Merge branch 'main' of github.com:tillitis/tillitis-key1

This commit is contained in:
Joachim Strömbergson 2022-10-03 12:56:41 +02:00
commit 6f31bbe37a
3 changed files with 24 additions and 10 deletions

View File

@ -1,5 +1,16 @@
# Release Notes # Release Notes
## Untagged
### User Supplied Secret - Breaking change!
*Nota bene* From commit 99efb78ed8ba69799045cff6c42c4a71bffdb703 the
computed CDI secret is also taking the User Supplied Secret into
account *even if the USS is not supplied*! This means if you start
using firmware from this commit and onwards your CDI and with it the
private key of the signerapp will change even if you haven't changed
the app in any way.
## engineering-release-1 ## engineering-release-1
### Hardware ### Hardware

View File

@ -5,8 +5,8 @@
You need Clang with 32 bit RISC-V support. You can check this with: You need Clang with 32 bit RISC-V support. You can check this with:
``` ```
$ llc --version|grep riscv32 $ llc --version | grep riscv32
riscv32 - 32-bit RISC-V riscv32 - 32-bit RISC-V
``` ```
or just try building. or just try building.
@ -24,18 +24,21 @@ Checkout the `mta1` branch of [our version of the
qemu](https://github.com/tillitis/qemu) and build: qemu](https://github.com/tillitis/qemu) and build:
``` ```
$ git clone -b mta1 https://github.com/tillitis/qemu $ git clone -b mta1 https://github.com/tillitis/qemu
$ mkdir qemu/build $ mkdir qemu/build
$ cd qemu/build $ cd qemu/build
$ ../configure --target-list=riscv32-softmmu $ ../configure --target-list=riscv32-softmmu --disable-werror
$ make -j $(nproc) $ make -j $(nproc)
``` ```
(Built with warnings-as-errors disabled, see [this
issue](https://github.com/tillitis/qemu/issues/3).)
Run it like this: Run it like this:
``` ```
$ /path/to/qemu/build/qemu-system-riscv32 -nographic -M mta1_mkdf,fifo=chrid -bios firmware \ $ /path/to/qemu/build/qemu-system-riscv32 -nographic -M mta1_mkdf,fifo=chrid -bios firmware.elf \
-chardev pty,id=chrid -chardev pty,id=chrid
``` ```
This attaches the FIFO to a tty, something like `/dev/pts/16` which This attaches the FIFO to a tty, something like `/dev/pts/16` which

View File

@ -83,7 +83,7 @@ int main()
for (;;) { for (;;) {
// blocking; fw flashing white while waiting for cmd // blocking; fw flashing white while waiting for cmd
in = readbyte_ledflash(LED_RED | LED_BLUE | LED_GREEN, 500000); in = readbyte_ledflash(LED_RED | LED_BLUE | LED_GREEN, 800000);
if (parseframe(in, &hdr) == -1) { if (parseframe(in, &hdr) == -1) {
puts("Couldn't parse header\n"); puts("Couldn't parse header\n");