lowRISC / lowRISC/opentitan

Ownership Transfer: ambiguity around ownership status during update-from-EEPROM flow

Open
#4,126 2 comments 0 reactions 1 assignee Claimed by @moidx View on GitHub
Component:Doc Component:Security Earlgrey-PROD Triaged Priority:P2 SW:ROM_EXT
Dominant language
SystemVerilog
Stars
3.6k
Forks
1.1k
Avg merge
2d 22h
Merged PRs (30d)
141

Description

In the section of the ownership transfer documentation that discusses [transferring ownership via EEPROM update](https://github.com/lowRISC/opentitan/blob/master/doc/security/specs/ownership_transfer/_index.md#ownership-transfer), I see "The Device is initially in UNOWNED state" and "The current owner endorses the next owner keys" in close proximity to each other. This seems to imply that a chip has an owner while it is in the UNOWNED state.

The ["Unlock Ownership"](https://github.com/lowRISC/opentitan/blob/master/doc/security/specs/ownership_transfer/_index.md#unlock-ownership-unlock-ownership) section should make it clear that the chip retains its prior owner when it transitions to UNOWNED.

@moidx

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.