lowRISC / lowRISC/opentitan

[rom_ext] Migrate to ECDSA verification of application firmware

Open
#24,641 1 comment 0 reactions 1 assignee Claimed by @cfrantz View on GitHub
SW:ROM_EXT
Dominant language
SystemVerilog
Stars
3.6k
Forks
1.1k
Avg merge
2d 22h
Merged PRs (30d)
141

Description

Migrate to ECDSA verification of application firmware.

Currently, the ROM_EXT uses RSA3K keys to validate application firmware, but we want to use ECDSA verification instead and eliminate the use of RSA keys.

- [ ] Migrate the ES ROM_EXT to using ECDSA keys
- [x] Cherry-pick ECDSA changes from `master` branch.
- [x] Integrate ECDSA sigverify into the ROM_EXT.
- [x] Change FPGA application keys to ECDSA keys.
- [x] Change SiVAL application keys to ECDSA keys.
- [x] Change ProdA application keys to ECDSA keys.
- [x] Change ProdC application keys to ECDSA keys.
- [x] Eliminate RSA application keys from the `earlgrey_es_sival` branch.
- [ ] Cherry-pick the ROM_EXT changes and new keys to `master`
- [ ] Cherry-pick the ROM_EXT changes and new keys to `earlgrey_1.0.0`

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.