lowRISC / lowRISC/opentitan

Create commit hooks which warn about private key material

Open
#5,843 6 comments 0 reactions 1 assignee View on GitHub

@cfrantz is already working on this.

Since Feb 5, 2024.

Component:Security Earlgrey-PROD Candidate
Dominant language
SystemVerilog
Stars
3.6k
Forks
1.1k
Avg merge
2d 22h
Merged PRs (30d)
141

Description

In the past, private key material has been accidentally exposed by submitting private keys into public codebases.

Example: This key is called the "test key" and its existence in a public repository allows anyone to sign code to run on a prior generation of security chip:
https://chromium.googlesource.com/chromiumos/platform/ec/+/ee86a8ce1f343186bcc545cd68d7ad54ec7f3ea6/util/signer/loader-testkey-A.pem

Although the above key does not confer any sort of prod authority to the user of that key, it effectively turns that prior generation of chip into an open sample.

We should have a commit-hook that warns about private key material and forbids commits without an explicit override from the committer. We have something like this in the "google3" codebase where submitting key material must be accompanied by a commit comment of the form `DISABLE_PRIVATE_KEY_CHECK=`.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.