[Cryptech-Commits] [user/js/keywrap] branch master updated (6cfcc1e -> f7c9cd1)
git at cryptech.is
git at cryptech.is
Fri Jan 25 07:22:48 UTC 2019
This is an automated email from the git hooks/post-receive script.
joachim at secworks.se pushed a change to branch master
in repository user/js/keywrap.
from 6cfcc1e Adding a huge, self testing test case.
add 1304440 Adding API support for key loaded status and key timeout control. Added ports in the core to support key status and timeout. Updated core testbench to match the new interface.
add f1e48a9 Adding untested code to implement timer controlled automatic zeroisation of key loaded into the aes core.
add 2841e92 Adding a more sane default timeout value.
add 31ccc06 Adding support for SW to keep loaded key alive by reading status. Adding support for SW to trigger zeroisation of a loaded key.
add 4665dcc Adding test case for auto_zeroise. Can see that a loaded key gets wiped after timeout. Status bits looks fishy though.
add 462c86f Zeroisation of wrapper key registers. Adding reset of key_loaded register.
add b57fa44 Fixed some bugs in auto-zeroise functionality. Now it really zeroises key automatically. It seems to work, but needs a bit more testing.
add 3c0ce8c Splitted the auto-zeroise test case into three separate tests.
add 0500077 Cleaned up and made auto zeroise test case 1 self-testing:
add b03f8a2 valid should not be set from reset. There is no valid data.
add acd123d Adding the same API hardening to keywrap as implemented for other cores after the Cryptech audit.
add 3455dd0 Fixed parameterized widths.
add dddf349 Adding test case that verifies that SW can keep a key alive by reading status register.
add e481321 Add testcase that verifies forced zeroisation.
add 4b8d7ab Adding key timeout output port to allow core to inform the top level wrapper that timeout has occured. Added functionality to zeroise API key registers when timout has happened. Updated all auto_zeroise test cases to check that API key registers are properly zeroised.
add 5827799 Debugging keywrap after auto_zeroise. Now the core starts processing as expected.
add f7c9cd1 Added non-zero default timeout value in core. This fixes the keywrap problems by not automatically reset the key in the API. Enabled all testcases and disabled excessive debug outputs.
No new revisions were added by this update.
Summary of changes:
src/rtl/keywrap.v | 102 ++++++++---
src/rtl/keywrap_core.v | 128 +++++++++++++-
src/tb/tb_keywrap.v | 444 +++++++++++++++++++++++++++++++++++++++++++----
src/tb/tb_keywrap_core.v | 24 ++-
4 files changed, 628 insertions(+), 70 deletions(-)
More information about the Commits
mailing list