Crypto: - Replace broken ChaCha20 (static nonce) with ChaCha20-Poly1305 AEAD - HKDF-SHA256 key derivation from per-device factory NVS master keys - Random 12-byte nonce per message (ESP32 hardware RNG) - crypto_init/encrypt/decrypt API with mbedtls legacy (ESP-IDF v5.3.2) - Custom partition table with factory NVS (fctry at 0x10000) Firmware: - crypto.c full rewrite, messages.c device_id prefix + AEAD encrypt - crypto_init() at boot with esp_restart() on failure - Fix command_t initializations across all modules (sub/help fields) - Clean CMakeLists dependencies for ESP-IDF v5.3.2 C3PO (C2): - Rename tools/c2 + tools/c3po -> tools/C3PO - Per-device CryptoContext with HKDF key derivation - KeyStore (keys.json) for master key management - Transport parses device_id:base64(...) wire format Tools: - New tools/provisioning/provision.py for factory NVS key generation - Updated flasher with mbedtls config for v5.3.2 Docs: - Update all READMEs for new crypto, C3PO paths, provisioning - Update roadmap, architecture diagrams, security sections - Update CONTRIBUTING.md project structure
56 lines
1.8 KiB
HTML
56 lines
1.8 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
<title>{% block title %}ESPILON{% endblock %}</title>
|
|
<link rel="stylesheet" href="{{ url_for('static', filename='css/main.css') }}">
|
|
{% block head %}{% endblock %}
|
|
</head>
|
|
<body>
|
|
<header>
|
|
<div class="logo">ESPILON</div>
|
|
<nav class="main-nav">
|
|
<a href="/dashboard" class="nav-link {% if active_page == 'dashboard' %}active{% endif %}">
|
|
Dashboard
|
|
</a>
|
|
<a href="/cameras" class="nav-link {% if active_page == 'cameras' %}active{% endif %}">
|
|
Cameras
|
|
</a>
|
|
<a href="/mlat" class="nav-link {% if active_page == 'mlat' %}active{% endif %}">
|
|
MLAT
|
|
</a>
|
|
<a href="/honeypot" class="nav-link {% if active_page == 'honeypot' %}active{% endif %}">
|
|
Honeypot
|
|
</a>
|
|
</nav>
|
|
<div class="header-right">
|
|
<div class="status">
|
|
<div class="status-dot"></div>
|
|
<span id="device-count">-</span> device(s)
|
|
</div>
|
|
<a href="/logout" class="logout">Logout</a>
|
|
</div>
|
|
</header>
|
|
|
|
<main>
|
|
{% block content %}{% endblock %}
|
|
</main>
|
|
|
|
<script>
|
|
// Update device count in header
|
|
async function updateStats() {
|
|
try {
|
|
const res = await fetch('/api/stats');
|
|
const data = await res.json();
|
|
document.getElementById('device-count').textContent = data.connected_devices || 0;
|
|
} catch (e) {}
|
|
}
|
|
|
|
updateStats();
|
|
setInterval(updateStats, 10000);
|
|
</script>
|
|
{% block scripts %}{% endblock %}
|
|
</body>
|
|
</html>
|