trussed v0.2.0

Added

• Added init_raw constructor for types generated by the store! macro.
• Added FilesystemClient::entry_metadata syscall.
• Added FilesystemClient::rename syscall.
• Added serializable flag to StorageAttributes for key agreement.
• Added virtual platform in virt module.
• Added methods for creating the client stores to ServiceResources.
• Implemented unsafe_inject_key for Aes256Cbc, Ed255, X255, P256.
• Added support for custom backends in backend module.
• Added optional support for API extensions in serde_extensions module
  behind the serde-extensions feature.
• Added types::Path re-export of littlefs2::path::Path.
• Reduced stack usage of Service::process.
• Added the Aes256Gcm mechanism.

Changed

• Made StorageAttributes non-exhaustive.
• Changed KeyStore<P: Platform> to KeyStore<S: Store>.
• Replaced the client ID with a ClientContext struct.
• Always trigger syscall in PollClient::request and remove
  PollClient::syscall.
• Upgrade the interchange dependency to version 0.3.0 (#99)
  • As a consequence the type pipe::TrussedInterchange becomes a constpipe::TRUSSED_INTERCHANGE
• Made Request, Reply, Error, Context, CoreContext, Mechanism,
  KeySerialization, SignatureSerialization, consent::Error, ui::Status non-exhaustive.
• Made postcard_deserialize, postcard_serialize and
  postcard_serialize_bytes private.
• Changed &PathBuf to &Path where possible.
• Change store implementations to use littlefs2’s DynFilesystem trait instead
  of being generic over the storage implementation.
• Add nonce argument to wrap_key and unwrap_key syscalls.
• Use nonce as IV for Aes256Cbc mechanism.
• Removed serde::{Deserialize, Serialize} implementations for the API request
  and reply structs, types::{consent::{Error, Level}, reboot::To, StorageAttributes, KeySerialization, SignatureSerialization}.
• Improved hex formatting of types::Id:
  • Removed the unused Id::hex.
  • Deprecated Id::hex_path and added Id::legacy_hex_path as a replacement.
  • Added Id::clean_hex_path as an alternative to Id::legacy_hex_path.
  • Changed Id::hex_clean to format zero as "00".
• Change client and mechanism selection:
  • Put all client traits, requests, replies and implementations behind feature flags.
  • Put all mechanisms behind feature flags.
  • Move CryptoClient::attest into new AttestationClient.
• Pass endpoints to Service::process instead of storing them in the service.
• Added support for non-static channels:
  • Added lifetimes to ClientImplementation and ServiceEndpoints.
  • Added the pipe::TrussedChannel type.
• Refactored the Store trait:
  • Removed the requirement for a static lifetime.
  • Removed the Fs wrapper type.
  • Removed the storage types to return &dyn DynFilesystem instead.
  • Removed the Copy requirement.
  • Removed the unsafe keyword for the Store trait.
• Removed the unsafe keyword for the Platform trait.
• Replaced the mechanism RPC traits in service with a single MechanismImpl trait.
• Made the mechanisms module private. Mechanism implementation can still be accessed via the Mechanism enum.
• Changed the Aes256Cbc mechanism to use no padding instead of zero padding.
• Updated dependencies to:
  • cbor-smol 0.5
  • cosey 0.4
  • flexiber 0.2
  • heapless 0.9
  • heapless-bytes 0.5
  • littlefs2 0.8

Fixed

• Fixed off-by-one error in RandomBytes request.
• Fixed a race condition when iterating over the filesystem in more than one
  client (#64).
• Fixed missing path validation in Filestore that allowed clients to escape
  their namespace (#65).
• wrap_key: Don't replace associated data with an empty array
• Fixed ClientFilestore to reject paths starting with /

Removed

• Removed unused items:
  • config: MAX_APPLICATION_NAME_LENGTH, MAX_LABEL_LENGTH, MAX_LONG_DATA_LENGTH, MAX_OBJECT_HANDLES, MAX_PATH_LENGTH
  • types: Attributes, CertificateType DataAttributes, KeyAttributes, Letters, LongData, ObjectType, consent::Urgency
• Removed the Syscall implementations for Service and the Syscall::try_as_new_client and Syscall::try_new_client methods.
• Removed TrussedInterchange and TRUSSED_INTERCHANGE from pipe.
• Removed the clients-? features.
• Removed the store! macro. Embedded runners should provide their own implementation. Software runners can use virt::StoreConfig to create a virt::Store.
• Removed unconditional Send implementation for Service.

trussed v0.2.0-rc.1

Added

• Added init_raw constructor for types generated by the store! macro.
• Added FilesystemClient::entry_metadata syscall.
• Added FilesystemClient::rename syscall.
• Added serializable flag to StorageAttributes for key agreement.
• Added virtual platform in virt module.
• Added methods for creating the client stores to ServiceResources.
• Implemented unsafe_inject_key for Aes256Cbc, Ed255, X255, P256.
• Added support for custom backends in backend module.
• Added optional support for API extensions in serde_extensions module
  behind the serde-extensions feature.
• Added types::Path re-export of littlefs2::path::Path.
• Reduced stack usage of Service::process.
• Added the Aes256Gcm mechanism.

