mirror of
https://github.com/polhenarejos/pico-keys-sdk
synced 2026-05-31 18:41:22 +02:00
8f907b25ba
and add the Enterprise / Commercial licensing option.
Main changes:
- Replace GPLv3 headers with AGPLv3 headers in source files.
- Update LICENSE file to the full AGPLv3 text.
- Add ENTERPRISE.md describing the dual-licensing model:
* Community Edition: AGPLv3 (strong copyleft, including network use).
* Enterprise / Commercial Edition: proprietary license for production /
multi-user / OEM use without the obligation to disclose derivative code.
- Update README with a new "License and Commercial Use" section pointing to
ENTERPRISE.md and clarifying how companies can obtain a commercial license.
Why this change:
- AGPLv3 ensures that modified versions offered as a service or deployed
in production environments must provide corresponding source code.
- The Enterprise / Commercial edition provides organizations with an
alternative proprietary license that allows internal, large-scale, or OEM
use (bulk provisioning, policy enforcement, inventory / revocation,
custom attestation, signed builds) without AGPL disclosure obligations.
This commit formally marks the first release that is dual-licensed:
AGPLv3 for the Community Edition and a proprietary commercial license
for Enterprise customers.
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
61 lines
3.0 KiB
C
61 lines
3.0 KiB
C
/*
|
|
* This file is part of the Pico Keys SDK distribution (https://github.com/polhenarejos/pico-keys-sdk).
|
|
* Copyright (c) 2022 Pol Henarejos.
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation, version 3.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef _CRYPTO_UTILS_H_
|
|
#define _CRYPTO_UTILS_H_
|
|
|
|
#include "mbedtls/ecp.h"
|
|
#include "mbedtls/md.h"
|
|
|
|
#define PICO_KEYS_KEY_RSA 0x000f // It is a mask
|
|
#define PICO_KEYS_KEY_RSA_1K 0x0001
|
|
#define PICO_KEYS_KEY_RSA_2K 0x0002
|
|
#define PICO_KEYS_KEY_RSA_3K 0x0004
|
|
#define PICO_KEYS_KEY_RSA_4k 0x0008
|
|
#define PICO_KEYS_KEY_EC 0x0010
|
|
#define PICO_KEYS_KEY_AES 0x0f00 // It is a mask
|
|
#define PICO_KEYS_KEY_AES_128 0x0100
|
|
#define PICO_KEYS_KEY_AES_192 0x0200
|
|
#define PICO_KEYS_KEY_AES_256 0x0400
|
|
#define PICO_KEYS_KEY_AES_512 0x0800 /* For AES XTS */
|
|
|
|
#define PICO_KEYS_AES_MODE_CBC 1
|
|
#define PICO_KEYS_AES_MODE_CFB 2
|
|
|
|
#define IV_SIZE 16
|
|
|
|
extern int ct_memcmp(const void *a, const void *b, size_t n);
|
|
// Newer and safe functions
|
|
extern void derive_kbase(uint8_t kbase[32]);
|
|
extern void derive_kver(const uint8_t *pin, size_t pin_len, uint8_t kver[32]);
|
|
extern void pin_derive_kenc(const uint8_t pin_token[32], uint8_t kenc[32]);
|
|
extern void pin_derive_session(const uint8_t *pin, size_t pin_len, uint8_t pin_token[32]);
|
|
extern void pin_derive_verifier(const uint8_t *pin, size_t pin_len, uint8_t verifier[32]);
|
|
extern int encrypt_with_aad(const uint8_t key[32], const uint8_t *in_buf, size_t in_len, uint8_t *out_buf);
|
|
extern int decrypt_with_aad(const uint8_t key[32], const uint8_t *in_buf, size_t in_len, uint8_t *out_buf);
|
|
extern void double_hash_pin(const uint8_t *pin, uint16_t len, uint8_t output[32]);
|
|
extern void hash_multi(const uint8_t *input, uint16_t len, uint8_t output[32]);
|
|
extern void hash256(const uint8_t *input, size_t len, uint8_t output[32]);
|
|
extern void generic_hash(mbedtls_md_type_t md, const uint8_t *input, size_t len, uint8_t *output);
|
|
extern int aes_encrypt(const uint8_t *key, const uint8_t *iv, uint16_t key_size, int mode, uint8_t *data, uint16_t len);
|
|
extern int aes_decrypt(const uint8_t *key, const uint8_t *iv, uint16_t key_size, int mode, uint8_t *data, uint16_t len);
|
|
extern int aes_encrypt_cfb_256(const uint8_t *key, const uint8_t *iv, uint8_t *data, uint16_t len);
|
|
extern int aes_decrypt_cfb_256(const uint8_t *key, const uint8_t *iv, uint8_t *data, uint16_t len);
|
|
extern mbedtls_ecp_group_id ec_get_curve_from_prime(const uint8_t *prime, size_t prime_len);
|
|
|
|
#endif
|