Commit Graph

  • 23038e2499 Add libtpm to autobuild. main Pol Henarejos 2026-07-13 00:44:26 +02:00
  • e456fec17e Add blink 3 times on PSO and internal authentication. Pol Henarejos 2026-07-13 00:33:54 +02:00
  • f25cc97276 Add sanity check bounds. Pol Henarejos 2026-07-12 22:49:40 +02:00
  • ba5573195b PIV MOVE KEY rejects P1 == P2 before modifying source data. PIV SET PIN RETRIES now requires both management-key and current-PIN authentication. PIV GENERAL AUTHENTICATE rejects metadata records shorter than the 3-byte policy header. Pol Henarejos 2026-07-12 22:48:27 +02:00
  • 34ec50c124 VERIFY P2=82 now uses PW1’s shared retry counter and never probes EF_RC. Pol Henarejos 2026-07-12 22:48:13 +02:00
  • ed942d5614 PW1.81/PW1.82/PW3 authentication latches are now independent. Pol Henarejos 2026-07-12 22:48:00 +02:00
  • 6e7bb818ae C4 rejects payloads longer than four bytes, preventing retry-counter corruption. Pol Henarejos 2026-07-12 22:47:06 +02:00
  • a83561c597 RC ships deactivated to avoid an attacker to reset the user PIN (PW1) and do operations. Pol Henarejos 2026-07-10 16:55:22 +02:00
  • 64a0666e02 Add tests for short fingerprint zero-padded data. Pol Henarejos 2026-07-10 16:51:14 +02:00
  • a22f36e03d Add support for admin-less mode. Pol Henarejos 2026-07-10 16:37:24 +02:00
  • 950b4fc5ec Move tests to bookworm nightly-main Pol Henarejos 2026-07-09 18:22:39 +02:00
  • f1091c2fad Add libtss Pol Henarejos 2026-07-09 18:10:53 +02:00
  • 4071217b56 Move Pico Keys SDK pointer. Pol Henarejos 2026-07-09 17:27:32 +02:00
  • 64b1560a59 Add OpenPGP and PIV regression coverage Pol Henarejos 2026-07-09 17:21:44 +02:00
  • def00b5dc8 fix(piv): bind management authentication flows Pol Henarejos 2026-07-09 17:21:26 +02:00
  • d157ea9072 fix(openpgp): harden stored data and key handling Pol Henarejos 2026-07-09 17:21:13 +02:00
  • 951badbf51 Use new TLV format. Pol Henarejos 2026-06-21 20:40:26 +02:00
  • e63b26f91a Fix verification constantness. Pol Henarejos 2026-06-21 20:26:07 +02:00
  • d4a45836be Harden GitHub workflows Pol Henarejos 2026-06-12 17:35:21 +02:00
  • 994553bfd7 Fix pico build Pol Henarejos 2026-05-02 12:05:49 +02:00
  • 328c3112ac Use ecp keypair calc public instead. Pol Henarejos 2026-05-01 21:04:15 +02:00
  • 5ce888b75b Use dynamic dependence resolver. Pol Henarejos 2026-05-01 19:50:40 +02:00
  • 1ef40f5826 Upgrade PicoKeys SDK Pol Henarejos 2026-05-01 18:53:13 +02:00
  • d9193129c7 Upgrade to v4.6 v4.6 Pol Henarejos 2026-04-08 16:29:38 +02:00
  • 402c92ea83 Upgrade Pico Keys SDK 8.6 and MbedTLS v3.6.6 Pol Henarejos 2026-04-06 20:04:37 +02:00
  • ac1e3af410 Fix include. Pol Henarejos 2026-04-06 19:58:14 +02:00
  • 5a7f1dd781 Migrate to the new PIN KDF system. Pol Henarejos 2026-04-01 16:39:16 +02:00
  • a0f8d67821 Apply strict build. Pol Henarejos 2026-03-09 12:18:18 +01:00
  • 757a000f77 Update pico keys sdk. Pol Henarejos 2026-03-07 18:05:33 +01:00
  • 4fba684a24 Fix duplicated file entry. Pol Henarejos 2026-03-07 18:05:20 +01:00
  • 0b7beeec8c Introduce GET BULK DATA to execute GET DATA in multiple DO with a single APDU. Pol Henarejos 2026-02-19 18:30:50 +01:00
  • 1f037da326 Do no parse flash data as TLV. Pol Henarejos 2026-02-19 15:57:59 +01:00
