Caliptra 2.0 PQC support including updates to DICE key derivations, DPE flow, KV flows and anything else that it impacts

chipsalliance / Caliptra

Caliptra IP and firmware for integrated Root of Trust block

Apache License 2.0

116 stars 29 forks source link

Open bharatpillilli opened 1 month ago

bharatpillilli commented 1 month ago

PQC interaction with DICE (Legacy: UDS-Seed -> DEOBF(UDS) -> Legacy is unchanged; New change: UDS-Seed -> DEOBF(UDS) -> HMAC(OUTPUT of DEBOF) -> PQC flow)
PQC interaction with KV
PQC KAT
PQC required fuses for FW signing, ownership transfer, SOC manifest authentication etc.

Tagging few others for FYI @varuns-nvidia @mojtaba-bisheh @Nitsirks @ekarabu @upadhyayulakiran @JohnTraverAmd

jhand2 commented 1 month ago

Thanks for opening this! I'll fill out details for the HW interactions in a spec PR.