-
Notifications
You must be signed in to change notification settings - Fork 98
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
external: add the optiga-trust-m dependency #1329
Conversation
I've been developing locally on top of this PR for a while now, communicating with the chip, and had no issues. @NickeZ ready for review & merge. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Overall looks good to me, left some comments
external/optiga_config.h
Outdated
*/ | ||
#define OPTIGA_LIB_DEBUG_NULL_CHECK | ||
/** @brief Maximum number of instance registration */ | ||
#define OPTIGA_CMD_MAX_REGISTRATIONS (0x06) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could this be 1, does that have any impact on size?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Saves 288 bytes 😄
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@NickeZ actually 0x01 fails, 0x02 works. With 0x01, the second one fails:
util = optiga_util_create(OPTIGA_INSTANCE_ID_0, optiga_lib_callback, NULL);
if (NULL == util) {
util_log("couldn't create optiga util");
return false;
}
crypt = optiga_crypt_create(OPTIGA_INSTANCE_ID_0, optiga_lib_callback, NULL);
if (NULL == crypt) {
util_log("couldn't create optiga crypt");
return false;
}
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
aha I see, they take one "cmd registration" each.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
utACK
Needed to interact with the Optiga secure chip. The optiga-trust-m module was forked to the BitBoxSwiss org, along with its own submodule mbedtls, so we are safe against deps disappearing.
In the future we could probably reduce the size of the optiga lib by removing support for features as well. |
Needed to interact with the Optiga secure chip.
The optiga-trust-m module was forked to the BitBoxSwiss org, along with its own submodule mbedtls, so we are safe against deps disappearing.