| commit | 9f94ffb117e2da6697a479bdec73e8a9567a8f9b | [log] [tgz] |
|---|---|---|
| author | Alphan Ulusoy <alphan@google.com> | Tue Jan 18 12:43:19 2022 -0500 |
| committer | Alphan Ulusoy <alphan@google.com> | Tue Jan 25 14:02:48 2022 -0500 |
| tree | 5818a1b60434e9a1246eb93ab3a1a9491ee3ac1a | |
| parent | 8d3c4117926364e08dd44794cf5b157571e8e33b [diff] |
[sw/silicon_creator] Harden sigverify_keys This change hardens sigverify_keys by adding redundant checks for the life cycle state, key type, OTP read value, and a final redundant key validity check before returning the key. The order in which a key is checked is changed such that we first check the life cycle state followed by the key type. This allows us to have a single switch statement for the life cycle state which is easier to harden. Signed-off-by: Alphan Ulusoy <alphan@google.com>
OpenTitan is an open source silicon Root of Trust (RoT) project. OpenTitan will make the silicon RoT design and implementation more transparent, trustworthy, and secure for enterprises, platform providers, and chip manufacturers. OpenTitan is administered by lowRISC CIC as a collaborative project to produce high quality, open IP for instantiation as a full-featured product. See the OpenTitan site and OpenTitan docs for more information about the project.
This repository contains hardware, software and utilities written as part of the OpenTitan project. It is structured as monolithic repository, or “monorepo”, where all components live in one repository. It exists to enable collaboration across partners participating in the OpenTitan project.
The project contains comprehensive documentation of all IPs and tools. You can access it online at docs.opentitan.org.
Have a look at CONTRIBUTING and our documentation on project organization and processes for guidelines on how to contribute code to this repository.
Unless otherwise noted, everything in this repository is covered by the Apache License, Version 2.0 (see LICENSE for full text).