Dangerous Things
782074f6ae
Three components, all bench-validated to varying depths: - applet/: CSA Aliro v1.0 Java Card applet for J3R180. AUTH0 + AUTH1 expedited-standard flow end-to-end green via PC/SC bench reader (aliro-bench-test). Userland AES-256-GCM and HMAC-SHA-256 layered on top of J3R180's primitives because the card lacks both natively. P-256 curve params seeded explicitly per J3R180's quirk. - harness/: Python orchestrator (aliro-trustgen, aliro-personalize, aliro-bench-test) for trust-bundle generation, card personalization via PersonalizationApplet, and PC/SC AUTH0+AUTH1 transactions. 126 pytest cases passing. - reader/STM32CubeExpansion_ALIRO_V1_0_0/: ST X-CUBE-ALIRO V1.0.0 with our NFC10A1 port (NUCLEO-U545RE-Q + X-NUCLEO-NFC10A1, ST25R200 shared with NFC09A1). nfc10-only/ project, NFC10A1 BSP shim, ALIRO_TRUST_OVERRIDE include into vendor's provisioning.c, and an ALIRO_APDU_TRACE wrapper around demoTransceiveBlocking. Boots, detects the J3R180, completes SELECT + AUTH0; AUTH1 currently fails with RFAL ERR_PROTO (0xB) — under investigation, see docs/plans/2026-04-20-nucleo-nfc10a1-port.md and bench-notes/. Excluded: x-cube-aliro.zip vendor archive, harness/.venv, build dirs, generated aliro_trust.h (contains private reader scalar), all PEMs. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
32 lines
1.3 KiB
Python
32 lines
1.3 KiB
Python
"""Extract the byte representations PersonalizationApplet expects from
|
|
PEM-encoded P-256 keys produced by ``aliro-trustgen init``.
|
|
|
|
The applet stores raw scalars / raw uncompressed-point coordinates with
|
|
fixed lengths (32 / 64 bytes), so we strip PEM/DER framing and BigInteger
|
|
sign-padding here.
|
|
"""
|
|
|
|
from cryptography.hazmat.primitives.asymmetric import ec
|
|
|
|
P256_COORD_LEN = 32
|
|
|
|
|
|
def extract_priv_scalar(private_key: ec.EllipticCurvePrivateKey) -> bytes:
|
|
"""Return the 32-byte big-endian P-256 private scalar."""
|
|
if not isinstance(private_key.curve, ec.SECP256R1):
|
|
raise ValueError(f"expected P-256 (secp256r1), got {private_key.curve.name}")
|
|
return _to_fixed_be(private_key.private_numbers().private_value, P256_COORD_LEN)
|
|
|
|
|
|
def extract_pub_xy(public_key: ec.EllipticCurvePublicKey) -> bytes:
|
|
"""Return the 64-byte uncompressed point (x || y) without the 0x04 tag."""
|
|
if not isinstance(public_key.curve, ec.SECP256R1):
|
|
raise ValueError(f"expected P-256 (secp256r1), got {public_key.curve.name}")
|
|
nums = public_key.public_numbers()
|
|
return _to_fixed_be(nums.x, P256_COORD_LEN) + _to_fixed_be(nums.y, P256_COORD_LEN)
|
|
|
|
|
|
def _to_fixed_be(value: int, length: int) -> bytes:
|
|
"""Big-endian unsigned, zero-padded to exactly ``length`` bytes."""
|
|
return value.to_bytes(length, "big")
|