[Cryptech-Commits] [user/js/keywrap] branch master updated (6cfcc1e -> f7c9cd1)

git at cryptech.is git at cryptech.is
Fri Jan 25 07:22:48 UTC 2019


This is an automated email from the git hooks/post-receive script.

joachim at secworks.se pushed a change to branch master
in repository user/js/keywrap.

    from 6cfcc1e  Adding a huge, self testing test case.
     add 1304440  Adding API support for key loaded status and key timeout control. Added ports in the core to support key status and timeout. Updated core testbench to match the new interface.
     add f1e48a9  Adding untested code to implement timer controlled automatic zeroisation of key loaded into the aes core.
     add 2841e92  Adding a more sane default timeout value.
     add 31ccc06  Adding support for SW to keep loaded key alive by reading status. Adding support for SW to trigger zeroisation of a loaded key.
     add 4665dcc  Adding test case for auto_zeroise. Can see that a loaded key gets wiped after timeout. Status bits looks fishy though.
     add 462c86f  Zeroisation of wrapper key registers. Adding reset of key_loaded register.
     add b57fa44  Fixed some bugs in auto-zeroise functionality. Now it really zeroises key automatically. It seems to work, but needs a bit more testing.
     add 3c0ce8c  Splitted the auto-zeroise test case into three separate tests.
     add 0500077  Cleaned up and made auto zeroise test case 1 self-testing:
     add b03f8a2  valid should not be set from reset. There is no valid data.
     add acd123d  Adding the same API hardening to keywrap as implemented for other cores after the Cryptech audit.
     add 3455dd0  Fixed parameterized widths.
     add dddf349  Adding test case that verifies that SW can keep a key alive by reading status register.
     add e481321  Add testcase that verifies forced zeroisation.
     add 4b8d7ab  Adding key timeout output port to allow core to inform the top level wrapper that timeout has occured. Added functionality to zeroise API key registers when timout has happened. Updated all auto_zeroise test cases to check that API key registers are properly zeroised.
     add 5827799  Debugging keywrap after auto_zeroise. Now the core starts processing as expected.
     add f7c9cd1  Added non-zero default timeout value in core. This fixes the keywrap problems by not automatically reset the key in the API. Enabled all testcases and disabled excessive debug outputs.

No new revisions were added by this update.

Summary of changes:
 src/rtl/keywrap.v        | 102 ++++++++---
 src/rtl/keywrap_core.v   | 128 +++++++++++++-
 src/tb/tb_keywrap.v      | 444 +++++++++++++++++++++++++++++++++++++++++++----
 src/tb/tb_keywrap_core.v |  24 ++-
 4 files changed, 628 insertions(+), 70 deletions(-)



More information about the Commits mailing list