You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
85 lines
3.1 KiB
85 lines
3.1 KiB
4 years ago
|
// SPDX-FileCopyrightText: 2020 Foundation Devices, Inc. <hello@foundationdevices.com>
|
||
|
|
// SPDX-License-Identifier: GPL-3.0-or-later
|
||
|
|
//
|
||
|
|
// SPDX-FileCopyrightText: 2018 Coinkite, Inc. <coldcardwallet.com>
|
||
|
|
// SPDX-License-Identifier: GPL-3.0-only
|
||
|
|
//
|
||
|
|
|
||
|
|
#ifndef _SECURE_ELEMENT_ATECC608A_H_
|
||
|
|
#define _SECURE_ELEMENT_ATECC608A_H_
|
||
|
|
|
||
|
|
#include "storage.h"
|
||
|
|
|
||
|
|
// Test if chip responds correctly, and do some setup; returns error string if fail.
|
||
|
|
bool se_probe();
|
||
|
|
|
||
|
|
// Read first 32 bytes out of a slot. len must be 4 or 32.
|
||
|
|
int se_read_data_slot(int slot_num, uint8_t *data, int len);
|
||
|
|
|
||
|
|
// Read and write to slots that are encrypted (must know that before using)
|
||
|
|
// - can specific different lenghts
|
||
|
|
int se_encrypted_read(int data_slot, int read_kn, const uint8_t read_key[32], uint8_t *data, int len);
|
||
|
|
|
||
|
|
// read/write exactly 32 bytes
|
||
|
|
int se_encrypted_read32(int data_slot, int blk, int read_kn,
|
||
|
|
const uint8_t read_key[32], uint8_t data[32]);
|
||
|
|
|
||
|
|
// Pick a fresh random number.
|
||
|
|
int se_random(uint8_t randout[32]);
|
||
|
|
|
||
|
|
// Roll (derive) a key using random number we forget. One way!
|
||
|
|
int se_destroy_key(int keynum);
|
||
|
|
|
||
|
|
// Ask the chip to make a digest of a counter's value or data slot's contents.
|
||
|
|
int se_gendig_counter(int counter_num, const uint32_t expected_value, uint8_t digest[32]);
|
||
|
|
|
||
|
|
// Do Info(p1=2) command, and return result; p1=3 if get_gpio
|
||
|
|
uint16_t se_get_info(void);
|
||
|
|
|
||
|
|
// Bits in Info(p1=2) response
|
||
|
|
#define I_TempKey_KeyId(n) ((n >> 8) & 0x0f)
|
||
|
|
#define I_TempKey_SourceFlag(n) ((n >> 12) & 0x1)
|
||
|
|
#define I_TempKey_GenDigData(n) ((n >> 13) & 0x1)
|
||
|
|
#define I_TempKey_GenKeyData(n) ((n >> 14) & 0x1)
|
||
|
|
#define I_TempKey_NoMacFlag(n) ((n >> 15) & 0x1)
|
||
|
|
|
||
|
|
#define I_EEPROM_RNG(n) ((n >> 0) & 0x1)
|
||
|
|
#define I_SRAM_RNG(n) ((n >> 1) & 0x1)
|
||
|
|
#define I_AuthValid(n) ((n >> 2) & 0x1)
|
||
|
|
#define I_AuthKey(n) ((n >> 3) & 0x0f)
|
||
|
|
#define I_TempKey_Valid(n) ((n >> 7) & 0x1)
|
||
|
|
|
||
|
|
// Do a dance that unlocks various keys. Return T if it fails.
|
||
|
|
int se_unlock_ip(uint8_t keynum, const uint8_t secret[32]);
|
||
|
|
|
||
|
|
// Read a one-way counter (there are 2 of these)
|
||
|
|
int se_get_counter(uint32_t *result, uint8_t counter_number);
|
||
|
|
|
||
|
|
// Add onto a counter. Slow; has to go by one.
|
||
|
|
int se_add_counter(uint32_t *result, uint8_t counter_number, int incr);
|
||
|
|
|
||
|
|
// Perform HMAC on the chip, using a particular key.
|
||
|
|
//int se_hmac(uint8_t keynum, const uint8_t *msg, uint16_t msg_len, uint8_t digest[32]);
|
||
|
|
int se_hmac32(uint8_t keynum, uint8_t *msg, uint8_t digest[32]);
|
||
|
|
|
||
|
|
// Load TempKey with indicated value, exactly.
|
||
|
|
int se_load_nonce(uint8_t nonce[32]);
|
||
|
|
|
||
|
|
// Return the serial number.
|
||
|
|
// Nine bytes of serial number. First 2 bytes always 0x0123 and last one 0xEE
|
||
|
|
int se_get_serial(uint8_t serial[6]);
|
||
|
|
|
||
|
|
// Call this if possible mitm is detected.
|
||
|
|
extern void fatal_mitm(void) __attribute__((noreturn));
|
||
|
|
|
||
|
|
// Update the match-counter with a new number.
|
||
|
|
int se_write_match_count(uint32_t count, const uint8_t *write_key);
|
||
|
|
|
||
|
|
// Perform many key iterations and read out the result. Designed to be slow.
|
||
|
|
int se_stretch_iter(const uint8_t start[32], uint8_t end[32], int iterations);
|
||
|
|
|
||
|
|
// Mix in (via HMAC) the contents of a specific key on the device.
|
||
|
|
int se_mixin_key(uint8_t keynum, uint8_t start[32], uint8_t end[32]);
|
||
|
|
|
||
|
|
#endif //_SECURE_ELEMENT_ATECC608A_H_
|