Commit graph

328 commits

Author SHA1 Message Date
bunnie
8a2118b8f6 fix bug in root-keys that prevents bbram provisionig from happening
this bug highlights a fairly big weakness in the rkyv-based
serialization in that there is no inherent type checking of
the sender to the receiver. In this case, a typo of just one
character lead to a regression which, probably in an earlier
version of rkyv, was not a problem because the ordering of
elements was different. In this case it lead to incorrect behavior,
which upon debugging lead to panics because we were interpreting
the data incorrectly after it was unpacked.

This is probably an issue to be worried about in the longer-term,
and it leaves me with a lingering question of what attack
surface exists through the deserialization mechanism for
attackers who send malformed buffers as messages.
2026-02-09 02:17:31 +08:00
bunnie
3f869ca389 bump utralib version for publication 2026-01-29 19:12:00 +08:00
bunnie
b2cf705c59 bump ticktimer version to drop susres dependency 2026-01-28 20:53:57 +08:00
bunnie
45632385d5 downgrade susres to a common api
doesn't make sense to push this to crates.io because it's not
common across all platforms, I think.
2026-01-28 00:36:05 +08:00
bunnie
fba011db3a commit version bump so that we may publish our packages 2026-01-08 03:04:19 +08:00
bunnie
d874c3e5c2 commit for version bump 2025-12-16 02:02:37 +08:00
bunnie
dbb0a75118 bump versions
have to absorb a version change due to xous-semver change

might as well also update the utra/svd generator dependencies
since that's been held off for a long time now.
2025-10-06 13:23:18 +08:00
bunnie
6d4f8004d3 fix breakage associated with changes to xous-semver 2025-10-06 13:17:21 +08:00
bunnie
75a9373fea fix AES dependencies so that the correct acceleration is enabled
This relies on a trick I was not aware of previously, which is
that transitive dependencies absorb the additive set of features
enabled within a crate.

see

https://doc.rust-lang.org/cargo/reference/features.html#feature-unification

for the full description. but basically by referring to the feature
required in "aes" despite not being used in the crate but pulled
in by aes-gcm-siv, i can ensure that the transitive dependency
is in fact used.

I think this was always there but previously I just didn't understand
it correctly or didn't use it right when I tried to deploy it, but
this time I think I got it right.
2025-09-07 11:50:12 +08:00
bunnie
75556b2321 add feature flags for vexii-test in rootkeys and shellchat 2025-07-21 19:02:21 +08:00
bunnie
e2379821e6 republish xous-rs to fix cargo test 2025-05-11 15:36:17 +08:00
bunnie
8a4959056b bump version for xous crate update - commit so we can publish crates 2025-05-11 14:45:24 +08:00
bunnie
805ebd22a3 revert a couple things that were not meant to be committed 2025-05-11 12:45:29 +08:00
bunnie
a71873cb7a incorporate migrations into root-keys 2025-05-11 12:34:17 +08:00
bunnie
87140a2024 cleanup the api a bit more
realized it was dumb to have separate file paths for the
orthogonal implementations
2025-05-04 19:12:51 +08:00
bunnie
c8db01c563 re-org rootkeys-api into common and generation-specific libraries 2025-05-04 19:05:58 +08:00
bunnie
7c6ecf308e migrate rootkeys api to keystore-api 2025-05-04 18:34:01 +08:00
bunnie
ac673425da root-keys: use platform-neutral ux-api instead of graphics-server 2025-02-21 17:48:48 +08:00
bunnie
812becb9a5 root-keys to use blitstr2 2025-02-17 18:25:40 +08:00
bunnie
4f14a67504 formatting changes due to changes in nightly rust
needed to get a clean check on gh
2025-02-01 22:26:40 +08:00
bunnie
45a8eb2227 stage tomls for version bump: try_send added to xous-ipc 2024-12-16 18:50:11 +08:00
bunnie
93b9ec00bf bump version numbers on all the packages so we can absorb num-derive changes 2024-12-02 19:14:11 +08:00
bunnie
043dfd84ae update formatting to latest nightly rules 2024-09-24 01:49:45 +08:00
bunnie
f494da21cc absorb new xous-ipc version 2024-09-23 22:05:50 +08:00
bunnie
75954de8d6 commit the version bump 2024-09-23 01:46:25 +08:00
bunnie
4c7c9312c1 change xous-ipc api to 0.10.0 2024-09-23 00:24:48 +08:00
bunnie
4eb504bb43 more typecast cleanup 2024-09-22 18:51:06 +08:00
bunnie
f2fbc7fafd regex search/replace instances of xous_ipc::String to String
more regex results
2024-09-22 14:19:32 +08:00
bunnie
311154e231 absorb version bump 2024-06-27 00:26:12 +08:00
bunnie
a360f3ee52 bump xous pins for RawTrng API 2024-06-13 15:49:35 +08:00
bunnie
35e7cf3a5b bump xous dep revs 2024-05-29 02:07:06 +08:00
bunnie
9e66c1bee2 commit the version bump 2024-05-07 01:03:05 +08:00
bunnie
d6b33159a5 stage version pin bump 2024-04-01 15:46:26 +08:00
bunnie
05a7c4ca7e use auto-release of accelerator hardware 2024-03-28 16:15:29 +08:00
bunnie
4eab8a35b5 don't try to release hardware in hosted mode 2024-03-25 08:08:06 +08:00
bunnie
1cc0a7121b Point curve25519 patch to the github version 2024-03-25 07:08:27 +08:00
bunnie
f5fdcf7d5b lock rootkeys into a particular version of the dalek crates + cooperative release of hw accelerator
the cooperative release is THE problem that we need to discuss.
2024-03-11 18:18:37 +08:00
David Kotval
8eb0a26d51 fix: don't break tls
Due to our patch of ring@0.16.0, we must be careful
that none of the transitive deps of the tls packages
try to use a newer ring.
2024-02-08 12:47:45 -06:00
bunnie
7c944fb4db upgrade zeroize to latest API level 2024-02-08 14:02:58 +08:00
bunnie
a68d0513e3 upgrade blowfish so we can retire the old cipher API
the pin was holding back another package
2024-02-08 13:59:26 +08:00
bunnie
df7c31a7df clean up warnings in dummy implementations 2024-02-08 13:10:08 +08:00
David Kotval
e619803114 fix: don't break hosted mode 2024-02-07 13:56:02 -06:00
bunnie
6de48e90f3 fix formatting problem 2024-02-08 00:49:00 +08:00
bunnie
315d9b96d4 Merge branch 'main' into dalek_to_v4 2024-02-07 22:52:24 +08:00
bunnie
5636e07eb8 Upgrade Ed25519 to latest version; fix zeroize derive. 2024-02-07 22:41:57 +08:00
bunnie
699004e7b0 bump xous pins 2024-02-06 14:49:10 +08:00
David Kotval
a70832b3ce wip: dumping deps to get curve25519 to 4.1.1 2024-02-04 14:12:36 -06:00
bunnie
40423f9448 fix hosted and renode modes 2024-02-01 01:42:18 +08:00
bunnie
0c7be94c22 re-introduce "wait for hardware" hashes for "big hashes" 2024-02-01 00:52:21 +08:00
bunnie
31efca3e9c add fixme notes for where the Scalar was decomposed due to hash api incompatibility 2024-01-31 04:16:05 +08:00