Commit graph

3315 commits

Author SHA1 Message Date
Ana Hobden
fa864ef137 Correct sha binary name
Signed-off-by: Ana Hobden <operator@hoverbear.org>
2022-06-07 23:42:01 -07:00
bunnie
01fbc1e8b7 update release notes 2022-06-08 04:42:28 +08:00
bunnie
7506b3ba30 update lock file 2022-06-08 04:37:48 +08:00
bunnie
b66f8b5303 update lock file 2022-06-08 04:37:35 +08:00
bunnie
6f8590e4e7 fixup config flags on keyboard option 2022-06-08 04:37:08 +08:00
bunnie
cb30edd8ab Merge branch 'main' into u2f 2022-06-08 04:35:37 +08:00
bunnie
ec5d61e678 add comment on test 2022-06-08 04:35:04 +08:00
bunnie
7db4db2701 fix ECDH error
was missing the FIDO-required sha256 hash after ECDH key exchange
2022-06-08 04:33:09 +08:00
bunnie
9acb8b8ac5
Merge pull request #175 from kelas/main
don't block if the queue isn't empty
2022-06-08 04:32:15 +08:00
kelas
37d3e4973e don't block if the queue isn't empty 2022-06-07 19:21:43 +02:00
bunnie
4a12b458c9 seems like the DH key exchange is broken somehow? needs more digging.
i've extracted the key parameters from the test suite and confirmed that
that the hash value is computed correctly on their side.

i've also confirmed that the hash value is computed correctly from
the locally computed key.

so what's gone wrong is the devired secret key doesn't match what's
on the other side.

possible issues could be either a PK serialization issue, or something
wrong in the DH exchange itself.
2022-06-07 18:55:59 +08:00
bunnie
ae9c2d5b99 add authentication request UI; fix tests again.
trying to debug why PIN authentication doesn't work. looks like
Cosekey conversion is fine, the data is arriving OK...but the
dh key exchange is not generated the expected shared secret.
2022-06-07 17:36:28 +08:00
bunnie
0830513ef1 debugging for dynamic resize issue 2022-06-07 16:42:10 +08:00
bunnie
64f008b4fa add debugging facilities to gam 2022-06-07 16:28:26 +08:00
bunnie
741a6ab45e fix dynamic resize redraw bug
for some reason I was setting the state of a canvas to not drawable
when the clip rectangle was being reset, causing dynamic dialog boxes
to become static if the content inside changes size.

I think this is an artifact of a previous generation of this code,
so commenting that out, but left a breadcrumb is case I'm wrong.
2022-06-07 16:27:16 +08:00
bunnie
4f915cd4df Merge branch 'main' into u2f 2022-06-07 14:56:42 +08:00
bunnie
2f096c1435 remove kernel Cargo.lock file
This is no longer  used since we moved to a monorepo. This also
removes some stale dependencies.
2022-06-07 14:10:54 +08:00
bunnie
f614b70cda remove stale version of regex from cargo.lock
this version has a security vulnerability, but is not used
anywhere in the build. removing.
2022-06-07 14:08:13 +08:00
bunnie
aad8391a3e remove stale crossbeam-utils entry from Cargo.lock
unused lock dependency refers to a vulnerable version of
crossbeam-utils.
2022-06-07 14:06:01 +08:00
bunnie
09a968ef09 remove debug-here dependency
this contains a dependency to `failure` two levels down that has a critical
vulnerability. Unfortunately no new versions of debug-here have been
published in a while. It's no longer used, so just stripping it out
altogether.
2022-06-07 14:00:25 +08:00
bunnie
ba874a653e make the rawserial path queue up to 128 characters if getchar() isn't live 2022-06-07 13:03:49 +08:00
bunnie
51be4700ee improve UX for FIDO2 and try to ferret out FIDO2 test problems. 2022-06-07 03:56:52 +08:00
bunnie
d92974df5a reduce binary size. turns out debug symbols aren't free. 2022-06-06 23:49:42 +08:00
bunnie
d61732a3aa add note to self about not updating the hex dependency in the tests for crypto libraries 2022-06-06 22:55:19 +08:00
bunnie
6be6537194 fix dependency for tests to work 2022-06-06 22:54:48 +08:00
bunnie
b0c7895e81 add total use count to statistics stored on auth keys 2022-06-06 22:45:57 +08:00
bunnie
5877509a28 fix change to buildpush, it wasn't supposed to be committed 2022-06-06 19:10:34 +08:00
bunnie
cc6382df10 revert rawserial feature on keyboard 2022-06-06 19:09:10 +08:00
bunnie
052c63aea3 why do these old files keep creeping in after a merge... 2022-06-06 19:05:53 +08:00
bunnie
848df39d72 Merge branch 'u2f' into main 2022-06-06 19:04:58 +08:00
bunnie
90e0ed4b13 bump release notes 2022-06-06 19:04:30 +08:00
bunnie
509a16399a revert opt-level in Cargo.toml 2022-06-06 19:02:09 +08:00
bunnie
a78cb670ba update lockfile 2022-06-06 19:01:08 +08:00
bunnie
86a1f9741e add UX flow for U2F transactions: register app name and display it
this allows users to know what exactly they are approving.
2022-06-06 19:00:43 +08:00
bunnie
6c94e61ab6 make hosted mode "happy" when running with HID calls 2022-06-06 19:00:19 +08:00
bunnie
66dc39c2a8 pddb sync does not require the handle to be mutable 2022-06-06 18:25:33 +08:00
bunnie
0d1244dc32 add a "rawserial" feature to the UART injection path 2022-06-06 14:10:31 +08:00
bunnie
62913a6560 meant to have keyboard injection as a feature. restore that. 2022-06-06 13:59:01 +08:00
bunnie
73f3ef827c cleanup warnings and unused code 2022-06-06 04:39:43 +08:00
bunnie
6e34659a33 Merge branch 'main' into u2f 2022-06-06 04:33:57 +08:00
bunnie
3e84e0e597 add some example code to FFI-test for implementing a getchar-like facility 2022-06-06 04:33:10 +08:00
bunnie
28a9d5bca7 add hooks so unsafe C-FFI calls can connect to the keyboard
- Opcodes are mapped to static IDs
- connection ID is now visible to someone who already owns
  the keyboard object. This can then be shared with the FFI
  interface to do calls to the keyboard server.
2022-06-06 03:56:05 +08:00
bunnie
7ceb1df65a add cargo.lock 2022-06-06 03:48:27 +08:00
bunnie
48579d03ca bump cargo files 2022-06-06 03:47:24 +08:00
bunnie
ebd4e7a1ba improve dynamic notifications / kbhit reporting 2022-06-06 03:46:57 +08:00
bunnie
ffd8e3607d add a check that the write() has completed before initiating a new one 2022-06-06 03:46:30 +08:00
bunnie
25bbfc835e u2f is now "working" in that it passes some basic tests 2022-06-06 03:46:11 +08:00
bunnie
69b9e53986 Merge branch 'main' into u2f 2022-06-05 23:09:03 +08:00
bunnie
94b7bde983 fix spurious rebuild issue
Had two JSON entries with the same key, which meant you had
 a 50/50 chance of a rebuild being triggered depending on which
entry was picked for the build. :-/
2022-06-05 23:08:09 +08:00
bunnie
c3615f2fff Merge branch 'main' into u2f 2022-06-05 18:47:02 +08:00