| commit | eb7bf611ec56ca9c38de77c525cc4827fe94dbd4 | [log] [tgz] |
|---|---|---|
| author | Timothy Chen <timothytim@google.com> | Tue Aug 03 16:17:09 2021 -0700 |
| committer | tjaychen <timothytim@google.com> | Fri Aug 06 10:00:45 2021 -0700 |
| tree | f3f022fc84813de495801fcc14b68324f399c0e3 | |
| parent | b7d0c2799d67567564f476b833f4c3f1bcae0b68 [diff] |
[keymgr] Continued security hardening - Add redundancy to kmac interface counter - Add sparse encoding to kmac transfer fsm - Make the fault / error behavior more consistent. Faults will always cause keymgr to transition into "Disabled" state if an operation is ongoing. When transitioning because of a fault, the key state is always "wiped" with entropy. Once transitioned into disable state, the behavior will always be consistent, ie, random data will be used for operations, and the resulting garbage data is also used to update the state. Signed-off-by: Timothy Chen <timothytim@google.com>
OpenTitan is an open source silicon Root of Trust (RoT) project. OpenTitan will make the silicon RoT design and implementation more transparent, trustworthy, and secure for enterprises, platform providers, and chip manufacturers. OpenTitan is administered by lowRISC CIC as a collaborative project to produce high quality, open IP for instantiation as a full-featured product. See the OpenTitan site and OpenTitan docs for more information about the project.
This repository contains hardware, software and utilities written as part of the OpenTitan project. It is structured as monolithic repository, or “monorepo”, where all components live in one repository. It exists to enable collaboration across partners participating in the OpenTitan project.
The project contains comprehensive documentation of all IPs and tools. You can access it online at docs.opentitan.org.
Have a look at CONTRIBUTING and our documentation on project organization and processes for guidelines on how to contribute code to this repository.
Unless otherwise noted, everything in this repository is covered by the Apache License, Version 2.0 (see LICENSE for full text).