arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2024-11-17 21:22:10 +00:00
Code Issues Releases Wiki Activity

feat(legacy): Implement GetFirmwareHash message.

Browse Source
This commit is contained in:
Andrew Kozlik 2022-04-26 19:41:29 +02:00 committed by Martin Milata
parent e43c14f448
commit e9828a5b59
9 changed files with 54 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
legacy/firmware/.changelog.d/2239.added Normal file
View File

@ -0,0 +1 @@
Add firmware hashing functionality.

1
legacy/firmware/Makefile
View File

@ -107,6 +107,7 @@ OBJS += ../vendor/trezor-crypto/sha2.o
OBJS += ../vendor/trezor-crypto/sha3.o
OBJS += ../vendor/trezor-crypto/blake256.o
OBJS += ../vendor/trezor-crypto/blake2b.o
OBJS += ../vendor/trezor-crypto/blake2s.o
OBJS += ../vendor/trezor-crypto/groestl.o
OBJS += ../vendor/trezor-crypto/hasher.o

1
legacy/firmware/fsm.h
View File

@ -69,6 +69,7 @@ void fsm_msgRecoveryDevice(const RecoveryDevice *msg);
void fsm_msgWordAck(const WordAck *msg);
void fsm_msgSetU2FCounter(const SetU2FCounter *msg);
void fsm_msgGetNextU2FCounter(void);
void fsm_msgGetFirmwareHash(const GetFirmwareHash *msg);
// coin
void fsm_msgGetPublicKey(const GetPublicKey *msg);

12
legacy/firmware/fsm_msg_common.h
View File

@ -536,3 +536,15 @@ void fsm_msgGetNextU2FCounter() {
msg_write(MessageType_MessageType_NextU2FCounter, resp);
layoutHome();
}
void fsm_msgGetFirmwareHash(const GetFirmwareHash *msg) {
RESP_INIT(FirmwareHash);
if (memory_firmware_hash(msg->challenge.bytes, msg->challenge.size,
resp->hash.bytes) != 0) {
fsm_sendFailure(FailureType_Failure_FirmwareError, NULL);
return;
}
resp->hash.size = sizeof(resp->hash.bytes);
msg_write(MessageType_MessageType_FirmwareHash, resp);
}

3
legacy/firmware/protob/messages-management.options
View File

@ -35,3 +35,6 @@ RecoveryDevice.label max_size:33
WordAck.word max_size:12
Nonce.nonce max_size:32
GetFirmwareHash.challenge max_size:32
FirmwareHash.hash max_size:32

7
legacy/flash.c
View File

@ -69,6 +69,13 @@ const void *flash_get_address(uint8_t sector, uint32_t offset, uint32_t size) {
return (const void *)FLASH_PTR(addr);
}
uint32_t flash_sector_size(uint8_t sector) {
if (sector >= FLASH_SECTOR_COUNT) {
return 0;
}
return FLASH_SECTOR_TABLE[sector + 1] - FLASH_SECTOR_TABLE[sector];
}
secbool flash_erase(uint8_t sector) {
ensure(flash_unlock_write(), NULL);
svc_flash_erase_sector(sector);

2
legacy/flash.h
View File

@ -42,7 +42,7 @@ secbool __wur flash_unlock_write(void);
secbool __wur flash_lock_write(void);
const void *flash_get_address(uint8_t sector, uint32_t offset, uint32_t size);
uint32_t flash_sector_size(uint8_t sector);
secbool __wur flash_erase(uint8_t sector);
secbool __wur flash_write_byte(uint8_t sector, uint32_t offset, uint8_t data);
secbool __wur flash_write_word(uint8_t sector, uint32_t offset, uint32_t data);

26
legacy/memory.c
View File

@ -20,6 +20,8 @@
#include "memory.h"
#include <libopencm3/stm32/flash.h>
#include <stdint.h>
#include "blake2s.h"
#include "flash.h"
#include "sha2.h"
#define FLASH_OPTION_BYTES_1 (*(const uint64_t *)0x1FFFC000)
@ -82,3 +84,27 @@ int memory_bootloader_hash(uint8_t *hash) {
sha256_Raw(hash, 32, hash);
return 32;
}
int memory_firmware_hash(const uint8_t *challenge, uint32_t challenge_size,
uint8_t hash[BLAKE2S_DIGEST_LENGTH]) {
BLAKE2S_CTX ctx;
if (challenge_size != 0) {
if (blake2s_InitKey(&ctx, BLAKE2S_DIGEST_LENGTH, challenge,
challenge_size) != 0) {
return 1;
}
} else {
blake2s_Init(&ctx, BLAKE2S_DIGEST_LENGTH);
}
for (int i = FLASH_CODE_SECTOR_FIRST; i <= FLASH_CODE_SECTOR_LAST; i++) {
uint32_t size = flash_sector_size(i);
const void *data = flash_get_address(i, 0, size);
if (data == NULL) {
return 1;
}
blake2s_Update(&ctx, data, size);
}
return blake2s_Final(&ctx, hash, BLAKE2S_DIGEST_LENGTH);
}

2
legacy/memory.h
View File

@ -93,6 +93,8 @@ extern uint8_t *emulator_flash_base;
void memory_protect(void);
void memory_write_unlock(void);
int memory_bootloader_hash(uint8_t *hash);
int memory_firmware_hash(const uint8_t *challenge, uint32_t challenge_size,
uint8_t hash[32]);
static inline void flash_write32(uint32_t addr, uint32_t word) {
*(volatile uint32_t *)FLASH_PTR(addr) = word;