  • ffbdef14b6 Set rollback globally to avoid incompatibilities. Pol Henarejos 2026-02-19 15:50:32 +01:00
  • ad59aa8c1a Fixed ACL for EF_CHR_CERT. Pol Henarejos 2026-02-18 00:52:49 +01:00
  • fcca95715e Fixed a bug allowing to write without PW3. Pol Henarejos 2026-02-18 00:52:19 +01:00
  • 704df76499 DO is cleared when no data is provided. Pol Henarejos 2026-02-18 00:38:52 +01:00
  • e6cc190c4f Do not interpret private DO as TLV. Pol Henarejos 2026-02-18 00:29:59 +01:00
  • 615737807a Add support for private DO. Pol Henarejos 2026-02-17 16:46:03 +01:00
  • e563bb3379 Fixed pw2 verify persistence. Pol Henarejos 2026-02-17 16:45:49 +01:00
  • 374cff588c Fix secure boot enable. Pol Henarejos 2026-02-16 16:31:12 +01:00
  • ca8d81fd20 Fix key rotation. Now also rotates cert & metadata. Pol Henarejos 2026-02-16 01:32:47 +01:00
  • 5d71e69c1d Do not allow slot move from retired to active. Pol Henarejos 2026-02-16 00:52:25 +01:00
  • 75691b6a42 Fix crash when attestating. Pol Henarejos 2026-02-16 00:46:58 +01:00
  • 811f33e282 Fix extension set in attestation. Pol Henarejos 2026-02-16 00:46:26 +01:00
  • 90b62f067d Add support for HIGH/LOW ESP32 LED Pol Henarejos 2026-02-04 23:47:07 +01:00
  • 2e0f9d6b36 Upgrade to v4.4 v4.4 Pol Henarejos 2026-02-01 20:42:56 +01:00
  • 6ef122528f Fix phy marker write. Pol Henarejos 2026-02-01 20:42:43 +01:00
  • 9c1dc102ce Upgrade to Pico Keys SDK 8.5 Pol Henarejos 2026-01-29 17:58:40 +01:00
  • a94603b9e2 Use new VID:PID allocated to Pico OpenPGP. Pol Henarejos 2026-01-22 12:34:23 +01:00
  • 6af4cef91b Use new layout Pol Henarejos 2026-01-22 12:14:27 +01:00
  • 551334a447 Clear dek on error. Pol Henarejos 2026-01-22 12:14:12 +01:00
  • 2ce4f22622 Update README with up-to-date info. Pol Henarejos 2026-01-06 21:20:24 +01:00
  • 822038aba2 Upgrade to v4.2 v4.2 Pol Henarejos 2026-01-05 19:53:41 +01:00
  • 70b5e35bde Upgrade Pico Keys SDK to v8.2 Pol Henarejos 2026-01-05 19:52:56 +01:00
  • 4638a1c926 Disable button press by default since LED may not be properly configured until it is commissioned. Pol Henarejos 2026-01-05 19:41:02 +01:00
  • b6366ef1c0 Fix build. Pol Henarejos 2025-12-29 20:37:17 +01:00
  • d4d8ad86d5 Blink led three times to acknowledge proper commissioning. Pol Henarejos 2025-12-29 20:16:44 +01:00
  • c51d3e7d5e Fix pimoroni led Pol Henarejos 2025-12-27 22:04:37 +01:00
  • 757d163ce9 Move pointer Pol Henarejos 2025-12-27 16:03:19 +01:00
  • 2513608ba9 Releaser is available up to 6.7.0 Pol Henarejos 2025-12-26 19:53:32 +01:00
  • 3710146074 Build only necessary boards Pol Henarejos 2025-12-11 20:03:50 +01:00
  • 5462458622 Update pointer Pol Henarejos 2025-12-11 19:37:06 +01:00
  • 353471c599 Revert "Move EDDSA to another branch." Pol Henarejos 2025-12-11 19:36:39 +01:00
  • b2538cf2b6 Revert "Move Secure Boot to another branch." Pol Henarejos 2025-12-11 19:36:33 +01:00
  • e136bb26e3 Move Secure Boot to another branch. Pol Henarejos 2025-12-09 21:40:02 +01:00
  • b1421e176b Move EDDSA to another branch. Pol Henarejos 2025-12-09 16:07:34 +01:00
  • 2a14c771cb Move is_gpg flag for fido2. Pol Henarejos 2025-12-07 20:35:08 +01:00
