[keymgr_dpe] Check creator and owner seed valid bits
Open
@gautschimi is already working on this.
Since Aug 14, 2026.
IP:keymgr_dpe
- Dominant language
- SystemVerilog
- Stars
- 3.6k
- Forks
- 1.1k
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 141
Description
### Description
Currently, the KEYMGR_DPE RTL doesn't check the creator and owner seed valid bits coming from OTP_CTRL before advancing the corresponding boot stage. It ignores the those valid bits (see `keymgr_dpe.sv`) and just checks the provided seeds against all-zero and all-ones and rejects such seeds (see `keymgr_input_checks.sv`). But since the valid bits are there (and OTP_CTRL factors other requirements into the valid bits as well), the RTL should also check the valid bits.
This has been reported by @flaviens, thank you!
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.