Dangerous Things
782074f6ae
Three components, all bench-validated to varying depths: - applet/: CSA Aliro v1.0 Java Card applet for J3R180. AUTH0 + AUTH1 expedited-standard flow end-to-end green via PC/SC bench reader (aliro-bench-test). Userland AES-256-GCM and HMAC-SHA-256 layered on top of J3R180's primitives because the card lacks both natively. P-256 curve params seeded explicitly per J3R180's quirk. - harness/: Python orchestrator (aliro-trustgen, aliro-personalize, aliro-bench-test) for trust-bundle generation, card personalization via PersonalizationApplet, and PC/SC AUTH0+AUTH1 transactions. 126 pytest cases passing. - reader/STM32CubeExpansion_ALIRO_V1_0_0/: ST X-CUBE-ALIRO V1.0.0 with our NFC10A1 port (NUCLEO-U545RE-Q + X-NUCLEO-NFC10A1, ST25R200 shared with NFC09A1). nfc10-only/ project, NFC10A1 BSP shim, ALIRO_TRUST_OVERRIDE include into vendor's provisioning.c, and an ALIRO_APDU_TRACE wrapper around demoTransceiveBlocking. Boots, detects the J3R180, completes SELECT + AUTH0; AUTH1 currently fails with RFAL ERR_PROTO (0xB) — under investigation, see docs/plans/2026-04-20-nucleo-nfc10a1-port.md and bench-notes/. Excluded: x-cube-aliro.zip vendor archive, harness/.venv, build dirs, generated aliro_trust.h (contains private reader scalar), all PEMs. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
22 lines
676 B
Plaintext
22 lines
676 B
Plaintext
[0;32m************ TruELock ************
|
||
[0;33mCSA Aliro demonstration using MCU crypto
|
||
[0;39mApplication: Aliro_nfc v0.9.3
|
||
Built at Apr 21 2026 - 14:23:28
|
||
Security: ACWG_Security v0.3.4
|
||
Built at Jan 12 2026 - 17:31:02
|
||
App Aliro spec.: v0.9.5
|
||
Lib Aliro spec.: v0.9.5
|
||
[0;33mBased on STM32U5 + X-NUCLEO-NFC09A1/NFC10A1
|
||
[0;39mMCUID: 004A000F4E31501500363343
|
||
CryptoInit() start
|
||
SM_initCryptoMCU()
|
||
[0;39mNo provisioning json in flash...
|
||
[0;39m[0;31mProvisioning info is not valid
|
||
[0;39m[0;31m
|
||
Board is not provisioned
|
||
[0;39mUse 's' command to load default keys
|
||
Use 'c' command to convert keys from embedded json
|
||
Use '?' for help
|
||
|
||
CryptoInit() FAIL
|