Commit Graph

Select branches

Hide Pull Requests

main

plugin

#1

#11

#11

#15

#15

#16

#17

#17

#18

#18

#19

#2

#20

#21

#26

#27

#28

#29

#30

#30

#31

#32

#32

#33

#33

#34

#34

#4

#5

#6

#7

#8

v1.0

v1.1

v2.0

v3.0

v3.2

v3.4

v5.0

v7.0

v8.0

v8.4

v8.5

Mono Color

• 8e437f7ca6 Add support for non-validated containers main Pol Henarejos 2026-08-27 01:01:48 +02:00
• 7b23b54d88 Fix enrollment decoding in-place Pol Henarejos 2026-08-26 01:07:48 +02:00
• a15b699317 Cleared records are unlinked and zeroed, so every gap is reusable Pol Henarejos 2026-08-25 15:28:35 +02:00
• c791c1be12 Use file containers for vault Pol Henarejos 2026-08-25 02:00:06 +02:00
• 579dfe014b Move vault routines to SDK Pol Henarejos 2026-08-25 00:34:57 +02:00
• 300f6494d5 Do not preserve legacy when empty vault Pol Henarejos 2026-08-24 23:12:28 +02:00
• ae71b7b70d Add vault container Pol Henarejos 2026-08-24 22:54:56 +02:00
• 6ffbe463cb Make button presence async Pol Henarejos 2026-08-24 20:08:42 +02:00
• 7c5f4d9b95 Pin neopixel version Pol Henarejos 2026-08-23 21:40:42 +02:00
• 87cbaac98e Clean hardware sha256 state on free Pol Henarejos 2026-08-22 00:48:00 +02:00
• 4d2e6c25af Reconstruct query params from core1 job Pol Henarejos 2026-08-21 17:59:09 +02:00
• 01eadc39e9 Fix rp2350 build Pol Henarejos 2026-08-21 17:58:53 +02:00
• 5e2178adcb Fix connection ownership when dispatched. Pol Henarejos 2026-08-21 13:27:57 +02:00
• 9eedb0ef8d PicoKeys SDK 9 Pol Henarejos 2026-08-17 18:47:09 +02:00
• f4b2743599 Fix ESP build Pol Henarejos 2026-08-17 18:46:24 +02:00
• 3fdd3608ed Set anti-rollback to 5 Pol Henarejos 2026-08-17 17:29:24 +02:00
• 512de8c947 Harden command chaining Pol Henarejos 2026-08-14 20:01:58 +02:00
• 7844361ad2 Reject unsupported secure-messaging class bytes Pol Henarejos 2026-08-14 19:57:22 +02:00
• 4bcdaad49b Report chained APDU overflow as wrong length Pol Henarejos 2026-08-14 19:56:22 +02:00
• f0d58025e1 Fix FS record publication ordering (#35). Pol Henarejos 2026-08-14 00:05:24 +02:00
• 9b23d4b42d Parse only usb packets of 64 bytes. Pol Henarejos 2026-08-10 14:47:09 +02:00
• 0a572e2ce7 Fix INIT allocation to sequential indices. Pol Henarejos 2026-08-10 14:46:54 +02:00
• 192d324434 Do not copy fw to ram, as it increases in size and does not fit anymore. Pol Henarejos 2026-08-10 14:45:53 +02:00
• d5b98db16d Add time counting when pressing bootsel button. Pol Henarejos 2026-08-08 18:39:03 +02:00
• c2f612318d Fix require presence for rescue. Pol Henarejos 2026-08-08 01:47:15 +02:00
• a118d4c136 Add build to ignore. Pol Henarejos 2026-08-02 15:56:40 +02:00
• 3ffbcbb43a Add default RGB order to RGB. Pol Henarejos 2026-08-02 15:56:31 +02:00
• c9bc351fef fix: use size_t in secure message LE parsing Pol Henarejos 2026-07-30 14:18:27 +02:00
• 6f8fd64754 Make emulation build cleanly with MSVC Pol Henarejos 2026-07-29 19:08:14 +02:00
• 48974a6e24 RP2040 has no OTP, so we keep otp ptr to NULL. Pol Henarejos 2026-07-29 18:57:56 +02:00
• 95e7540424 Fix build. Pol Henarejos 2026-07-27 11:52:44 +02:00
• 843a3dc593 Make byte buffers track their current length Pol Henarejos 2026-07-27 11:25:45 +02:00
• 267e5819a4 Merge remote-tracking branch 'origin/main' Pol Henarejos 2026-07-27 03:12:27 +02:00
• 40375578c5 Use byte-array spans across SDK APIs Pol Henarejos 2026-07-27 03:09:30 +02:00
• 749534369a Add object store tests. Pol Henarejos 2026-07-26 22:19:31 +02:00
