sw/stm32 - Cryptech HSM on STM-32 ARM processor

Age	Commit message (Collapse)	Author
2018-09-05	When erasing the whole keystore, optionally preserve the login PINs.	Paul Selkirk

2018-09-04	Make parsing and display of masterkey values consistent with one another,	Paul Selkirk
	so the user might be able to copy and paste a generated key into the CLI for recovery. Display had been a 32-byte hexdump. Parsing (manual re-entry of the KEK) had been 8 32-bit little-endian values. This has been a pain point for literally two years, albeit at a low enough pain level that I've managed to cringe and ignore it.
2018-08-27	Add startup delay to let fmc bus settle	Paul Selkirk

2018-07-25	Merge branch 'hashsig'	Paul Selkirk

2018-07-24	Add dummy hal_free_static_memory to cli-test, to avoid a link error.	Paul Selkirk
	We really ought to rototill cli-test, but not today.
2018-05-27	FMC cleanup: constification, gratuitous pointer.	Rob Austein

2018-05-20	Mutex for RSA blinding factors cache.	Rob Austein

2018-04-19	Reconstruct the hashsig hash tree(s) on device restart.	Paul Selkirk
	This can take long enough (several minutes for h=10) that we do it in a background task, which is then converted to an RPC dispatch task. Also add a very limited form of free(), to free the topmost allocation in the sdram "heap". I don't want to deal with real heap management, but I do want to be able to recover memory upon deleting a hashsig key, if it's easy to do so.
2018-04-19	Implement hash-based signatures, per draft-mcgrew-hash-sigs-08.txt	Paul Selkirk

2018-04-06	Merge branch 'profiling'	Paul Selkirk

2017-12-14	Revert a clean up 'fix' which actually broke FPGA upload.	Paul Selkirk

2017-10-17	Overhaul UART API	Paul Selkirk
	MGMT is the default UART, and no one should have to explicitly refer to the UART unless they need USER (hsm.c:hal_serial_send_char). The default UART is now exposed in the header file, so that the default-using functions can be macros, which saves a few bytes in code space, and a few microseconds in function call overhead.
2017-10-15	Cleanup: All drivers return HAL_StatusTypeDef rather than magic values.	Paul Selkirk
	Note: This affects libhal/ks_token.c, which uses the keystore driver directly.
2017-10-11	Cleanup 'unused parameter' warnings, a couple of which are actual coding errors.	Paul Selkirk

2017-10-11	Cleanup: signed/unsigned mismatches, mostly in loop counters	Paul Selkirk

2017-09-21	cleanup	Paul Selkirk

2017-09-21	Make fmc-test less chatty.	Paul Selkirk

2017-09-07	Rebase branch 'profiling' from master	Paul Selkirk

2017-09-07	Add task_yield_maybe	Paul Selkirk

2017-09-07	Sigh, right offset for the wrong register. Get the PC (the address we	Paul Selkirk
	interrupted) rather than LR (the return address from the function we interrupted). Also, change u_short and u_int to unsigned short and unsigned int, since gcc recently decided that those aren't part of the C99 standard. Finally, add profilable versions of memcpy, memset, and friends, because they get called a lot in the course of unit testing, and it would be nice to know who's calling them.
2017-09-07	Port profiling code, using a new SysTick hook and new CLI commands.	Paul Selkirk

2017-09-07	Add some task metrics.	Paul Selkirk

2017-08-31	Withdraw SysTick_hook (commit 9ffead1), because it turns out there was ↵	Paul Selkirk
	already a user-callback mechanism with HAL_SYSTICK_IRQHandler() and HAL_SYSTICK_Callback().
2017-07-31	Report UART receive queue length, so we can tune it.	Paul Selkirk

2017-07-31	Adapt uart_rx_thread to the post-thread tasking model, because we're still	Paul Selkirk
	subject to the same forces that made it a good idea in the first place. commit 2b6b9f8 Change RPC UART to have a high-priority thread monitoring a large(ish) DMA buffer, because we've observed out-of-order receives under load.
2017-05-28	Stub out hal_allocate_static_memory() to avoid linker error.	Rob Austein
	This is a quick fix, so that we can get on with testing the ks9 branch changes. A better fix in the long run might be to add a third keystore ("ks_pin_read_only", or some such) which implemented the bare minimum interface that the bootloader needs and left everything else unimplemented. This would require a bit of refactoring the current PIN code to make it work right with both the bootloader's abbreivated keystore and the normal token keystore. Probably worth doing, but a bit of a can of worms, so postponing for now.
2017-05-28	Track API changes in libhal ks9 branch.	Rob Austein

2017-05-24	Add task_yield_maybe	Paul Selkirk

2017-05-13	Merge branch 'task_metrics' into profiling	Paul Selkirk

2017-05-10	Sigh, right offset for the wrong register. Get the PC (the address we	Paul Selkirk
	interrupted) rather than LR (the return address from the function we interrupted). Also, change u_short and u_int to unsigned short and unsigned int, since gcc recently decided that those aren't part of the C99 standard. Finally, add profilable versions of memcpy, memset, and friends, because they get called a lot in the course of unit testing, and it would be nice to know who's calling them.
2017-05-05	Port profiling code, using a new SysTick hook and new CLI commands.	Paul Selkirk

2017-05-03	Add some task metrics.	Paul Selkirk

2017-05-02	Merge branch 'init_cleanup' into no-rtos	Paul Selkirk
	Clean up Makefiles and initialization code.
2017-05-01	Addendum to commit e0e97a5: Remove all references to the tasker from cli-test.	Paul Selkirk

2017-04-30	Merge branch 'ksng' into no-rtos	Rob Austein
	Required minor manual intervention to resolve merge issues git had no way of understanding: git is clever, but not quite clever enough to understand that a commit in branch had removed the entire RTOS that a commit in the other branch was using. No big deal, just a couple of osDelay() calls needing conversion to HAL_Delay() or task_delay().
2017-04-29	Add minimal mutexes to the minimal tasking system	Paul Selkirk

2017-04-29	cli-test doesn't use the tasker, even though it might have previously used a ↵	Paul Selkirk
	semaphore from the rtos
2017-04-29	Simplify hsm makefile.	Paul Selkirk

2017-04-29	Port cli-test to the new task API.	Paul Selkirk

2017-04-27	Replace the RTOS with a simple cooperative tasker.	Paul Selkirk
	There are no priorities and no preemption, so tasks run in a round-robin fashion, and explicitly yield control.
2017-04-27	Refactor cryptech_upload to work either directly or via cryptech_muxd.	Rob Austein

2017-04-26	Add support for hal_sleep().	Rob Austein

2017-04-17	Add a short delay to osMailAlloc, since we're no longer calling it in an ISR.	Paul Selkirk

2017-04-17	Merge remote-tracking branch 'origin/uart_rx_thread' into ksng	Paul Selkirk

2017-04-16	Switch to libhal's CRC-32 code.	Rob Austein

2017-04-15	Missing include files, doh.	Rob Austein

2017-04-15	sw/stm32 Makefiles are a mess.	Rob Austein
	Apparently it's easier to duplicate source files into multiple project directories than to write Makefiles that do something sane. Feh.
2017-04-15	Move hal_log() support to separate module.	Rob Austein

2017-04-15	Logging implementation for Alpha hardware.	Rob Austein

2017-04-12	Handle race condition while fetching key metadata for display.	Rob Austein
	Fetching a list of keys and all of their metadata isn't an atomic process, nor, probably, should it be, so we need to cope with things like a key being deleted via the RPC interface while we're fetching its metadata for display on the console interface.