Parsec Secure Element Driver

This repository contains an implementation of a PSA Secure Element using the Parsec service. It implements the Secure Element Hardware Abstraction Layer and compiles to a library exposing a psa_drv_se_t structure.

How to build and use the driver

When being built, this driver needs to use the same PSA Crypto API interface implementation that is going to register it. You need to specify the location of psa/ header files folder with the environment variable MBEDTLS_INCLUDE_DIR. For example if the mbedtls project is on the same directory:

$ MBEDTLS_INCLUDE_DIR=$(pwd)/mbedtls/include cargo build

This will produce libparsec_se_driver.a in target/debug or target/release. This library contains the psa_drv_se_t symbol defined in the include/parsec_se_driver.h file. That header file should be included under the same include directory than the PSA psa/crypto.h file coming from the PSA Cryptography API implementation.

The build scripts have a dependency on libclang, which is needed on the system.

Compatibility with Mbed TLS

The following tuples have been tested together.

Parsec SE driver version	Mbed Crypto/Mbed TLS version
0.4.0	2.22.0
0.5.0	2.25.0
0.6.0	2.27.0

Notice

This implementation is currently work-in-progress and might not implement all operations or parameters of the HAL.

The driver produced currently uses Parsec default authentication method. If Parsec is using the Direct authenticator, the application name of requests made to Parsec by this SE driver will be "Parsec SE Driver".

Make sure to check the Parsec and Parsec Rust Client threat models to make sure that your use-case is secure.

License

The software is provided under Apache-2.0. Contributions to this project are accepted under the same license.

Contributing

Please check the Contribution Guidelines to know more about the contribution process.

Copyright 2020 Contributors to the Parsec project.