[rom] Verify after sign in OTBN boot services library.
Open
SW:cryptolib
SW:ROM_EXT
- Dominant language
- SystemVerilog
- Stars
- 3.6k
- Forks
- 1.1k
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 141
Description
### Description
Within the OTBN code for attestation certificate endorsements, run `verify` right after `sign` as an FI mitigation. If the verify doesn't pass, lock OTBN so the attacker can't glean any information from the faulted signature.
See https://github.com/lowRISC/opentitan/pull/21824#issuecomment-1985256758 for more detailed discussion.
Contributor guide
Assessment
This issue has not been assessed yet.