sw/stm32 - Cryptech HSM on STM-32 ARM processor

Age	Commit message (Collapse)	Author
2020-09-02	Well of course there had to be one last dumb Python3 string bugpython3	Rob Austein

2020-09-01	..Aaaand a few more Python3 string bugs in cryptech_upload	Rob Austein

2020-09-01	One more set of silly Python3 bytes handling errors	Rob Austein

2020-07-13	Whack all Python shebangs to Python 3	Rob Austein

2020-05-26	Wow, python-version-independent hexadecimal is painful	Rob Austein

2020-05-25	Untested conversion to support Python 3	Rob Austein

2020-05-05	Add more RPC tasks for better signing performance.	Paul Selkirk

2020-04-29	The new keywrap core now talks directly to the MKM, so there are some API ↵	Paul Selkirk
	changes.
2020-03-10	change hal_aes_use_keywrap_core	Paul Selkirk

2020-02-26	Merge branch 'js_keywrap' to 'master'	Paul Selkirk

2020-02-26	conditionalize timing tests	Paul Selkirk

2020-02-26	Some timing tests overflow the meagre 16K CLI task stack, so bump it up for ↵	Paul Selkirk
	that case.
2020-02-18	timing tests for RSA signingmodexpng	Paul Selkirk

2019-04-09	Rebase branch 'js_keywrap' from masterjs_keywrap	Paul Selkirk

2019-04-03	Merge branch 'fmc_clk_60mhz' to 'master'	Paul Selkirk

2019-03-31	Remove inclusion of now-deleted hashsig.h	Paul Selkirk

2019-02-28	Report SDRAM usage in `task show`	Paul Selkirk

2018-11-26	Add loop unrolling to bring the profilable mem* functions closer to	Paul Selkirk
	newlib, because memset is called a LOT in the course of RSA signing, and we need to understand how much time we're actually spending there.
2018-11-14	Increase cli task, and move it to SDRAM, because main RAM is getting full.	Paul Selkirk

2018-09-11	Cleanup, move 'keywrap core' command to the hsm project, where it will ↵	Paul Selkirk
	actually be useful for short-term testing.
2018-09-05	When erasing the whole keystore, optionally preserve the login PINs.	Paul Selkirk

2018-09-04	Make parsing and display of masterkey values consistent with one another,	Paul Selkirk
	so the user might be able to copy and paste a generated key into the CLI for recovery. Display had been a 32-byte hexdump. Parsing (manual re-entry of the KEK) had been 8 32-bit little-endian values. This has been a pain point for literally two years, albeit at a low enough pain level that I've managed to cringe and ignore it.
2018-08-27	Add startup delay to let fmc bus settle	Paul Selkirk

2018-08-17	Add sanity test for arbitrary size keys, to be really sure the keywrap core ↵	Paul Selkirk
	bank-switched memory works.
2018-08-16	Add timing tests for key unwrap.	Paul Selkirk

2018-08-15	Add support for Joachim's keywrap core.	Paul Selkirk

2018-07-25	Merge branch 'hashsig'	Paul Selkirk

2018-07-24	Add dummy hal_free_static_memory to cli-test, to avoid a link error.	Paul Selkirk
	We really ought to rototill cli-test, but not today.
2018-07-16	Whack various bits of sw/stm32 test code to compile on fmc_clk branch.	Rob Austein

2018-05-27	FMC cleanup: constification, gratuitous pointer.	Rob Austein

2018-05-20	Mutex for RSA blinding factors cache.	Rob Austein

2018-04-19	Reconstruct the hashsig hash tree(s) on device restart.	Paul Selkirk
	This can take long enough (several minutes for h=10) that we do it in a background task, which is then converted to an RPC dispatch task. Also add a very limited form of free(), to free the topmost allocation in the sdram "heap". I don't want to deal with real heap management, but I do want to be able to recover memory upon deleting a hashsig key, if it's easy to do so.
2018-04-19	Implement hash-based signatures, per draft-mcgrew-hash-sigs-08.txt	Paul Selkirk

2018-04-06	Merge branch 'profiling'	Paul Selkirk

2017-12-14	Revert a clean up 'fix' which actually broke FPGA upload.	Paul Selkirk

2017-10-17	Overhaul UART API	Paul Selkirk
	MGMT is the default UART, and no one should have to explicitly refer to the UART unless they need USER (hsm.c:hal_serial_send_char). The default UART is now exposed in the header file, so that the default-using functions can be macros, which saves a few bytes in code space, and a few microseconds in function call overhead.
2017-10-15	Cleanup: All drivers return HAL_StatusTypeDef rather than magic values.	Paul Selkirk
	Note: This affects libhal/ks_token.c, which uses the keystore driver directly.
2017-10-11	Cleanup 'unused parameter' warnings, a couple of which are actual coding errors.	Paul Selkirk

2017-10-11	Cleanup: signed/unsigned mismatches, mostly in loop counters	Paul Selkirk

2017-09-21	cleanup	Paul Selkirk

2017-09-21	Make fmc-test less chatty.	Paul Selkirk

2017-09-07	Rebase branch 'profiling' from master	Paul Selkirk

2017-09-07	Add task_yield_maybe	Paul Selkirk

2017-09-07	Sigh, right offset for the wrong register. Get the PC (the address we	Paul Selkirk
	interrupted) rather than LR (the return address from the function we interrupted). Also, change u_short and u_int to unsigned short and unsigned int, since gcc recently decided that those aren't part of the C99 standard. Finally, add profilable versions of memcpy, memset, and friends, because they get called a lot in the course of unit testing, and it would be nice to know who's calling them.
2017-09-07	Port profiling code, using a new SysTick hook and new CLI commands.	Paul Selkirk

2017-09-07	Add some task metrics.	Paul Selkirk

2017-08-31	Withdraw SysTick_hook (commit 9ffead1), because it turns out there was ↵	Paul Selkirk
	already a user-callback mechanism with HAL_SYSTICK_IRQHandler() and HAL_SYSTICK_Callback().
2017-07-31	Report UART receive queue length, so we can tune it.	Paul Selkirk

2017-07-31	Adapt uart_rx_thread to the post-thread tasking model, because we're still	Paul Selkirk
	subject to the same forces that made it a good idea in the first place. commit 2b6b9f8 Change RPC UART to have a high-priority thread monitoring a large(ish) DMA buffer, because we've observed out-of-order receives under load.
2017-05-28	Stub out hal_allocate_static_memory() to avoid linker error.	Rob Austein
	This is a quick fix, so that we can get on with testing the ks9 branch changes. A better fix in the long run might be to add a third keystore ("ks_pin_read_only", or some such) which implemented the bare minimum interface that the bootloader needs and left everything else unimplemented. This would require a bit of refactoring the current PIN code to make it work right with both the bootloader's abbreivated keystore and the normal token keystore. Probably worth doing, but a bit of a can of worms, so postponing for now.