lowRISC / lowRISC/opentitan-provisioning
[ateclient,test_program] split SKU auth password between AteClient lib and test program inputs
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 16
- Forks
- 13
- Avg merge
- 2d 3h
- Merged PRs (30d)
- 18
Description
Currently, the SKU authorization password is passed as an [input](https://github.com/lowRISC/opentitan-provisioning/blob/0e64a8ca9b66a02fe010576a69df32016469f1b4/src/ate/test_programs/cp.cc#L102) to the test program. However to enhance security, the SKU password input to the test program should be XORed with a portion of the password compiled into the AteClien lib before sending it to the PA for verification.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the SKU password input in src/ate/test_programs/cp.cc at the linked line, then trace how it crosses into the AteClient library and is sent to the PA. Define the password portion and boundary behavior before implementing the split, and verify that the test program input is XORed with the library-compiled portion before verification.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100