Commit Graph

  • 6c012f715c Fix time-of-check time-of-use filesystem race condition main Pol Henarejos 2026-07-13 01:29:36 +02:00
  • 8ffd5d94ab Fix printf format. Pol Henarejos 2026-07-13 01:29:21 +02:00
  • 50481a7671 Use blink n times to blink 3 times in rescue. Pol Henarejos 2026-07-12 23:56:06 +02:00
  • 8ec7171dc3 Add a function to blink n times. Pol Henarejos 2026-07-12 23:55:54 +02:00
  • cf103be82b Fix FORCE_BUTTON_WAIT Pol Henarejos 2026-07-12 23:25:20 +02:00
  • 7c38eced51 CCID now bounds initial XfrBlock APDU responses to the advertised payload budget and converts oversized responses into 61xx chaining instead of cutting off the status word. Pol Henarejos 2026-07-12 22:00:55 +02:00
  • a613edd638 Added APDU response limiting/chaining helper Pol Henarejos 2026-07-12 21:59:34 +02:00
  • 154682db4a Add 30-second idle and 60-second pre-request deadlines, updates activity timestamps during TCP/TLS progress, and apply receive timeouts to emulation sockets. Pol Henarejos 2026-07-12 20:42:56 +02:00
  • 799e78d2e1 Bounds-checks each encoded authenticated TLV and ISO padding before appending to the fixed secure-messaging input buffer. Pol Henarejos 2026-07-12 20:41:48 +02:00
  • 5063acbf6c Reject APDU frames shorter than a header and frames whose short or extended Lc/Le declaration does not exactly fit the received frame. Pol Henarejos 2026-07-12 19:37:28 +02:00
  • bc310b3aa1 Verify remaining bytes before every BER-TLV tag, length, and value read/advance. Pol Henarejos 2026-07-12 19:37:09 +02:00
  • 45f6a32104 Cap USB reads to remaining receive-buffer capacity and reset a full incomplete frame instead of writing beyond the fixed buffer. Pol Henarejos 2026-07-12 19:36:36 +02:00
  • e6b991972f Upgrade libs Pol Henarejos 2026-07-10 22:02:04 +02:00
  • 16ee89c616 In HID, ensure the whole packet can be processed. Otherwise, wait for a completion. Pol Henarejos 2026-07-10 16:09:55 +02:00
  • d131f2c235 Use FORCE_WAIT_BUTTON to override button wait. Pol Henarejos 2026-07-10 13:11:56 +02:00
  • 2cf8aae3fc Add sanity check to ensure core1 in async flash commits. Pol Henarejos 2026-07-05 12:12:12 +02:00
  • 815a5b755c Do not run flash task in emulation. Pol Henarejos 2026-07-05 12:06:11 +02:00
  • 532e7378af Use AES-GCM to encrypt keydev. Pol Henarejos 2026-07-04 12:18:33 +02:00
  • 2fc0f102d2 Add static RAM plugin Pol Henarejos 2026-06-30 21:16:15 +02:00
  • db53eb8ad8 Add audit system. Pol Henarejos 2026-06-30 13:56:08 +02:00
  • 92c1aee421 Add nodes to each signal to avoid looping whole struct. Pol Henarejos 2026-06-30 13:55:44 +02:00
  • d811b2b233 Add plugin manager system. Pol Henarejos 2026-06-30 11:53:18 +02:00
  • 76601bced4 Fix button force. Pol Henarejos 2026-06-26 18:08:20 +02:00
  • 066f88a87b Stop thread on cancel. Pol Henarejos 2026-06-22 19:27:55 +02:00
  • 88b40bb8bb Fix P-2. Pol Henarejos 2026-06-22 19:05:05 +02:00
  • b7b6126314 Add support for LED RGB order (ws2812/neopixel). Pol Henarejos 2026-06-22 13:44:50 +02:00
  • 7fcfa28781 Revert trusted zone architecture. Pol Henarejos 2026-06-22 00:02:33 +02:00
