kaspar/RIOT
1
0
Fork 0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2025-12-26 15:03:53 +01:00
Code Releases Activity

Merge pull request #21822 from mguetschow/psa-ed25519-monocypher

Browse Source 
sys/psa_crypto: add monocypher as ed25519 software backend
This commit is contained in:
mguetschow 2025-11-10 08:28:28 +00:00 committed by GitHub
commit 370bb0e449
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
8 changed files with 99 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pkg/monocypher/Makefile.include
View File

@ -1,2 +1,8 @@
INCLUDES += -I$(PKGDIRBASE)/monocypher/src
INCLUDES += -I$(PKGDIRBASE)/monocypher/src/optional
ifneq (,$(filter psa_monocypher_%, $(USEMODULE)))
PSEUDOMODULES += psa_monocypher_ed25519
DIRS += $(RIOTPKG)/monocypher/psa_monocypher
INCLUDES += -I$(RIOTBASE)/sys/psa_crypto/include
endif

4
pkg/monocypher/psa_monocypher/Makefile Normal file
View File

@ -0,0 +1,4 @@
BASE_MODULE := psa_monocypher
SUBMODULES := 1
include $(RIOTBASE)/Makefile.base

1
pkg/monocypher/psa_monocypher/Makefile.dep Normal file
View File

@ -0,0 +1 @@
USEMODULE += random

71
pkg/monocypher/psa_monocypher/ed25519.c Normal file
View File

@ -0,0 +1,71 @@
/*
* SPDX-FileCopyrightText: 2025 TU Dresden
* SPDX-License-Identifier: LGPL-2.1-only
*/
/**
* @ingroup sys_psa_crypto pkg_monocypher
* @{
*
* @brief Glue code translating between PSA Crypto and the Monocypher EdDSA APIs
*
* @author Mikolai Gütschow <mikolai.guetschow@tu-dresden.de>
*
* @}
*/
#include "string_utils.h"
#include "psa/crypto.h"
#include "psa_ecc.h"
#include "monocypher-ed25519.h"
#include "random.h"
psa_status_t psa_generate_ecc_ed25519_key_pair( uint8_t *priv_key_buffer,
uint8_t *pub_key_buffer)
{
/* todo: maybe this should use psa_random instead */
random_bytes(priv_key_buffer, 32);
return psa_derive_ecc_ed25519_public_key(priv_key_buffer, pub_key_buffer);
}
psa_status_t psa_derive_ecc_ed25519_public_key( const uint8_t *priv_key_buffer,
uint8_t *pub_key_buffer)
{
uint8_t priv_and_pub_key[64] = { 0 };
memcpy(&priv_and_pub_key[0], priv_key_buffer, 32);
crypto_ed25519_key_pair(priv_and_pub_key, pub_key_buffer, priv_and_pub_key);
explicit_bzero(priv_and_pub_key, 64);
return PSA_SUCCESS;
}
psa_status_t psa_ecc_ed25519_sign_message(const uint8_t *priv_key_buffer,
const uint8_t *pub_key_buffer,
const uint8_t *input, size_t input_length,
uint8_t *signature)
{
uint8_t priv_and_pub_key[64];
memcpy(&priv_and_pub_key[0], priv_key_buffer, 32);
memcpy(&priv_and_pub_key[32], pub_key_buffer, 32);
crypto_ed25519_sign(signature, priv_and_pub_key, input, input_length);
explicit_bzero(priv_and_pub_key, 64);
return PSA_SUCCESS;
}
psa_status_t psa_ecc_ed25519_verify_message(const uint8_t *pub_key_buffer,
const uint8_t *input, size_t input_length,
const uint8_t *signature)
{
if (crypto_ed25519_check(signature, pub_key_buffer, input, input_length) != 0) {
return PSA_ERROR_INVALID_SIGNATURE;
}
return PSA_SUCCESS;
}

8
sys/psa_crypto/Makefile.dep
View File

@ -74,7 +74,7 @@ ifneq (,$(filter psa_asymmetric_ecc_ed25519,$(USEMODULE)))
ifneq (,$(filter periph_ecc_ed25519,$(FEATURES_USED)))
USEMODULE += psa_asymmetric_ecc_ed25519_backend_periph
else
USEMODULE += psa_asymmetric_ecc_ed25519_backend_c25519
USEMODULE += psa_asymmetric_ecc_ed25519_backend_monocypher
endif
endif
endif
@ -85,6 +85,12 @@ ifneq (,$(filter psa_asymmetric_ecc_ed25519_backend_c25519,$(USEMODULE)))
USEMODULE += psa_c25519_edsign
endif
ifneq (,$(filter psa_asymmetric_ecc_ed25519_backend_monocypher,$(USEMODULE)))
USEPKG += monocypher
USEMODULE += psa_monocypher
USEMODULE += psa_monocypher_ed25519
endif
ifneq (,$(filter psa_asymmetric_ecc_ed25519_backend_periph,$(USEMODULE)))
FEATURES_REQUIRED += periph_ecc_ed25519
endif

1
sys/psa_crypto/Makefile.include
View File

@ -37,6 +37,7 @@ endif
PSEUDOMODULES += psa_asymmetric_ecc_ed25519
PSEUDOMODULES += psa_asymmetric_ecc_ed25519_backend_periph
PSEUDOMODULES += psa_asymmetric_ecc_ed25519_backend_c25519
PSEUDOMODULES += psa_asymmetric_ecc_ed25519_backend_monocypher
PSEUDOMODULES += psa_asymmetric_ecc_ed25519_custom_backend
# check that one and only one backend has been selected

10
tests/sys/psa_crypto/Makefile.ci
View File

@ -1,14 +1,7 @@
BOARD_INSUFFICIENT_MEMORY := \
arduino-duemilanove \
arduino-leonardo \
arduino-mega2560 \
arduino-nano \
arduino-uno \
atmega328p \
atmega328p-xplained-mini \
atmega8 \
bluepill-stm32f030c8 \
i-nucleo-lrwan1 \
nucleo-c031c6 \
nucleo-f030r8 \
nucleo-f031k6 \
nucleo-f042k6 \
@ -19,6 +12,7 @@ BOARD_INSUFFICIENT_MEMORY := \
slstk3400a \
stk3200 \
stm32c0116-dk \
stm32c0316-dk \
stm32f030f4-demo \
stm32f0discovery \
stm32g0316-disco \

14
tests/sys/psa_crypto_eddsa/Makefile.ci
View File

@ -1,14 +1,14 @@
BOARD_INSUFFICIENT_MEMORY := \
arduino-duemilanove \
arduino-leonardo \
arduino-nano \
arduino-uno \
atmega328p \
atmega328p-xplained-mini \
atmega8 \
nucleo-c031c6 \
nucleo-f031k6 \
nucleo-f042k6 \
nucleo-l011k4 \
nucleo-l031k6 \
samd10-xmini \
stk3200 \
stm32c0116-dk \
stm32c0316-dk \
stm32f030f4-demo \
stm32g0316-disco \
weact-g030f6 \
#