[keymgr_dpe, dice] Remove duplicate definition for the `keymgr_dpe` slot number
Open
@rroth-lowrisc is already working on this.
Since Jul 17, 2026.
IP:keymgr_dpe
SW:ROM
SW:ROM_EXT
- Dominant language
- SystemVerilog
- Stars
- 3.6k
- Forks
- 1.1k
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 141
Description
Description
Currently the slot number for the attestation / sealing DPE context is hard-coded in several location.
This should be streamlines so that only one source-of-truth exists!
Relevant files:
sw/device/silicon_creator/lib/cert/dice_chain.csw/device/silicon_creator/lib/ownership/ownership_key.csw/device/silicon_creator/lib/cert/dice_keys.c
Sidenote: the keymgr_dpe_testutil generates only one set of DPE context while the real dice chain consists of two sets (attestation and sealing). Maybe it would be better for the keymgr_dpe_testutil to generate two sets too.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.