• a24137a2b8 Add reusable object container store lifecycle Pol Henarejos 2026-07-26 20:45:49 +02:00
• 9e39374f42 Make emulator CCID connectivity optional Pol Henarejos 2026-07-26 20:07:55 +02:00
• e3ade9854d Support separate roots for public object integrity Pol Henarejos 2026-07-18 00:32:10 +02:00
• b68cc7cfb6 Enforce HSM object policy when opening v1 private key material Pol Henarejos 2026-07-17 23:16:18 +02:00
• 5f4032fdfa Add bounded object-policy evaluation to the SDK Pol Henarejos 2026-07-17 22:14:38 +02:00
• 5e2c0336d1 Add object_crypto_provider. Pol Henarejos 2026-07-17 19:31:19 +02:00
• 0e864797cf Add provider-backed object record protection Pol Henarejos 2026-07-17 18:23:34 +02:00
• 5da7212f39 Add bounded authenticated object container codec Pol Henarejos 2026-07-17 18:02:58 +02:00
• 9056036bf4 Add authenticated atomic object transactions Pol Henarejos 2026-07-17 16:42:30 +02:00
• 93aa22703a Add namespace-aware opaque handles for stored objects Pol Henarejos 2026-07-17 15:41:34 +02:00
• e21c098fc0 Add versioned filesystem object envelope API Support strict object headers, generation tracking, bounded payload reads, and commit-aware metadata deletion while retaining optional legacy-object access. Pol Henarejos 2026-07-17 14:04:45 +02:00
• 4390947b87 Support multi-sector flash files with 32-bit lengths and cache draining Pol Henarejos 2026-07-16 21:30:53 +02:00
• e740b7be7d Fix esp32 build Pol Henarejos 2026-07-16 21:29:32 +02:00
• 5f3bfaf4a1 Rename file_metadata to file_static_entry to avoid confusion with EF_META. Pol Henarejos 2026-07-16 20:40:04 +02:00
• c8e90824ae Expand dynamic file index to 2048 entries Pol Henarejos 2026-07-16 20:37:35 +02:00
• 8ee7be69f3 Add more api functions. plugin Pol Henarejos 2026-07-16 16:11:11 +02:00
• 31b4db939c Not necessary enter and leave since mutex stays held from the begining. Pol Henarejos 2026-07-16 01:36:39 +02:00
• e4bad7453a RP2350 secure-boot key indices are restricted to slots 0..5 before OTP address/bit calculations. Pol Henarejos 2026-07-16 01:01:18 +02:00
• 9d7fb8bd61 Rejected empty/misaligned secure-message ciphertext and bounded secure-message response/MAC buffers Pol Henarejos 2026-07-15 22:36:51 +02:00
• 09c61abe2d Fixed extended-APDU length arithmetic, chained final-fragment overflow, and stale GET RESPONSE continuation handling Pol Henarejos 2026-07-15 22:36:32 +02:00
• 5a56cebb22 Fix serial in CI builds. Pol Henarejos 2026-07-15 01:34:09 +02:00
• 38079c3fef Add support for external device id for CI. Pol Henarejos 2026-07-14 16:10:02 +02:00
• 1251b1e63a Merge remote-tracking branch 'origin/main' Pol Henarejos 2026-07-14 11:44:20 +02:00
• a7991e0b5f Unpack lv_data and ec_curve_mbed_id. Pol Henarejos 2026-07-14 11:44:09 +02:00
• b0c7faee9c Add board_millis for emulation. Pol Henarejos 2026-07-14 01:30:42 +02:00
• 6c012f715c Fix time-of-check time-of-use filesystem race condition Pol Henarejos 2026-07-13 01:29:36 +02:00
• 8ffd5d94ab Fix printf format. Pol Henarejos 2026-07-13 01:29:21 +02:00
• 50481a7671 Use blink n times to blink 3 times in rescue. Pol Henarejos 2026-07-12 23:56:06 +02:00
• 8ec7171dc3 Add a function to blink n times. Pol Henarejos 2026-07-12 23:55:54 +02:00
• cf103be82b Fix FORCE_BUTTON_WAIT Pol Henarejos 2026-07-12 23:25:20 +02:00
• 7c38eced51 CCID now bounds initial XfrBlock APDU responses to the advertised payload budget and converts oversized responses into 61xx chaining instead of cutting off the status word. Pol Henarejos 2026-07-12 22:00:55 +02:00
