Is there an example of how to use hardware cc310 on nrf52840 for sha-1

RE: Is there an example of how to use hardware cc310 on nrf52840 for sha-1

denis — Thu, 14 Feb 2019 16:01:39 GMT

I missed that. That did the trick! Thanks!

RE: Is there an example of how to use hardware cc310 on nrf52840 for sha-1

Jørgen Holmefjord — Thu, 14 Feb 2019 14:56:07 GMT

Have you added 'NVIC_EnableIRQ(CRYPTOCELL_IRQn);' anywhere before you enable the cryptocell? I see this is done in integration_tests_setup() in the example in the SDK.

RE: Is there an example of how to use hardware cc310 on nrf52840 for sha-1

denis — Wed, 13 Feb 2019 16:46:11 GMT

Getting closer. SaSi_LibInit and CRYS_HASH_Init return success. Then the first call to CRYS_HASH_Update appears to hang in SaSi_HalWaitInterrupt according to the debugger. Any idea why that might be?

void fd_sha_initialize(void) {
    NRF_CRYPTOCELL->ENABLE = 1;
    SA_SilibRetCode_t ret = SaSi_LibInit();
    fd_log_assert(ret == SA_SILIB_RET_OK);
}

void fd_sha1(fd_sha_source_t source, uint32_t address, uint32_t length, uint8_t *hash) {
    CRYS_HASHUserContext_t context;
    CRYSError_t ret = CRYS_HASH_Init(&context, CRYS_HASH_SHA1_mode);
    fd_log_assert(ret == CRYS_OK);
    uint8_t data[FD_SHA_BLOCK_SIZE];
    uint32_t remaining = length;
    while (remaining > 0) {
        uint32_t n = FD_SHA_BLOCK_SIZE;
        if (remaining < n) {
            n = remaining;
        }
        (*source)(address, data, n);
        ret = CRYS_HASH_Update(&context, data, n);
        fd_log_assert(ret == CRYS_OK);
        remaining -= n;
        address += n;
    }
    CRYS_HASH_Result_t result;
    ret = CRYS_HASH_Finish(&context, result);
    fd_log_assert(ret == CRYS_OK);
    memcpy(hash, result, FD_SHA_HASH_SIZE);
}

RE: Is there an example of how to use hardware cc310 on nrf52840 for sha-1

denis — Wed, 13 Feb 2019 15:55:29 GMT

Removed more includes and can compile now. Looks like I need to link with

external/nrf_cc310/lib/libnrf_cc310_0.9.10.a and I should be there.

RE: Is there an example of how to use hardware cc310 on nrf52840 for sha-1

denis — Wed, 13 Feb 2019 15:47:39 GMT

Thanks for that info. I've updated my code to use the CrypoCell API and it compiles now. However, when including those headers it still seems to want to include the nrf_crypto apis and ends up with an error trying to include malloc.h. Any ideas on how to not include that?

void fd_sha_initialize(void) {
    SA_SilibRetCode_t ret = SaSi_LibInit();
    fd_log_assert(ret == SA_SILIB_RET_OK);
}

void fd_sha1(fd_sha1_source_t source, uint32_t address, uint32_t length, uint8_t *hash) {
    CRYS_HASHUserContext_t context;
    CRYSError_t ret = CRYS_HASH_Init(&context, CRYS_HASH_SHA1_mode);
    fd_log_assert(ret == CRYS_OK);
    uint8_t data[FD_SHA_BLOCK_SIZE];
    uint32_t remaining = length;
    while (remaining > 0) {
        uint32_t n = FD_SHA_BLOCK_SIZE;
        if (remaining < n) {
            n = remaining;
        }
        (*source)(address, data, n);
        ret = CRYS_HASH_Update(&context, data, n);
        fd_log_assert(ret == CRYS_OK);
        remaining -= n;
        address += n;
    }
    CRYS_HASH_Result_t result;
    ret = CRYS_HASH_Finish(&context, result);
    fd_log_assert(ret == CRYS_OK);
    memcpy(hash, result, FD_SHA_HASH_SIZE);
}

RE: Is there an example of how to use hardware cc310 on nrf52840 for sha-1

Jørgen Holmefjord — Wed, 13 Feb 2019 10:09:58 GMT

Hi,

Unfortunately, SHA-1 hash is not supported in the nrf_crypto library, only SHA-256 and SHA-512 is supported. SHA-1 is old and not as secure as SHA-2, limiting its number of use-cases.

If you want to do SHA-1, you need to use the CC310 API directly. See CryptoCell HASH APIs and CryptoCell Integration Tests examples.

Best regards,
Jørgen