Core implementations of an open-source secure key, with supports of:
The USB mode contains 3 different interfaces:
The WebUSB interface is used to configure the key via a web-based interface.
Please refer to the documentation.
Use Canokey-STM32 as an example.
You need to implement these functions in device.h
:
void device_delay(int ms);
uint32_t device_get_tick(void);
int device_spinlock_lock(volatile uint32_t *lock, uint32_t blocking);
void device_spinlock_unlock(volatile uint32_t *lock);
int device_atomic_compare_and_swap(volatile uint32_t *var, uint32_t expect, uint32_t update);
void led_on(void);
void led_off(void);
void device_set_timeout(void (*callback)(void), uint16_t timeout);
If you need NFC, you also need to implement the following functions for FM11NC08:
void fm_csn_low(void);
void fm_csn_high(void);
void spi_transmit(uint8_t *buf, uint8_t len);
void spi_receive(uint8_t *buf, uint8_t len);
or the following functions if you use FM11NT08:
void fm_csn_low(void);
void fm_csn_high(void);
void i2c_start(void);
void i2c_stop(void);
void scl_delay(void);
uint8_t i2c_read_ack(void);
void i2c_send_ack(void);
void i2c_send_nack(void);
void i2c_write_byte(uint8_t data);
uint8_t i2c_read_byte(void);
You should also provide a random32
and a optional random_buffer
function in rand.h
.
You need to configure the littlefs properly.
You need to configure the mbed-tls according to its documentation or provide the algorithms on your own by overwriting the weak symbols.
Or instead, you may implement the cryptography algorithms by yourself.
You should call the device_loop
or nfc_loop
in the main loop, and the device_update_led
in a periodic interrupt.
You should call the set_touch_result
to report touch sensing result, and set_nfc_state
to report NFC state.
Install honggfuzz from source first, then enable fuzz tests:
cd build
cmake .. -DENABLE_FUZZING=ON -DENABLE_TESTS=ON -DCMAKE_C_COMPILER=hfuzz-clang -DCMAKE_BUILD_TYPE=Debug
Then, run fuzzing tests:
./fuzzer/run-fuzzer.sh honggfuzz ${id}