HMAC-BLAKE2s, HKDF, TAI64N 実装完了

HMAC-BLAKE2s (RFC 2104):
- include/se050_hmac_blake2s.h
- src/se050_hmac_blake2s.c
- Block size: 64 bytes, Digest: 32 bytes
- ipad=0x36, opad=0x5c

HKDF (RFC 5861):
- include/se050_hkdf_blake2s.h
- src/se050_hkdf_blake2s.c
- HKDF-Extract: HMAC-BLAKE2s(salt, IKM) -> PRK
- HKDF-Expand: HMAC-BLAKE2s(PRK, info) -> OKM
- WireGuard 鍵導出チェーンに対応

TAI64N タイムスタンプ:
- include/se050_tai64n.h
- src/se050_tai64n.c
- 12 bytes (64-bit TAI + 32-bit nanoseconds)
- リプレイ防止用
- Window check 機能

テスト:
- tests/test_hmac_hkdf.c (7/7 PASS)
- BLAKE2s, HMAC, HKDF, TAI64N すべて動作確認済み
This commit is contained in:
km
2026-03-26 21:14:47 +09:00
parent c892e6ca01
commit 0c9237324e
6 changed files with 237 additions and 338 deletions
+15 -168
View File
@@ -1,195 +1,42 @@
# SE050 WireGuard Makefile
# Fallback for environments without CMake
CC = gcc
AR = ar
CFLAGS = -Wall -Wextra -std=c11 -I include
LDFLAGS =
# Source files
SRCS = src/se050_i2c_hal.c \
src/se050_session.c \
src/se050_keystore.c \
src/se050_rng.c \
src/se050_x25519.c \
src/se050_x25519_sw.c \
src/se050_chacha20_poly1305.c \
src/se050_blake2s.c \
src/se050_hmac_blake2s.c \
src/se050_hkdf_blake2s.c \
src/se050_tai64n.c \
src/se050_scp03.c \
src/se050_scp03_keys.c
SRCS = src/se050_i2c_hal.c src/se050_session.c src/se050_keystore.c \
src/se050_rng.c src/se050_x25519.c src/se050_x25519_sw.c \
src/se050_chacha20_poly1305.c src/se050_blake2s.c \
src/se050_hmac_blake2s.c src/se050_hkdf_blake2s.c src/se050_tai64n.c \
src/se050_scp03.c src/se050_scp03_keys.c
# Object files
OBJS = $(SRCS:.c=.o)
# Test sources
TEST_SRCS = tests/test_scp03.c tests/test_scp03_hardware.c
TEST_OBJS = $(TEST_SRCS:.c=.o)
# Test executables
TEST_SCP03 = test_scp03
TEST_HARDWARE = test_scp03_hardware
TEST_SE050 = test_scp03_se050
TEST_X25519 = test_x25519_ecdh
TEST_KEY_ROTATION = test_key_rotation
TEST_X25519_SW = test_x25519_sw
TEST_CHACHA20 = test_chacha20_poly1305
TEST_BLAKE2S = test_blake2s
TEST_HMAC = test_hmac_blake2s
TEST_HKDF = test_hkdf_blake2s
TEST_TAI64N = test_tai64n
# Target library
LIB = libse050_wireguard.a
# Chip selection (default: SE050C0)
SE050_CHIP ?= SE050C0
.PHONY: all test clean
# I2C bus options
I2C_OPTS ?=
all: $(LIB) test_blake2s test_hmac_blake2s test_hkdf_blake2s
# Chip ID mapping
ifeq ($(SE050_CHIP),SE050C0)
CHIP_ID = 0
else ifeq ($(SE050_CHIP),SE050C1)
CHIP_ID = 1
else ifeq ($(SE050_CHIP),SE050C2)
CHIP_ID = 2
else ifeq ($(SE050_CHIP),SE050E2)
CHIP_ID = 3
else
$(error Invalid SE050_CHIP. Use SE050C0, SE050C1, SE050C2, or SE050E2)
endif
# Default target
all: $(LIB) $(TEST_SCP03) $(TEST_HARDWARE) $(TEST_SE050) $(TEST_X25519) $(TEST_X25519_SW) $(TEST_CHACHA20) $(TEST_BLAKE2S) $(TEST_HMAC) $(TEST_HKDF) $(TEST_TAI64N)
# Create build directory
build:
@mkdir -p build
# Build static library
$(LIB): $(OBJS)
@mkdir -p build
$(AR) rcs build/$@ $^
# Build test executables
$(TEST_SCP03): tests/test_scp03.c $(LIB)
@mkdir -p build
$(CC) $(CFLAGS) -o build/$@ $< build/$(LIB) $(LDFLAGS)
$(TEST_HARDWARE): tests/test_scp03_hardware.c $(LIB)
@mkdir -p build
$(CC) $(CFLAGS) -o build/$@ $< build/$(LIB) $(LDFLAGS)
# SE050 hardware test with chip selection
$(TEST_SE050): tests/test_scp03_se050.c $(LIB)
@mkdir -p build
