wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-08-03 12:44:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5375 from LinuxJedi/se050-private-key-add

Browse Source 
Add ECC private key insertion for SE050
This commit is contained in:
David Garske
2022-07-20 12:42:13 -07:00
committed by GitHub
parent 564f79c91a 07d2940757
commit 9450fa1412
2 changed files with 72 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

70
wolfcrypt/src/port/nxp/se050_port.c
View File

@@ -65,6 +65,10 @@ struct ecc_key;
#define SE050_ECC_DER_MAX 256
#endif
#ifndef SE050_KEYID_START
#define SE050_KEYID_START 100
#endif
/* enable for debugging */
/* #define SE050_DEBUG*/
/* enable to factory erase chip */
@@ -122,7 +126,7 @@ int wc_se050_init(const char* portName)
int se050_allocate_key(int keyType)
{
int keyId = -1;
static int keyId_allocator = 100;
static int keyId_allocator = SE050_KEYID_START;
switch (keyType) {
case SE050_AES_KEY:
case SE050_ECC_KEY:
@@ -501,6 +505,70 @@ static sss_algorithm_t se050_map_hash_alg(int hashLen)
return algorithm;
}
int se050_ecc_insert_private_key(int keyId, const byte* eccDer,
word32 eccDerSize)
{
int ret = 0;
struct ecc_key key;
sss_object_t newKey;
sss_key_store_t host_keystore;
sss_status_t status = kStatus_SSS_Success;
int keySizeBits;
int keySize;
word32 idx = 0;
sss_cipher_type_t curveType;
if (wolfSSL_CryptHwMutexLock() != 0) {
return BAD_MUTEX_E;
}
/* Avoid key ID conflicts with temporary key storage */
if (keyId >= SE050_KEYID_START) {
return BAD_FUNC_ARG;
}
ret = wc_ecc_init(&key);
if (ret != 0) {
status = kStatus_SSS_Fail;
} else {
ret = wc_EccPrivateKeyDecode(eccDer, &idx, &key, eccDerSize);
if (ret != 0) {
status = kStatus_SSS_Fail;
}
}
if (status == kStatus_SSS_Success) {
keySize = key.dp->size;
ret = se050_map_curve(key.dp->id, keySize, &keySizeBits, &curveType);
if (ret != 0) {
status = kStatus_SSS_Fail;
}
}
status = sss_key_store_context_init(&host_keystore, cfg_se050_i2c_pi);
if (status == kStatus_SSS_Success) {
status = sss_key_object_init(&newKey, &host_keystore);
}
if (status == kStatus_SSS_Success) {
status = sss_key_object_allocate_handle(&newKey, keyId,
kSSS_KeyPart_Pair, curveType, MAX_ECC_BYTES,
kKeyObject_Mode_Persistent);
}
if (status == kStatus_SSS_Success) {
status = sss_key_store_set_key(&host_keystore, &newKey, eccDer,
eccDerSize, keySizeBits,
NULL, 0);
}
wolfSSL_CryptHwMutexUnLock();
wc_ecc_free(&key);
if (status != kStatus_SSS_Success) {
if (ret == 0)
ret = WC_HW_E;
}
return ret;
}
int se050_ecc_sign_hash_ex(const byte* in, word32 inLen, byte* out,
word32 *outLen, struct ecc_key* key)
{

3
wolfssl/wolfcrypt/port/nxp/se050_port.h
View File

@@ -95,6 +95,8 @@ WOLFSSL_API int wc_se050_set_config(sss_session_t *pSession,
#ifdef WOLFSSL_SE050_INIT
WOLFSSL_API int wc_se050_init(const char* portName);
#endif
WOLFSSL_API int se050_ecc_insert_private_key(int keyId, const byte* eccDer,
word32 eccDerSize);
/* Private Functions */
WOLFSSL_LOCAL int se050_allocate_key(int keyType);
@@ -139,6 +141,7 @@ WOLFSSL_LOCAL int se050_ecc_shared_secret(struct ecc_key* private_key,
struct ecc_key* public_key, byte* out, word32* outlen);
WOLFSSL_LOCAL void se050_ecc_free_key(struct ecc_key* key);
struct ed25519_key;
WOLFSSL_LOCAL int se050_ed25519_create_key(struct ed25519_key* key);
WOLFSSL_LOCAL void se050_ed25519_free_key(struct ed25519_key* key);