  • 77fc60f5ea Add dynamic search file filtering. Pol Henarejos 2026-06-21 20:41:26 +02:00
  • f38da1c762 Add flash_commit_sync() to force a sync when committing. Pol Henarejos 2026-06-21 20:14:57 +02:00
  • 14191e1aee Wipe flash on clear. Pol Henarejos 2026-06-21 20:02:15 +02:00
  • e322dc9ad4 Fix MAC verification constantness. Pol Henarejos 2026-06-21 20:01:31 +02:00
  • 38e0c58d1b Add system interface for mbedtls. Pol Henarejos 2026-06-21 20:39:59 +02:00
  • 5dfc7d51d2 Fix mbedtls link runtime resolution. Pol Henarejos 2026-06-11 22:07:37 +02:00
  • f94c74a74c Fix build for 2040 Pol Henarejos 2026-06-11 16:45:05 +02:00
  • 3a142cb575 Make trust region board invariant. Pol Henarejos 2026-06-10 17:30:00 +02:00
  • 0ed308087a Disable self tests. Pol Henarejos 2026-06-10 11:49:20 +02:00
  • d7fb22d39a Added trusted region. Pol Henarejos 2026-06-08 16:40:58 +02:00
  • 8a87b0d2de Fix options macro in case an arg is disabled. Pol Henarejos 2026-06-04 20:19:22 +02:00
  • 5fd26200ea Refactor HWRNG to be less blocking. Pol Henarejos 2026-06-02 17:14:04 +02:00
  • 0245933224 Emit completed if timeout is 0. Pol Henarejos 2026-06-01 19:30:47 +02:00
  • 13d2e84595 Harden cross-core shared completion state Pol Henarejos 2026-06-01 13:18:19 +02:00
  • f8338f0d01 Reduce BOOTSEL polling frequency in wait loop Pol Henarejos 2026-06-01 13:18:10 +02:00
  • 018d4e6ff1 Rate-limit core0 card_status polling loops Pol Henarejos 2026-06-01 13:17:52 +02:00
  • b13e2ebe15 Avoid blocking under mutex in usb_send_event Pol Henarejos 2026-06-01 13:17:42 +02:00
  • 2ed315cd81 Replace startup busy-spins with bounded retries Pol Henarejos 2026-06-01 13:17:27 +02:00
  • 9611a81898 Add core0 loop yield hint Pol Henarejos 2026-06-01 13:17:10 +02:00
  • 49edef1d3f Add cancel button event. Pol Henarejos 2026-06-01 01:40:31 +02:00
  • eb26a96d3b Add button signals. Pol Henarejos 2026-05-31 20:09:28 +02:00
  • d711f33721 Add signals Pol Henarejos 2026-05-31 18:54:22 +02:00
  • 1a289db1cd Fix otp first build. Pol Henarejos 2026-05-29 11:36:40 +02:00
  • b3ce44f569 Rename asn1 -> tlv, as it reflects better the purpose. Pol Henarejos 2026-05-18 16:41:48 +02:00
  • 3ddb459e5c Add stop-n-wait mechanism to avoid sending too huge payloads. Pol Henarejos 2026-05-18 16:41:27 +02:00
  • a9261e34ad Small tweaks Pol Henarejos 2026-05-15 17:15:35 +02:00
  • 6e2a2aef71 Fix esp32 MLDSA build. Pol Henarejos 2026-05-15 14:18:12 +02:00
  • f4d0ca2933 Fix all_header location. Pol Henarejos 2026-05-15 12:21:14 +02:00
  • e83f0b6b52 Added ML-DSA. Pol Henarejos 2026-05-15 11:16:45 +02:00
  • 24dd4b2e69 Add PIN protection for TPM in windows and linux. Pol Henarejos 2026-05-15 10:30:46 +02:00
  • 6f9bc55004 Disable alignment warn Pol Henarejos 2026-05-14 20:25:57 +02:00
  • 3d55f3a991 Fix warnings. Needs alignment Pol Henarejos 2026-05-14 20:13:57 +02:00
  • 54317f8d43 Add otp for windows and linux. Pol Henarejos 2026-05-14 19:19:09 +02:00
  • 7f53d7f748 Fix warnings Pol Henarejos 2026-05-14 19:18:39 +02:00
  • 08507069bd Derive secp256k1 from SE. Pol Henarejos 2026-05-14 00:36:40 +02:00
