Skip to content

Conversation

@bigbrett
Copy link
Contributor

Adds wolfHSM client support to wolfBoot.

Initial support for the following targets:

  • wolfBoot simulator (using wolfHSM POSIX TCP transport)
  • AURIX TC3xx (using built-in shared memory transport)

wolfHSM offload has been added for the following algorithms:

  • RSA
  • ECC
  • SHA256

Additional changes:

  • changes AURIX TC3xx default signature algo to ecc256
  • Modifications to AURIX TC3xx linker file based on HSM debugging
  • Adds public key der export option to keytools, so it can be loaded into HSM out-of-band
  • Adds option to keygen to zeroize public key (as it is unused in conjunction with HSM)
  • doc updates

@bigbrett
Copy link
Contributor Author

rebased to fix merge conflicts that arose since filing the PR (just to config files), no code changes introduced

Copy link
Contributor

@dgarske dgarske left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking good. All minor feedback

@dgarske dgarske removed their assignment Oct 29, 2024
billphipps
billphipps previously approved these changes Oct 30, 2024
Copy link
Contributor

@billphipps billphipps left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome! Minor nits. Update if you want. A couple of questions.

@bigbrett bigbrett force-pushed the wolfhsm-integration branch from 5cc9950 to ca85bdc Compare October 30, 2024 21:32
@bigbrett bigbrett requested a review from dgarske October 31, 2024 16:32
@bigbrett
Copy link
Contributor Author

@dgarske addressed review comments and rebased to fix conflicts introduced by some of the latest PRs.

billphipps
billphipps previously approved these changes Nov 1, 2024
@bigbrett bigbrett dismissed dgarske’s stale review November 1, 2024 15:46

addressed feedback

dgarske
dgarske previously approved these changes Nov 1, 2024
Copy link
Contributor

@dgarske dgarske left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Over to @danielinux

Copy link
Member

@danielinux danielinux left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, and documentation is complete. Just a minor thing, the new options in keygen.c: I see those are mentioned in the keystore doucment, they should be also breifly mentioned in signing.md, as all the command line options for the key tools are usually grouped there.

@bigbrett bigbrett dismissed stale reviews from dgarske and billphipps via eb741fa November 12, 2024 17:47
@bigbrett bigbrett requested a review from danielinux November 12, 2024 17:48
@bigbrett bigbrett dismissed danielinux’s stale review November 12, 2024 17:48

addressed feedback

@danielinux danielinux merged commit 6d1adc2 into wolfSSL:master Nov 13, 2024
101 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants