Pol Henarejos
088002863c
Before cloning, it should be removed.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-20 18:03:49 +01:00
Pol Henarejos
7876f4b32a
pypicohsm is built everytime that test is run, since it could implement more features used by tests.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-20 18:02:33 +01:00
Pol Henarejos
a5e3d4e0e5
Added dockerfile for debian.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-20 18:01:48 +01:00
Pol Henarejos
0c842773d2
Move to debian docker.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-20 17:58:43 +01:00
Pol Henarejos
0aaf339353
Fix error message.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-20 17:58:17 +01:00
Pol Henarejos
efba39adc5
Add SW_WRONG_DATA return on bad tag for Chachapoly.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-20 17:58:01 +01:00
Pol Henarejos
13755cb4d5
Fix buffer overflow when importing AES 512 key.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-20 17:06:06 +01:00
Pol Henarejos
11a30863e8
Using new package pypicohsm.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-20 17:05:46 +01:00
Pol Henarejos
a69d06b2d9
Fixed chachapoly crypt algorithm.
...
It missed setkey function. So, no key was used at any moment.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-19 20:24:32 +01:00
Pol Henarejos
1c7bc18161
Added support for AES 512 bit key size.
...
AES XTS uses two keys. Therefore, XTS with 2 AES 256 implies 64 bytes key length.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-19 20:22:40 +01:00
Pol Henarejos
86ce01cac2
Added AES XTS via AES_EXT command.
...
Note that it requires 32 bytes or 64 bytes key length.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-19 19:42:37 +01:00
Pol Henarejos
9cb60ba420
Added AES ECB (insecure), CBC (with custom IV), OFB, CFB and GCM (with 16-byte tag) via AES_EXT command.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-19 19:34:34 +01:00
Pol Henarejos
99f1620e7d
Fixes #22 .
...
SC-HSM returns the result with a 0x04 prepended. This comes from OpenSC but it is not clear the exact reason. 0x04 is usually for encoding uncompressed EC points but in that case it does not seem to make sense.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-18 18:40:27 +01:00
Pol Henarejos
755570e01a
Fix deletion key in test 50.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-18 18:38:05 +01:00
Pol Henarejos
4b264597d6
Fix race condition.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-14 09:58:06 +01:00
Pol Henarejos
67e3d908b3
Fix test key deletion.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-14 09:57:25 +01:00
Pol Henarejos
7ae76354ef
Added more tests for key_export.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-13 18:03:21 +01:00
Pol Henarejos
9291c2b4e3
delete_file() supports p1/p2
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-13 18:02:47 +01:00
Pol Henarejos
657ee18730
Added assert on deletion
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-13 18:02:31 +01:00
Pol Henarejos
132054c9b9
Public point is calculated everytime a private key is loaded.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-13 18:01:56 +01:00
Pol Henarejos
2a3b9b7474
Fix wrapping points.
...
Now it uses mbedtls_ecp_point_write_binary() for better control.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-13 18:01:20 +01:00
Pol Henarejos
4e73723747
Fix checking key domain set.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-10 15:59:52 +01:00
Pol Henarejos
09724d95db
Fix XKEK key generation.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-10 07:34:15 +01:00
Pol Henarejos
c1bfb597bc
Added first tests of key wrapping.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 20:10:25 +01:00
Pol Henarejos
fd53b88397
Added more tests to key domain tests.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 20:09:58 +01:00
Pol Henarejos
11e5338736
Check if key domain is not already initialized when initializing.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 20:09:32 +01:00
Pol Henarejos
3660120b11
Before wrapping, check if DKEK is properly configured.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 20:09:03 +01:00
Pol Henarejos
75ca1b57d9
Added support of counter, algorithms and key domain to AES too.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 18:39:06 +01:00
Pol Henarejos
7af67713e7
Add support for counter, algorithms and key domain in key generation.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 18:38:29 +01:00
Pol Henarejos
63c465138b
Added delete XKEK tests.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 18:28:31 +01:00
Pol Henarejos
4d569df108
Added dkek import in key domain tests.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 18:28:08 +01:00
Pol Henarejos
bee6a7bb92
Return error if a non-initialized key domain is deleted.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 18:27:47 +01:00
Pol Henarejos
e4583eb9c0
Fix potential crash on delete file.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 18:16:38 +01:00
Pol Henarejos
1c8582365d
Add manual trigger
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-09 08:48:09 +01:00
Pol Henarejos
daf71678c5
Added first XKEK tests.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-08 22:15:44 +01:00
Pol Henarejos
26f0775772
Move some certs to common place.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-08 22:15:11 +01:00
Pol Henarejos
ed674b379c
Zeroize ecdh key.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-08 11:15:02 +01:00
Pol Henarejos
6aa8d37d07
If a key does not belong to any key domain, it cannot be wrapped.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 23:45:37 +01:00
Pol Henarejos
963456051e
If public point is not found, it is computed automatically.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 23:45:10 +01:00
Pol Henarejos
1e90699a3f
Added more PKA tests.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 23:16:12 +01:00
Pol Henarejos
f8110a9d75
Update README.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 23:16:01 +01:00
Pol Henarejos
d81b21695f
If no key domain is found, 0 is used by default.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 23:15:50 +01:00
Pol Henarejos
51e9e6722e
Reset puk status on failed authentication.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 23:14:55 +01:00
Pol Henarejos
dba4630895
Add Public Key Authorization tests.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 17:28:56 +01:00
Pol Henarejos
ee73c6e781
Code style
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 17:28:23 +01:00
Pol Henarejos
2f63966c60
Fix checking status of PUK.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 15:55:59 +01:00
Pol Henarejos
e624f9ff72
Fix checking if PKU is enabled.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 11:15:07 +01:00
Pol Henarejos
fb4ff9424e
Call reset puk store on init.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 11:14:42 +01:00
Pol Henarejos
63b245b858
Fix initialize with PUK store memory.
...
Now it is cleared.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-07 11:14:13 +01:00
Pol Henarejos
cd525d91a3
Updated base flash memory for emulation to include CA CVC.
...
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2023-03-06 01:09:00 +01:00