  • d590a21738 Refactor OTP to add more platforms. Pol Henarejos 2026-05-13 20:16:49 +02:00
  • 141d62da01 Fix warnings Pol Henarejos 2026-05-13 15:56:40 +02:00
  • 4507bb68a6 Fix conditional build. Pol Henarejos 2026-05-13 00:37:06 +02:00
  • d868a351da Add libcvc as a component. Pol Henarejos 2026-05-13 00:29:20 +02:00
  • 61457e1b8e Fix build Pol Henarejos 2026-05-13 00:25:26 +02:00
  • 15148acab5 Add fallback serials for emulation. Pol Henarejos 2026-05-12 22:26:01 +02:00
  • d3ce3c20dc Fix random serial DER encoding. Pol Henarejos 2026-05-12 19:48:30 +02:00
  • a4a1651ed4 Fix race condition when generating key. Pol Henarejos 2026-05-12 19:04:01 +02:00
  • b3c91f068d Add rest query get. Pol Henarejos 2026-05-12 18:28:17 +02:00
  • 45017a514e Add optional query parser. Pol Henarejos 2026-05-12 14:49:01 +02:00
  • 4a168ae6c0 Fix last_activity and last_seq checks. Pol Henarejos 2026-05-09 00:58:35 +02:00
  • 525b87cd72 Zeroize critical buffers. Pol Henarejos 2026-05-08 19:43:46 +02:00
  • 5838d6f443 Add libcvc dep Pol Henarejos 2026-05-07 01:33:38 +02:00
  • 1be7acaedd Fix warnings Pol Henarejos 2026-05-06 11:31:07 +02:00
  • 49564e2e5e Remove printf Pol Henarejos 2026-05-05 20:24:32 +02:00
  • 084aa8c44b Fix when olen == 0 Pol Henarejos 2026-05-05 01:55:22 +02:00
  • e0a8380dcd Add b64decode len. Pol Henarejos 2026-05-04 21:10:18 +02:00
  • f8db7613b6 Fix warnings Pol Henarejos 2026-05-04 15:16:17 +02:00
  • 869ef09f34 Fix check supported content type. Pol Henarejos 2026-05-04 09:46:26 +02:00
  • 0cc24a9637 Allow non-json / x-pem requests and responses. Pol Henarejos 2026-05-04 01:01:30 +02:00
  • c4bffd5433 Add stdio Pol Henarejos 2026-05-02 11:38:59 +02:00
  • d24cdd6c16 Fix build. Pol Henarejos 2026-05-01 21:41:03 +02:00
  • 9cb83e3abc Use ecp keypair calc public instead. Pol Henarejos 2026-05-01 20:57:58 +02:00
  • 92b8c644d8 Fix conditional dep build. Pol Henarejos 2026-05-01 19:44:06 +02:00
  • 810c1a88c3 Unregister submodules Pol Henarejos 2026-05-01 19:37:15 +02:00
  • dbc8ff4a4a Use dynamic dependence resolver. Pol Henarejos 2026-05-01 19:29:16 +02:00
  • e7be1171da Fix include header. Pol Henarejos 2026-05-01 18:30:05 +02:00
  • b4813e9db2 Fix build Pol Henarejos 2026-05-01 12:59:36 +02:00
  • ee13b6904a Intercept /cancel Pol Henarejos 2026-04-30 15:55:46 +02:00
  • 3a03000df1 Add cancelable key generation Pol Henarejos 2026-04-30 09:56:23 +02:00
  • 707cdf7bf4 Fix windows build. Pol Henarejos 2026-04-29 15:36:53 +02:00
  • 0abea5b6b2 Add background jobs. Pol Henarejos 2026-04-28 00:40:05 +02:00
  • 3fa5204949 Fix request signature. Pol Henarejos 2026-04-28 00:19:50 +02:00
  • 3d3b46a5b5 Fix ESP build. Pol Henarejos 2026-04-27 20:33:06 +02:00
  • cbc48dd8d7 Fix memory non-freed Pol Henarejos 2026-04-27 20:32:57 +02:00
  • 6069c3dc2e Fix rare race condition with hwrng. Pol Henarejos 2026-04-27 20:32:28 +02:00
  • dcf747a766 Fix tcp writes in slow boards. Pol Henarejos 2026-04-27 12:15:50 +02:00
  • 3789ed3596 Fix interface launch. Pol Henarejos 2026-04-27 10:58:08 +02:00