Commit Graph

  • 62ceef89e9 test(applet): adversarial GCM regression tests (post-M2 security pass) main michael 2026-06-17 21:22:46 -07:00
  • c85ecd2f73 perf(applet): trim 3 over-sized transient buffers (~216 B reclaimed) michael 2026-06-17 21:01:50 -07:00
  • f9b0c1ea81 Merge feat/step-up-m2: Step-Up Milestone 2 — real Access Document round-trip michael 2026-06-17 18:35:26 -07:00
  • 0e0a338b26 docs(vendor-bugs): fill firmware version + ST routing for ST bug report michael 2026-06-17 18:35:03 -07:00
  • 576eeca401 docs(applet): finalize INSTALL.md M2 acceptance — pin verdict log + UID (M2H.1 final) michael 2026-06-17 18:06:58 -07:00
  • 5521503258 fix(applet): CoseVerifier scratch 768B->384B for J3R452 transient pool fit (M2G.2) michael 2026-06-17 18:05:16 -07:00
  • 377ce297f1 chore(applet): strip diagnostic INSes from prod CAP (M2F.3) michael 2026-06-17 17:07:32 -07:00
  • dc5118f392 build(applet): enable int support in CAP converter michael 2026-06-17 17:07:18 -07:00
  • d24d72e119 chore(applet): drop M1 stub comments + dead paths + naming consistency (M2F.2) michael 2026-06-17 17:01:12 -07:00
  • ed316102bf fix(applet): signaling_bitmap reflects actual AD capability (M2F.1) michael 2026-06-17 16:54:45 -07:00
  • 0c7d4c642e feat: EXCHANGE Reader Status request validation + spec-shape response (M2E.1, M2E.2) michael 2026-06-17 16:50:47 -07:00
  • f0765eb329 docs: M2 close-out draft — INSTALL.md acceptance criterion + step-up implementation notes (M2H.1 draft) michael 2026-06-17 16:43:06 -07:00
  • 1ed32d3872 feat(harness): --step-up asserts Access Document round-trip (M2G.1) michael 2026-06-17 16:42:50 -07:00
  • bf65607ce5 docs(vendor-bugs): file ST X-CUBE-ALIRO processAUTH1ResponsePayload bug (M2G.3) michael 2026-06-17 16:40:20 -07:00
  • 9879668472 feat(applet): real DeviceResponse via ENVELOPE + GET RESPONSE chaining (M2D.3, M2D.4) michael 2026-06-17 16:34:45 -07:00
  • 9e31da0cdc feat(applet): DeviceResponseBuilder (M2D.2) michael 2026-06-17 16:24:03 -07:00
  • a7bc7e4478 feat(applet): DeviceRequestParser structural validation (M2D.1) michael 2026-06-17 16:19:12 -07:00
  • d5945be60e refactor(applet): AliroGcm.setKeyAndIv consolidates re-keying (M2C.2) michael 2026-06-17 16:14:53 -07:00
  • 4fb87b6200 refactor(applet): extract StepUpSession from StepUpApplet (M2C.1) michael 2026-06-17 16:10:14 -07:00
  • 047503e8c5 feat(applet): canonical CBOR uint/bstr/tstr encoders (M2B.4) michael 2026-06-17 15:51:30 -07:00
  • 6373bf1109 refactor(applet): CoseVerifier uses StructuralCbor (M2B.3) michael 2026-06-17 15:48:42 -07:00
  • 6f96c2f8a2 feat(applet): StructuralCbor.elementSpan (M2B.2) michael 2026-06-17 15:44:42 -07:00
  • da4c3fa1e4 feat(applet): StructuralCbor.decodeHeader (M2B.1) michael 2026-06-17 15:41:03 -07:00
  • a94e2b498e feat: IssuerAuth verify at AD finalize + issuer pubkey provisioning (M2A.3) michael 2026-06-17 15:30:56 -07:00
