trussed 0.2.0

Modern Cryptographic Firmware
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114

# Changelog
All notable changes to this project will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [Unreleased]

[Unreleased]: https://github.com/trussed-dev/trussed/compare/v0.2.0...HEAD

-

## [0.2.0] - 2026-06-18

[0.2.0]: https://github.com/trussed-dev/trussed/releases/tag/v0.2.0

### Added

- Added `init_raw` constructor for types generated by the `store!` macro.
- Added `FilesystemClient::entry_metadata` syscall.
- Added `FilesystemClient::rename` syscall.
- Added serializable flag to `StorageAttributes` for key agreement.
- Added virtual platform in `virt` module.
- Added methods for creating the client stores to `ServiceResources`.
- Implemented `unsafe_inject_key` for Aes256Cbc, Ed255, X255, P256.
- Added support for custom backends in `backend` module.
- Added optional support for API extensions in `serde_extensions` module
  behind the `serde-extensions` feature.
- Added `types::Path` re-export of `littlefs2::path::Path`.
- Reduced stack usage of `Service::process`.
- Added the `Aes256Gcm` mechanism.

### Changed

- Made `StorageAttributes` non-exhaustive.
- Changed `KeyStore<P: Platform>` to `KeyStore<S: Store>`.
- Replaced the client ID with a `ClientContext` struct.
- Always trigger syscall in `PollClient::request` and remove
  `PollClient::syscall`.
- Upgrade the `interchange` dependency to version 0.3.0 ([#99][])
  - As a consequence the type `pipe::TrussedInterchange` becomes a const`pipe::TRUSSED_INTERCHANGE`
- Made `Request`, `Reply`, `Error`, `Context`, `CoreContext`, `Mechanism`,
  `KeySerialization`, `SignatureSerialization`, `consent::Error`, `ui::Status` non-exhaustive.
- Made `postcard_deserialize`, `postcard_serialize` and
  `postcard_serialize_bytes` private.
- Changed `&PathBuf` to `&Path` where possible.
- Change store implementations to use littlefs2’s `DynFilesystem` trait instead
  of being generic over the storage implementation.
- Add `nonce` argument to `wrap_key` and `unwrap_key` syscalls.
- Use nonce as IV for Aes256Cbc mechanism.
- Removed `serde::{Deserialize, Serialize}` implementations for the API request
  and reply structs, `types::{consent::{Error, Level}, reboot::To, StorageAttributes,
  KeySerialization, SignatureSerialization}`.
- Improved hex formatting of `types::Id`:
  - Removed the unused `Id::hex`.
  - Deprecated `Id::hex_path` and added `Id::legacy_hex_path` as a replacement.
  - Added `Id::clean_hex_path` as an alternative to `Id::legacy_hex_path`.
  - Changed `Id::hex_clean` to format zero as `"00"`.
- Change client and mechanism selection:
  - Put all client traits, requests, replies and implementations behind feature flags.
  - Put all mechanisms behind feature flags.
  - Move `CryptoClient::attest` into new `AttestationClient`.
- Pass endpoints to `Service::process` instead of storing them in the service.
- Added support for non-static channels:
  - Added lifetimes to `ClientImplementation` and `ServiceEndpoints`.
  - Added the `pipe::TrussedChannel` type.
- Refactored the `Store` trait:
  - Removed the requirement for a static lifetime.
  - Removed the `Fs` wrapper type.
  - Removed the storage types to return `&dyn DynFilesystem` instead.
  - Removed the `Copy` requirement.
  - Removed the `unsafe` keyword for the `Store` trait.
- Removed the `unsafe` keyword for the `Platform` trait.
- Replaced the mechanism RPC traits in `service` with a single `MechanismImpl` trait.
- Made the `mechanisms` module private.  Mechanism implementation can still be accessed via the `Mechanism` enum.
- Changed the `Aes256Cbc` mechanism to use no padding instead of zero padding.
- Updated dependencies to:
  - `cbor-smol` 0.5
  - `cosey` 0.4
  - `flexiber` 0.2
  - `heapless` 0.9
  - `heapless-bytes` 0.5
  - `littlefs2` 0.8
  
### Fixed

- Fixed off-by-one error in `RandomBytes` request.
- Fixed a race condition when iterating over the filesystem in more than one
  client ([#64]).
- Fixed missing path validation in `Filestore` that allowed clients to escape
  their namespace ([#65]).
- wrap_key: Don't replace associated data with an empty array
- Fixed `ClientFilestore` to reject paths starting with `/`

### Removed

- Removed unused items:
  - `config`: `MAX_APPLICATION_NAME_LENGTH`, `MAX_LABEL_LENGTH`, `MAX_LONG_DATA_LENGTH`, `MAX_OBJECT_HANDLES`, `MAX_PATH_LENGTH`
  - `types`: `Attributes`, `CertificateType` `DataAttributes`, `KeyAttributes`, `Letters`, `LongData`, `ObjectType`, `consent::Urgency`
- Removed the `Syscall` implementations for `Service` and the `Syscall::try_as_new_client` and `Syscall::try_new_client` methods.
- Removed `TrussedInterchange` and `TRUSSED_INTERCHANGE` from `pipe`.
- Removed the `clients-?` features.
- Removed the `store!` macro.  Embedded runners should provide their own implementation.  Software runners can use `virt::StoreConfig` to create a `virt::Store`.
- Removed unconditional `Send` implementation for `Service`.

[#64]: https://github.com/trussed-dev/trussed/issues/64
[#65]: https://github.com/trussed-dev/trussed/issues/65
[#99]: https://github.com/trussed-dev/trussed/issues/99

## [0.1.0] - 2022-01-26

Initial release.

[0.1.0]: https://github.com/trussed-dev/trussed/releases/tag/0.1.0