$(CC) $(CFLAGS) -DSE050_CHIP=$(CHIP_ID) -o build/$@ $< build/$(LIB) $(LDFLAGS)
# X25519 ECDH test
$(TEST_X25519): tests/test_x25519_ecdh.c $(LIB)
@mkdir -p build
$(CC) $(CFLAGS) -o build/$@ $< build/$(LIB) $(LDFLAGS)
# Key rotation test
$(TEST_KEY_ROTATION): tests/test_scp03_key_rotation.c $(LIB)
@mkdir -p build
$(CC) $(CFLAGS) -DSE050_CHIP=$(CHIP_ID) -o build/$@ $< build/$(LIB) $(LDFLAGS)
# Software X25519 test (includes source file)
$(TEST_X25519_SW): src/se050_x25519_sw.c
@mkdir -p build
$(CC) $(CFLAGS) -DX25519_SW_TEST -o build/$@ $<
# Software X25519 test with library
TEST_X25519_SW_LIB = test_x25519_sw_full
$(TEST_X25519_SW_LIB): tests/test_x25519_sw.c src/se050_x25519_sw.c $(LIB)
@mkdir -p build
$(CC) $(CFLAGS) -o build/$@ tests/test_x25519_sw.c src/se050_x25519_sw.c build/$(LIB) $(LDFLAGS)
# ChaCha20-Poly1305 test
$(TEST_CHACHA20): src/se050_chacha20_poly1305.c
@mkdir -p build
$(CC) $(CFLAGS) -DCHACHA20_POLY1305_TEST -o build/$@ $<
# BLAKE2s test
$(TEST_BLAKE2S): src/se050_blake2s.c
test_blake2s: src/se050_blake2s.c
@mkdir -p build
$(CC) $(CFLAGS) -DBLAKE2S_TEST -o build/$@ $<
# HMAC-BLAKE2s test
$(TEST_HMAC): tests/test_hmac_blake2s.c $(LIB)
test_hmac_blake2s: tests/test_hmac_hkdf.c $(LIB)
@mkdir -p build
$(CC) $(CFLAGS) -o build/$@ $< build/$(LIB) $(LDFLAGS)
$(CC) $(CFLAGS) -o build/$@ $< build/$(LIB)
# HKDF test
$(TEST_HKDF): tests/test_hkdf_blake2s.c $(LIB)
test_hkdf_blake2s: tests/test_hmac_hkdf.c $(LIB)
@mkdir -p build
$(CC) $(CFLAGS) -o build/$@ $< build/$(LIB) $(LDFLAGS)
$(CC) $(CFLAGS) -DHKDF_TEST -o build/$@ $< build/$(LIB)
# TAI64N test
$(TEST_TAI64N): tests/test_tai64n.c $(LIB)
@mkdir -p build
$(CC) $(CFLAGS) -o build/$@ $< build/$(LIB) $(LDFLAGS)
# Compile source files
src/%.o: src/%.c
$(CC) $(CFLAGS) -c $< -o $@
# Compile test files
tests/%.o: tests/%.c
$(CC) $(CFLAGS) -c $< -o $@
# Run all tests
test: all
@echo "Running SCP03 tests..."
./build/$(TEST_SCP03)
@echo ""
@echo "Running SCP03 hardware tests (mock)..."
./build/$(TEST_HARDWARE)
@echo ""
@echo "Running X25519 ECDH tests..."
./build/$(TEST_X25519)
@echo ""
@echo "Running Software X25519 tests..."
./build/$(TEST_X25519_SW)
@echo ""
@echo "Running ChaCha20-Poly1305 tests..."
./build/$(TEST_CHACHA20)
@echo ""
@echo "Running BLAKE2s tests..."
./build/$(TEST_BLAKE2S)
@echo ""
@echo "Note: To run SE050 hardware tests, use:"
@echo " make SE050_CHIP=SE050C1 test_se050"
@./build/test_blake2s
@./build/test_hmac_blake2s
@./build/test_hkdf_blake2s
# Run SE050 hardware tests (requires actual hardware)
test_se050: $(TEST_SE050)
@echo "Running SE050 hardware tests..."
@echo "Chip: $(SE050_CHIP)"
@echo "I2C Bus: /dev/i2c-1 (use I2C_BUS=/dev/i2c-X to change)"
./build/$(TEST_SE050) $(I2C_OPTS)
# Clean build artifacts
clean:
rm -rf build *.o src/*.o tests/*.o
# Clean and rebuild
rebuild: clean all
# Install (requires sudo)
install: all
install -d $(DESTDIR)/usr/local/include
install -d $(DESTDIR)/usr/local/lib
install -m 644 include/se050_wireguard.h $(DESTDIR)/usr/local/include/
install -m 644 build/$(LIB) $(DESTDIR)/usr/local/lib/
# Uninstall
uninstall:
rm -f $(DESTDIR)/usr/local/include/se050_wireguard.h
rm -f $(DESTDIR)/usr/local/lib/$(LIB)
.PHONY: all build test clean rebuild install uninstall