sw/stm32 - Cryptech HSM on STM-32 ARM processor

Age	Commit message (Collapse)	Author
2016-09-27	"keystore erase" now clears entire keystore flash.	Rob Austein
	Now that we're using more than just the first few sectors of the keystore flash, we need a command to clear the whole thing. This is not quite right yet, because it doesn't yet notify libhal's ks_flash driver that the entire content of the flash has been yanked out from under it. In theory, we should be able to erase the entire flash in a single operation using the bulk erase command command (0xC7), but I couldn't get that to do anything (no error reported, no visible effect), so, for now, we erase by sectors.
2016-09-23	Use subsectors instead of sectors in keystore.	Rob Austein

2016-09-20	Still some problem with uart receive under heavy load, so change to a 2-byte ↵	Paul Selkirk
	receive buffer with half-complete callbacks, and raise the dma priority.
2016-09-16	Revised ks_flash. Compiles, not yet tested.	Rob Austein

2016-09-13	Track libhal cleanup (function names, const-ification).	Rob Austein

2016-09-09	Track removal of `type` argument from hal_rpc_pkey_find().	Rob Austein

2016-09-02	Whack with club until working with new keystore API.	Rob Austein
	Basic stuff like "keystore show keys", "keystore delete key", and the PIN commands all work with the new keystore code. Some of the management commands are still broken. Some of the old management commands were using libhal-internal APIs for which no real equivalent exists anymore. Some of the old management commands were doing things that, um, never could have worked as written.
2016-08-23	Show running threads.	Paul Selkirk

2016-08-23	Reset table of cores after resetting FPGA from CLI.	Paul Selkirk

2016-08-23	Multi-client testing revealed race conditions in uart receive code	Paul Selkirk
	(dropped characters, improper handoff of message buffers). Fixed by a) changing the uart receiver from interrupt to DMA mode, and b) replacing the dispatch mutex and rpc semaphore with a mail queue (memory pool + message queue).
2016-08-11	Multiple threads and multiple cores, to deal with multiple clients.	Paul Selkirk

2016-07-21	Use a fresh port of libcli, which retains more of the original API.	Paul Selkirk

2016-07-16	Don't run empty "export" command.	Rob Austein

2016-07-13	'masterkey set' without args sets master key to a random value	Paul Selkirk

2016-07-13	probe_cores() finally does the right thing, so we don't have to call it early.	Paul Selkirk

2016-07-12	Make username a command-line option, default "so" as it used to be.	Rob Austein

2016-07-12	Allow wheel to upload firmware/bitstreams	Paul Selkirk

2016-07-12	Re-disable 'keystore set key'; hexdump binary key names; remove unused ↵	Paul Selkirk
	'show' commands.
2016-07-12	Restore 'keystore set\|rename\|delete' commands; access key by index as well ↵	Paul Selkirk
	as name.
2016-07-09	Clean up the CLI.	Fredrik Thulin
	A lot of the commands were just useful when testing/implementing features for the Alpha. Remove them now that they have been merged to projects/cli-test.
2016-07-08	Add upload from firmware tarball, gussie up command parser, add dire warnings.	Rob Austein
	Command parser now enforces little things like mutually-exclusive required options so we warn users who attempt something silly. Preferred source for uploads is now the firmware tarball installed along with the client software; we still support uploading from an explictly-specified source file, but one must now say "-i file". Updating the bootloader is dangerous, we now say so and also require an additional option before we'll even attempt it. For the record, while testing this I did manage to brick my Alpha and had to use an ST-LINK to recover, exactly as predicted by the new dire warning.
2016-07-07	Merge branch 'master' of https://git.cryptech.is/sw/stm32.git.	Rob Austein

2016-07-07	Add cryptech_miniterm; tweak cryptech_probe to write environment variables ↵	Rob Austein
	like ssh-agent.
2016-07-07	Drop bad request packets.	Paul Selkirk
	Also, if the UART receive callback fails to re-enable receive (because dispatch_thread is in the middle of transmitting a response), signal dispatch_thread to re-enable receive after it's done.
2016-07-07	Default to one RPC worker thread.	Paul Selkirk

2016-07-07	Rewrite and add cleanup sequences to avoid confusing the RPC server.	Rob Austein

2016-07-06	Add uart_set_default() to make debugging output easier.	Paul Selkirk

2016-07-06	Cleanup - remove demo filetransfer command.	Paul Selkirk

2016-07-06	Add 'show fpga status' and 'show fpga cores'.	Paul Selkirk

2016-07-06	Small improvements to try to suck less.	Paul Selkirk

2016-07-05	Add horrible kludge of a script to probe USB ports and report which	Rob Austein
	ones look like console and RPC ports for the HSM.
2016-06-30	RPC wire format now includes client handle in all requests, and opcode and	Paul Selkirk
	client handle in all responses.
2016-06-29	add commands to clear pin or whole keystore	Fredrik Thulin

2016-06-29	cleanup	Fredrik Thulin

2016-06-28	Only SO and wheel are allowed to upload.	Paul Selkirk
	Also add bootloader upload.
2016-06-27	Remove old default user.	Paul Selkirk

2016-06-27	Modify cli-test/filetransfer to prompt for PIN.	Paul Selkirk

2016-06-26	PIN-based login	Paul Selkirk

2016-06-25	Merge branch 'alternate_dma'	Paul Selkirk

2016-06-25	Split LIB*_DIR into _SRC and _BLD.	Paul Selkirk
	Also rename all instances of GNUmakefile to Makefile.
2016-06-25	Finish unwinding subrepository hairball: VPATH setup.	Rob Austein

2016-06-24	Masterkey functions now return hal_error_t as suggested by Rob.	Fredrik Thulin

2016-06-23	Add masterkey and keystore commands.	Fredrik Thulin

2016-06-16	keystore_erase_sectors takes start and stop arguments now	Fredrik Thulin

2016-06-15	Use a 1-byte DMA buffer for management UART receives.	Paul Selkirk
	It sounds silly, but this gives us completion callbacks, so we don't spend out entire time slice polling the receive buffer for new characters (which kills performance for tasks that are doing real work). Besides, libcli wants to process a character at a time, so uart_cli_read just waits on the completion callback.
2016-06-14	Import cli-test into hsm pretty much as-is.	Paul Selkirk

2016-06-13	RSA keygen needs even more stack space than I thought.	Paul Selkirk
	Also, it turns out the linker wants to include initializers for sdram variables in the .elf and .bin files, even though it should handle it like bss. So now we manage sdram directly with a pseudo-malloc.
2016-06-13	Only the HSM project needs the RTOS; most of the test projects can use the ↵	Paul Selkirk
	STM32 HAL code directly.
2016-06-09	Put thread stack buffers in SDRAM, because pkey uses a lot of stack.	Paul Selkirk
	Also rearchitect the way we handle RPC requests - have a bunch of waiting dispatch threads rather than continually creating and deleting threads.
2016-06-09	Rename main.c to hsm.c for consistency and a slightly simpler Makefile.	Paul Selkirk