  • 3868678bf9 feat(applet): CoseVerifier RFC 9052 verify (M2A.2) michael 2026-06-17 14:07:47 -07:00
  • 531b1d3186 feat(applet): accessDocumentVerified flag in CredentialStore (M2A.1) michael 2026-06-17 13:57:51 -07:00
  • 4741ce7ba3 Merge feat/step-up-m1: Step-Up M1 applet implementation michael 2026-06-17 16:02:59 -07:00
  • ad53666650 docs(plans): Step-Up M2 full implementation plan michael 2026-06-17 13:26:47 -07:00
  • 9081990b0e feat(harness): aliro-bench-test --step-up + INSTALL.md install-recovery notes michael 2026-06-17 12:55:16 -07:00
  • 87065b0e15 docs(applet): refresh stale comments referring to deleted INS_EXCHANGE stub michael 2026-06-11 11:04:05 -07:00
  • ebefc4e358 refactor(applet): retire AliroApplet INS_EXCHANGE stub michael 2026-06-11 11:01:57 -07:00
  • e213c65d26 feat(applet): StepUpApplet INS_ENVELOPE (CLA=0x00) decrypt + encrypted ack michael 2026-06-11 10:55:09 -07:00
  • 96816bc232 feat(applet): StepUpApplet INS_EXCHANGE decrypt-and-discard with 9000 ack michael 2026-06-11 10:45:22 -07:00
  • 8e999b770d feat(applet): StepUpApplet derives session keys on SELECT when armed michael 2026-06-11 10:33:46 -07:00
  • cedefef70e test(applet): pin deriveStepUpSessionKeys to spec ASCII info strings michael 2026-06-11 10:23:44 -07:00
  • 9189b41e7f docs: Step-Up implementation plans v1+v2 + inline TODOs at four opt sites michael 2026-06-11 10:19:05 -07:00
  • f94e416c99 fix: AUTH1 crypto interop with stock X-CUBE-ALIRO + EXCHANGE compat stub michael 2026-06-11 10:18:42 -07:00
  • 06c00385a4 build(reader): WTX cap bump 20→255 + AUTH1 wrap instrumentation michael 2026-06-11 10:15:34 -07:00
  • 34ba616e48 build(amd-h): vendor GlobalPlatform exports for j3r452 builds michael 2026-06-10 16:23:57 -07:00
  • efac7ce6e6 feat: aliro-bench-profile CLI + per-APDU latency probes michael 2026-06-06 15:53:56 -07:00
  • b03c781b92 feat: diagnostic INSes for AUTH1 sub-op profiling (compile-gated) michael 2026-06-06 15:53:10 -07:00
  • 5f614d74a9 feat: 4-bit GHASH table + runtime native HMAC/CTR detection on j3r452 michael 2026-06-06 15:52:55 -07:00
  • 7574fc660e build: add j3r452-only src/main/java-amdh source root michael 2026-05-26 14:08:45 -07:00
  • 96f2b34abc docs/build: clean up stale aliro-applet.cap references after profile split michael 2026-05-26 14:00:21 -07:00
  • 750f570a39 build: add j3r180 (default) and j3r452 Maven profiles michael 2026-05-26 13:40:49 -07:00
  • 276f9f189a test: tighten CredentialStoreSerializationTest against silent reorders michael 2026-05-26 12:37:36 -07:00
  • 40a079a539 feat: define CredentialStore serialization contract michael 2026-05-26 10:50:47 -07:00
  • 1f54a690d0 refactor: own CredentialStore from PersonalizationApplet instance michael 2026-05-25 20:20:22 -07:00
  • 86429b1f4d gitignore: exclude vkthermo_*.csv stray files Dangerous Things 2026-05-02 10:18:16 -07:00
  • 782074f6ae Initial snapshot: Aliro applet, harness, Nucleo NFC10A1 reader port Dangerous Things 2026-05-02 10:17:46 -07:00