Commit Graph

916 Commits (5b288d480d7bc5598d47dc78832907ff377b38d8)

Author SHA1 Message Date
JacobBarthelmeh 5b288d480d
Merge pull request #306 from dgarske/rel_v3.0_prep
Prep for release v3.0
2023-10-30 14:02:18 -06:00
David Garske a10a10db5d Added v3.0 release notes and updated version. 2023-10-30 12:02:28 -07:00
David Garske 9cad7f4e24 Fix some of the example TODO's. Fixes for seal/unseal example. Fixes for TLS with param enc. Fix signed_timestamp with ECC. 2023-10-30 12:00:37 -07:00
David Garske f35dbbbb30 Fixes for using Windows TBS API. The `wolfTPM2_NVStoreKey` should return `TPM_RC_COMMAND_CODE` or `TPM_E_COMMAND_BLOCKED` for the `WOLFTPM_IS_COMMAND_UNAVAILABLE` macro. Add better enable option name `--enable-wintbs` (currently is `--enable-winapi`. 2023-10-30 10:06:17 -07:00
David Garske 2d14cd2297 Fixes for building wolfCrypt with no RSA (--disable-rsa / NO_RSA). 2023-10-23 14:05:10 -07:00
David Garske 1041898120 Compiler warning files with `NO_FILESYSTEM`. 2023-10-23 14:04:44 -07:00
David Garske 862617c07b Update the TODO list in the README. 2023-10-23 14:04:44 -07:00
John Bland 45847e3f63
Merge pull request #307 from dgarske/csr_sigtype
Fixes and improvements for wolfTPM CSR wrappers
2023-10-23 16:57:15 -04:00
David Garske cfd96d595e Add CI tests for CSharp wrappers. 2023-10-23 11:16:26 -07:00
David Garske 7a11cb2213 Fix support for ECC 384-bit only support. Tested with: `./configure --enable-wolftpm CFLAGS="-DECC_USER_CURVES -DNO_ECC256 -DHAVE_ECC384" --disable-examples --disable-crypttests && make` 2023-10-20 15:08:45 -07:00
David Garske 8ae11cf9eb Add wrapper support for setting key usage (not just extended key usage). 2023-10-20 14:40:49 -07:00
David Garske b9c51335a4 Fix for trying to use a custom wolfTPM CSR `sigType`. The `csr->req.sigType` was being initialized to CTC_SHA256wRSA, and not allowing override. 2023-10-18 14:16:28 -07:00
John Bland 79105f9466
Merge pull request #305 from dgarske/auth_refactor
TPM command authentication refactor
2023-10-12 17:41:08 -04:00
David Garske cdcdf389c3 Fixes for command auth flag typo. Fix to make sure extra auth are not provided. 2023-10-12 14:19:42 -07:00
David Garske f3e1bbbf3d Refactor of the command authentication. If command does not require auth do not supply it. ZD 16689 2023-10-12 13:48:04 -07:00
John Bland ddbf4ef5fc
Merge pull request #303 from dgarske/structassignment
Fixes to avoid struct assignment and C++ build fixes
2023-10-12 13:48:05 -04:00
David Garske 0c7254d7c0 Fixes for building with C++. 2023-10-11 15:56:04 -07:00
David Garske 37c3bd2535 Fix for another struct assignment on `eccDetail.kdf`. ZD 16788 2023-10-11 14:51:25 -07:00
David Garske e9f89db538 Fixes to avoid struct assignment, which can result is unaligned access (use memcpy). 2023-10-11 14:51:25 -07:00
John Bland 241f55415c
Merge pull request #302 from dgarske/stm32_i2c
Fixes for STM32 I2C
2023-10-06 16:51:35 -04:00
John Bland 29634c226a
Merge pull request #304 from dgarske/cryptocb_cleanup
Relocate crypto callback code to its own code file
2023-10-06 16:23:53 -04:00
David Garske 5226df34d1 Improve STM HAL I2C performance by adding proper guard delay between wake, write and read. 2023-10-05 14:22:50 -07:00
David Garske 14d766512f Fixes for STM32 I2C. 2023-10-04 15:31:30 -07:00
David Garske 1848749026 Relocate crypto callback code to its own code file. 2023-09-28 08:07:13 -07:00
John Bland 352201ffe2
Merge pull request #300 from dgarske/various_20230922
Various build fixes
2023-09-27 14:42:26 -04:00
David Garske 49699b08fb Fix for building without public MP. 2023-09-22 11:07:55 -07:00
John Bland 5497830567
Merge pull request #299 from dgarske/unset_sess
Improvements/fixes to NV auth and session auth set/unset
2023-09-15 17:15:35 -04:00
David Garske 96cd17af1d Improvements/fixes to NV auth and session auth set/unset:
* Fix bug with NV name after first write (only appears when using HMAC session).
