commit | a06d709d5d0fa1e87eede55a06d6afd1a9f47747 | [log] [tgz] |
---|---|---|
author | Michael Schaffner <msf@opentitan.org> | Fri Jun 25 17:15:40 2021 -0700 |
committer | Michael Schaffner <msf@google.com> | Thu Jul 08 12:22:18 2021 -0700 |
tree | 6938a1a4b2a9f62cd6379e5058190d68e45eabd2 | |
parent | f3c9a7f21cd45e25c849a0d9b298c6734dafd7bd [diff] |
[lc_ctrl/otp_ctrl] Check whether tokens have been provisioned This adds an additional check in the life cycle controller that checks whether the tokens have actually been provisioned and may be used. If a token is not valid, the corresponding state transitions guarded by that token will not be allowed. This also slightly reworks how the ID state of the device is decoded. I.e., the ID state is not something that is directly provisioned into OTP, but rather it is a condition that is inferred from the provisioning status of the secrets (creator root key). Signed-off-by: Michael Schaffner <msf@opentitan.org>
OpenTitan is an open source silicon Root of Trust (RoT) project. OpenTitan will make the silicon RoT design and implementation more transparent, trustworthy, and secure for enterprises, platform providers, and chip manufacturers. OpenTitan is administered by lowRISC CIC as a collaborative project to produce high quality, open IP for instantiation as a full-featured product. See the OpenTitan site and OpenTitan docs for more information about the project.
This repository contains hardware, software and utilities written as part of the OpenTitan project. It is structured as monolithic repository, or “monorepo”, where all components live in one repository. It exists to enable collaboration across partners participating in the OpenTitan project.
The project contains comprehensive documentation of all IPs and tools. You can access it online at docs.opentitan.org.
Have a look at CONTRIBUTING and our documentation on project organization and processes for guidelines on how to contribute code to this repository.
Unless otherwise noted, everything in this repository is covered by the Apache License, Version 2.0 (see LICENSE for full text).