  • 90e77f7c61 Yubico and GnuPG interpretate the standard in different ways. While Yubico follows strictly the spec and expects the TAG encapsulating the output of GET_DATA, GnuPG expects consecutive DO in the response. A possible workaround is to detect whether sub-DO are called (GnuPG) or management AID is called (Yubico). v4.0 Pol Henarejos 2025-12-05 19:11:21 +01:00
  • 504d90a2b3 Fix MSOS/BOS descriptor. v4.0-eddsa1 Pol Henarejos 2025-12-03 16:35:10 +01:00
  • c35d6f73d9 Set anti-rollback version only when the binary is signed. Pol Henarejos 2025-12-02 09:56:40 +01:00
  • 595455bbbc Increase anti-rollback version to 2. Pol Henarejos 2025-12-01 23:50:57 +01:00
  • 7a27dde253 Add anti-rollback argument. Pol Henarejos 2025-12-01 23:50:32 +01:00
  • e4fec2ab22 Merge pull request #43 from MageDelfador/esp32pr Pol Henarejos 2025-12-01 17:04:06 +01:00
  • 45d174b8bf Upgrade to v4.0 Pol Henarejos 2025-12-01 17:03:43 +01:00
  • 73053bdc6d Upodate mbedtls only when necessary. Pol Henarejos 2025-12-01 17:03:34 +01:00
  • 7936e20b9a Add missing definitions for EdDSA Pol Henarejos 2025-12-01 15:31:35 +01:00
  • 9606e34630 Upgrade mbedTLS only when necessary Pol Henarejos 2025-12-01 13:21:38 +01:00
  • 81b012c0dd Fix on AID selection. It should support shorter AID if matches. Pol Henarejos 2025-12-01 01:45:26 +01:00
  • 42a13b2777 Fix start-up test script Pol Henarejos 2025-11-30 19:11:53 +01:00
  • 9742991deb Add version definitions. Pol Henarejos 2025-11-30 18:39:10 +01:00
  • d938720ab5 Upgrade Pico Keys SDK to v8.0 Pol Henarejos 2025-11-30 18:32:12 +01:00
  • b80a4693c6 Use max freq in esp32 Pol Henarejos 2025-11-30 18:31:54 +01:00
  • 321d02eb0d Add template for pull requests. Pol Henarejos 2025-10-27 08:58:23 +01:00
  • 296fbd142f Add CONTRIBUTING Pol Henarejos 2025-10-27 08:54:16 +01:00
  • b606b75a12 Update license model and add ENTERPRISE.md Pol Henarejos 2025-10-26 20:40:01 +01:00
  • 331f4f1c4e Relicense project under the GNU Affero General Public License v3 (AGPLv3) and add the Enterprise / Commercial licensing option. Pol Henarejos 2025-10-26 20:24:47 +01:00
  • abb432dd31 Update sdkconfig.defaults MageDelfador 2025-10-15 23:44:38 +08:00
  • f3b7f3b42d Fix build Pol Henarejos 2025-09-30 17:26:17 +02:00
  • d76e53f80b Do not call pico_sdk_init. Pol Henarejos 2025-08-25 01:41:01 +02:00
  • fc663cfdd6 Upgrade to Pico SDK 2.2 Pol Henarejos 2025-08-13 13:24:27 +02:00
  • 47ac55abd1 Stick with Espressif v5.5 Pol Henarejos 2025-08-13 13:22:30 +02:00
  • 286893bdb6 Stick with Espressif v5.5 Pol Henarejos 2025-08-12 00:52:00 +02:00
  • 41ae81067c Merge remote-tracking branch 'origin/main' Pol Henarejos 2025-07-09 09:39:05 +02:00
  • 9c878cc5b6 Fix PIV default keys indication. Pol Henarejos 2025-07-08 14:13:23 +02:00
  • 31ac28c7de Fix touch policy on mgmt key change. Pol Henarejos 2025-07-08 13:51:24 +02:00
  • 33ce1c50aa Add autobuild for RP2350. Pol Henarejos 2025-07-05 00:52:30 +02:00
  • edfcd087c1 Fix cross build. Pol Henarejos 2025-06-22 20:26:53 +02:00
  • a713eb4e03 Fix ESP32 build. Pol Henarejos 2025-06-22 20:22:38 +02:00
  • f2fe6dd5c2 Update README.md Pol Henarejos 2025-05-30 11:22:59 +02:00
  • 1a24a9ed1b Revert "Add card personalize 2 tests" Pol Henarejos 2025-05-13 15:44:42 +02:00