Add API functionality to disable CDI access

tillitis / tillitis-key1

Board designs, FPGA verilog, firmware for TKey, the flexible and open USB security key 🔑

https://www.tillitis.se

382 stars 24 forks source link

Add API functionality to disable CDI access #204

Open secworks opened 2 months ago

secworks commented 2 months ago

This PR adds the ability for apps to lock down CDI access, limiting exposure to CDI by other apps, mem leaks etc. Basically the CDI can be read until a write to ADDR_CDI_DONE is performed. In order to be able to read again, the TKey device must be reset. This PR provides the functionality requested in https://github.com/tillitis/tillitis-key1/issues/186

dehanj commented 2 months ago

NOTE: CI goes green here is false. It mistakenly fetches the wrong bitstream, it is a bug in our ci.yaml. This is corrected in this PR, that PR should be merged to main and this branch should be rebased on main afterwards.