[manuf] update TPM EK and probably (CEK and CIK) keys from P256 to P384
Open
@vbendeb is already working on this.
Since Apr 23, 2024.
Component:Software
Manufacturing
Type:Task
- Dominant language
- SystemVerilog
- Stars
- 3.6k
- Forks
- 1.1k
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 141
Description
The newest TPM platform profile requires TPM endorsement keys to be at least P384. Currently, TPM keys are P256 keys. This will require updating the OTBN boot.S code (and C lib wrapper `otbn_boot_services`) to contain an option for deriving both P256 and P384 key types
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.