* Add new API `wolfTPM2_UnsetAuthSession` to unset auth index for a session and save off the nonce from the TPM. This allows auth to be unset/set again with the same session.
* Cleanup in the NV API's for unsetting of the auth to be handled by caller, not in API.
2023-09-15 14:03:11 -07:00
John Bland 312f104850
Merge pull request #298 from dgarske/policynv
Added new policy_nv example
2023-09-15 13:58:06 -04:00
David Garske 31cd20e645 Added new policy_nv example. 2023-09-11 14:37:12 -07:00
JacobBarthelmeh acdbc446d2
Merge pull request #296 from dgarske/secret_seal2
Seal with RSA fix, PCR extend auth and improvements to NVRAM examples
2023-09-08 15:27:14 -06:00
David Garske cb66597154 Fix for sealing with RSA (the nameAlg must be set). 2023-09-08 14:07:32 -07:00
David Garske 027ae8a4e9 Make sure PCR extend has the session auth cleared. Added -nvhandle argument to nvram examples. Cleanups for examples. 2023-09-08 08:14:39 -07:00
John Bland 50bfac48a9
Merge pull request #294 from dgarske/secret_seal
wolfTPM Support for sealing/unsealing based on a PCR that is signed externally
2023-09-01 12:47:16 -04:00
David Garske 23a5d2595b Fixes for small stack. 2023-08-31 13:37:22 -07:00
David Garske 8e1dce2c76 Take run_examples.sh out of make check and run manually in CI test to avoid parallel builds. 2023-08-31 13:04:33 -07:00
David Garske 8968d89f90 More CI fixes. 2023-08-31 12:29:13 -07:00
David Garske e2d502e773 Peer review fixes and getting CI to pass. 2023-08-31 09:53:39 -07:00
David Garske 97d8845c6f Added CI tests for all examples and additional build tests. 2023-08-30 15:11:24 -07:00
David Garske 78cd7190be Cleanups from testing. 2023-08-30 11:21:43 -07:00
David Garske a15260342f wolfTPM Support for sealing/unsealing based on a PCR that is signed externally. Use an external key to sign a PCR digest. Allows a new signed policy to be sent with updates to continue allowing a sealed secret to be unsealed when PCR's change. This resolves the issue with PCR brittleness. 2023-08-29 18:47:18 -07:00
John Bland 5b7e50a19c
Merge pull request #293 from dgarske/various_20230818
Handle unknown `TPM2_GetCapability` type and fix bad printf
2023-08-22 09:56:44 -04:00
David Garske 9a35d84b88 Fixed bad printf. Don't error on unknown `TPM2_GetCapability` type. 2023-08-18 11:28:21 -07:00
John Bland bbbafd68d0
Merge pull request #292 from dgarske/secure_rot4
Fixes for minor build issues
2023-08-16 19:18:54 -04:00
David Garske 4946592d7f Fix for `wolfTPM2_ImportPublicKeyBuffer` use of non-existent arg "pass". 2023-08-16 16:11:27 -07:00
David Garske 52668e994f Properly print NULL bin. 2023-08-16 15:06:01 -07:00
David Garske edd0c095bd Fix for public key API when missing `WOLFSSL_PUB_PEM_TO_DER`. 2023-08-16 13:43:55 -07:00
John Bland 2d0ae5f2a8
Merge pull request #291 from dgarske/secure_rot3
Improvements to the secure_rot example
2023-08-16 13:36:07 -04:00
David Garske d508180ee3 Fix custom -nvIndex= argument. 2023-08-16 08:08:10 -07:00
David Garske 5b6c7c0368 Improvements to the secure_rot example. Add support for manually placing hash. 2023-08-15 14:41:09 -07:00