mirror of
https://github.com/saymrwulf/xous-core.git
synced 2026-11-13 07:48:30 +00:00
a7477ec53b
The -A1 stepping is going to tie the IFR access control bits for data and key slots together. This is due to an RTL bug where the key slot maps were typo'd and they ended up mapping to the same IFR ACL. We "could" continue to use key slots with a rule that key and data slots would have to coordinate with each other and not use the same slot number. However, because of this linkage, and because there are other bugs suspected in the keyslot implementation, an executive decision was made to disregard the key slot feature in the chip. The main downsides of this are: - fewer slots (2048 vs 4096) - no key access linkage to HMAC auth on SCE I *think* that's it. Fewer slots - 2048 slots is still a lot of slots, about half are used now, I think this is plenty. Key access linkage to HMAC auth on SCE - I have reasons to suspect this feature is broken anyways for subtle reasons related to malleability of the HMAC round constants. Even without that brokenness, it's hard to use HMAC auth to manage the system because it requires per-device unique keys: so, we're using a PKI scheme and no symmetric secrets to handle access controls. Removing the key slots also greatly simplifies the code base analytically. This culling removes the key slot abstraction the "simple" way, but without the weirdness of the keyslots (in particular the key ID chaining which makes them different from data slots) I could remove even more abstractions and simplify the code. One upside is now all elements can enjoy the write mode behavior which can force the slot to be only 0->1 writeable, which could be useful for other things down the road. This was tested to not interfere with Dabao-Alpha 0 bootloaders. |
||
|---|---|---|
| .. | ||
| bao1x-api | ||
| bao1x-hal | ||
| blitstr2 | ||
| chat | ||
| cos_table | ||
| flatipc | ||
| flatipc-derive | ||
| keystore-api | ||
| mass-storage | ||
| perflib | ||
| precursor-hal | ||
| tls | ||
| userprefs | ||
| ux-api | ||
| xous-bio | ||
| xous-bio-bdma | ||
| xous-pio | ||
| xous-pl230 | ||