Changed

• Made StorageAttributes non-exhaustive.
• Changed KeyStore<P: Platform> to KeyStore<S: Store>.
• Replaced the client ID with a ClientContext struct.
• Always trigger syscall in PollClient::request and remove
  PollClient::syscall.
• Upgrade the interchange dependency to version 0.3.0 (#99)
  • As a consequence the type pipe::TrussedInterchange becomes a constpipe::TRUSSED_INTERCHANGE
• Made Request, Reply, Error, Context, CoreContext, Mechanism,
  KeySerialization, SignatureSerialization, consent::Error, ui::Status non-exhaustive.
• Made postcard_deserialize, postcard_serialize and
  postcard_serialize_bytes private.
• Changed &PathBuf to &Path where possible.
• Change store implementations to use littlefs2’s DynFilesystem trait instead
  of being generic over the storage implementation.
• Add nonce argument to wrap_key and unwrap_key syscalls.
• Use nonce as IV for Aes256Cbc mechanism.
• Removed serde::{Deserialize, Serialize} implementations for the API request
  and reply structs, types::{consent::{Error, Level}, reboot::To, StorageAttributes, KeySerialization, SignatureSerialization}.
• Improved hex formatting of types::Id:
  • Removed the unused Id::hex.
  • Deprecated Id::hex_path and added Id::legacy_hex_path as a replacement.
  • Added Id::clean_hex_path as an alternative to Id::legacy_hex_path.
  • Changed Id::hex_clean to format zero as "00".
• Change client and mechanism selection:
  • Put all client traits, requests, replies and implementations behind feature flags.
  • Put all mechanisms behind feature flags.
  • Move CryptoClient::attest into new AttestationClient.
• Pass endpoints to Service::process instead of storing them in the service.
• Added support for non-static channels:
  • Added lifetimes to ClientImplementation and ServiceEndpoints.
  • Added the pipe::TrussedChannel type.
• Refactored the Store trait:
  • Removed the requirement for a static lifetime.
  • Removed the Fs wrapper type.
  • Removed the storage types to return &dyn DynFilesystem instead.
  • Removed the Copy requirement.
  • Removed the unsafe keyword for the Store trait.
• Removed the unsafe keyword for the Platform trait.
• Replaced the mechanism RPC traits in service with a single MechanismImpl trait.
• Made the mechanisms module private. Mechanism implementation can still be accessed via the Mechanism enum.
• Changed the Aes256Cbc mechanism to use no padding instead of zero padding.
• Updated dependencies to:
  • cbor-smol 0.5
  • cosey 0.4
  • flexiber 0.2
  • heapless 0.9
  • heapless-bytes 0.5
  • littlefs2 0.7

Fixed

• Fixed off-by-one error in RandomBytes request.
• Fixed a race condition when iterating over the filesystem in more than one
  client (#64).
• Fixed missing path validation in Filestore that allowed clients to escape
  their namespace (#65).
• wrap_key: Don't replace associated data with an empty array
• Fixed ClientFilestore to reject paths starting with /

Removed

• Removed unused items:
  • config: MAX_APPLICATION_NAME_LENGTH, MAX_LABEL_LENGTH, MAX_LONG_DATA_LENGTH, MAX_OBJECT_HANDLES, MAX_PATH_LENGTH
  • types: Attributes, CertificateType DataAttributes, KeyAttributes, Letters, LongData, ObjectType, consent::Urgency
• Removed the Syscall implementations for Service and the Syscall::try_as_new_client and Syscall::try_new_client methods.
• Removed TrussedInterchange and TRUSSED_INTERCHANGE from pipe.
• Removed the clients-? features.
• Removed the store! macro. Embedded runners should provide their own implementation. Software runners can use virt::StoreConfig to create a virt::Store.

trussed-core v0.2.2

Added

• Add Mechanism::Aes256Gcm and the Aes256Gcm trait behind the aes256-gcm feature flag.

trussed-core v0.2.1

Added

• Add UiClient::confirm_user_present_with_level.
• Add Mechanism::Mldsa44 and the Mldsa44 trait behind the mldsa44 feature flag and bump MAX_MESSAGE_LENGTH and MAX_SIGNATURE_LENGTH if mldsa44 is enabled.

trussed-core v0.2.0

Changed

• Deprecate FilesystemClient::debug_dump_store. Instead, a debugger should be used to extract the filesystem from a development device.
• Update to heapless-bytes v0.5.

trussed-core v0.1.0

Initial release extracting the core types from trussed: the client traits, the API definition and the types used in the API.

trussed-core v0.1.0-rc.1

Initial release extracting the core types from trussed: the client traits, the API definition and the types used in the API.