_sectors takes start and stop arguments nowFredrik Thulin
2016-06-15Use a 1-byte DMA buffer for management UART receives.Paul Selkirk
It sounds silly, but this gives us completion callbacks, so we don't spend out entire time slice polling the receive buffer for new characters (which kills performance for tasks that are doing real work). Besides, libcli wants to process a character at a time, so uart_cli_read just waits on the completion callback.