Darjeeling OTP map update #28840
Open
Darjeeling OTP map update #28840
+10,167
−3,959
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
sameo
requested review from
Razer6,
pamaury and
rswarbrick
and removed request for
a team
We may want to define unsized but absorbent items within a partition, similar to how absorbent partitions behave within an OTP map. When not all reserved bits within a partition are allocated, the unallocated ones will be equally distributed between all absorbent items within that partition. Signed-off-by: Samuel Ortiz <[email protected]>
Integrated OpenTitan allows for defining multiple key roles. A key role defines what kind of asset a specific key should sign. Key manifest bundles in external flash and OTP authentication slots can hold multiple keys, each bound to a specific role. At a minimum, OT slots must hold a ownership transfer key and a key manifest one. The former is required for handling ownership transfer operation from a bootstrapped firmware while the latter allows for verifying all other keys made available from a signed key manifest bundle. Signed-off-by: Samuel Ortiz <[email protected]>
This is a refresh of the OTP map for integrated OpenTitan designs, e.g. Darjeeling: - Added SoC fuses partitions, to hold non-RoT but SoC specific fuse values. We define one partition for the Chip Probe (CP) manufacturing stage and one for the following Factory Testing (FT) stage. - Added a SCRATCH_FUSES partition as an unstructured, scratch partition for SW implementations to share. - Added RoT chicken bits, for controlling secure boot verification. Secure boot is enabled when those items are fused with a MuBi32 True value. - Added a HW_CFG2 partition for the SoC debug and manufacturing states. Moving those to their own dedicated partition allows for a more controlled locking of the other HW_CFG partitions, as the parts move through the manufacturing stages. - Added documentation for all OTP items. - Updated the alert configuration items. - Moved the RoT certificate and its MAC into a dedicated partition so that the RoT owner authentication slot can be locked as soon as all keys are provisioned (i.e. before personalization even starts). - Removed all flash related items. - Removed all Earlgrey specific items. Fixes lowRISC#28447 Signed-off-by: Samuel Ortiz <[email protected]>
Signed-off-by: Samuel Ortiz <[email protected]>
sameo
force-pushed
the
topic/otp/dj-map
branch
from
9a76068 to
9827871
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This is a refresh of the OTP map for integrated OpenTitan designs, e.g.
Darjeeling:
values. We define one partition for the Chip Probe (CP) manufacturing
stage and one for the following Factory Testing (FT) stage.
for SW implementations to share.
Secure boot is enabled when those items are fused with a MuBi32 True
value.
Moving those to their own dedicated partition allows for a more
controlled locking of the other HW_CFG partitions, as the parts move
through the manufacturing stages.
that the RoT owner authentication slot can be locked as soon as all
keys are provisioned (i.e. before personalization even starts).
Fixes #28447