• a613edd638 Added APDU response limiting/chaining helper Pol Henarejos 2026-07-12 21:59:34 +02:00
• 154682db4a Add 30-second idle and 60-second pre-request deadlines, updates activity timestamps during TCP/TLS progress, and apply receive timeouts to emulation sockets. Pol Henarejos 2026-07-12 20:42:56 +02:00
• 799e78d2e1 Bounds-checks each encoded authenticated TLV and ISO padding before appending to the fixed secure-messaging input buffer. Pol Henarejos 2026-07-12 20:41:48 +02:00
• 5063acbf6c Reject APDU frames shorter than a header and frames whose short or extended Lc/Le declaration does not exactly fit the received frame. Pol Henarejos 2026-07-12 19:37:28 +02:00
• bc310b3aa1 Verify remaining bytes before every BER-TLV tag, length, and value read/advance. Pol Henarejos 2026-07-12 19:37:09 +02:00
• 45f6a32104 Cap USB reads to remaining receive-buffer capacity and reset a full incomplete frame instead of writing beyond the fixed buffer. Pol Henarejos 2026-07-12 19:36:36 +02:00
• e6b991972f Upgrade libs Pol Henarejos 2026-07-10 22:02:04 +02:00
• 16ee89c616 In HID, ensure the whole packet can be processed. Otherwise, wait for a completion. Pol Henarejos 2026-07-10 16:09:55 +02:00
• d131f2c235 Use FORCE_WAIT_BUTTON to override button wait. Pol Henarejos 2026-07-10 13:11:56 +02:00
• 2cf8aae3fc Add sanity check to ensure core1 in async flash commits. Pol Henarejos 2026-07-05 12:12:12 +02:00
• 815a5b755c Do not run flash task in emulation. Pol Henarejos 2026-07-05 12:06:11 +02:00
• 532e7378af Use AES-GCM to encrypt keydev. Pol Henarejos 2026-07-04 12:18:33 +02:00
• 2776b39a49 Add more imports Pol Henarejos 2026-07-03 21:12:34 +02:00
• 2fc0f102d2 Add static RAM Pol Henarejos 2026-06-30 21:16:15 +02:00
• db53eb8ad8 Add audit system. Pol Henarejos 2026-06-30 13:56:08 +02:00
• 92c1aee421 Add nodes to each signal to avoid looping whole struct. Pol Henarejos 2026-06-30 13:55:44 +02:00
• d811b2b233 Add plugin manager system. Pol Henarejos 2026-06-30 11:53:18 +02:00
• 76601bced4 Fix button force. Pol Henarejos 2026-06-26 18:08:20 +02:00
• 066f88a87b Stop thread on cancel. Pol Henarejos 2026-06-22 19:27:55 +02:00
• 88b40bb8bb Fix P-2. Pol Henarejos 2026-06-22 19:05:05 +02:00
• b7b6126314 Add support for LED RGB order (ws2812/neopixel). Pol Henarejos 2026-06-22 13:44:50 +02:00
• 7fcfa28781 Revert trusted zone architecture. Pol Henarejos 2026-06-22 00:02:33 +02:00
• 77fc60f5ea Add dynamic search file filtering. Pol Henarejos 2026-06-21 20:41:26 +02:00
• f38da1c762 Add flash_commit_sync() to force a sync when committing. Pol Henarejos 2026-06-21 20:14:57 +02:00
• 14191e1aee Wipe flash on clear. Pol Henarejos 2026-06-21 20:02:15 +02:00
• e322dc9ad4 Fix MAC verification constantness. Pol Henarejos 2026-06-21 20:01:31 +02:00
• 38e0c58d1b Add system interface for mbedtls. Pol Henarejos 2026-06-21 20:39:59 +02:00
• 5dfc7d51d2 Fix mbedtls link runtime resolution. Pol Henarejos 2026-06-11 22:07:37 +02:00
• f94c74a74c Fix build for 2040 Pol Henarejos 2026-06-11 16:45:05 +02:00
• 3a142cb575 Make trust region board invariant. Pol Henarejos 2026-06-10 17:30:00 +02:00
• 0ed308087a Disable self tests. Pol Henarejos 2026-06-10 11:49:20 +02:00
• d7fb22d39a Added trusted region. Pol Henarejos 2026-06-08 16:40:58 +02:00
• 8a87b0d2de Fix options macro in case an arg is disabled. Pol Henarejos 2026-06-04 20:19:22 +02:00
• 5fd26200ea Refactor HWRNG to be less blocking. Pol Henarejos 2026-06-02 17:14:04 +02:00