diff --git a/signing/logs/2025-02-07.md b/signing/logs/2025-02-07.md new file mode 100644 index 0000000000000..7eb62060d9557 --- /dev/null +++ b/signing/logs/2025-02-07.md @@ -0,0 +1,184 @@ +# Signing Ceremony 2025-02-07 + +- Purpose: + - Create new a ROM\_EXT release for Earlgrey A1 silicon. + - Correct the ROM_EXT flash protection regions. + - Introduce ECDSA P256 + SLH-DSA hybrid signing for application payloads. +- Participants: cfrantz (leader), moidx(witness), ttrippel (witness). + +## Ceremony Prolog + +Before the ceremony, we double checked build reproducibility. +At opentitan commit fa29558e3d605600db08350d1dffb681f65b7472 on branch +`earlgrey_1.0.0`, we ran: + +``` +bazel build --stamp \ + //sw/device/silicon_creator/rom_ext/sival:digests \ + @provisioning_exts//shared/rom_ext/gb:digests + +sha256sum \ + bazel-out/k8-fastbuild/bin/sw/device/silicon_creator/rom_ext/sival/digests.tar \ + bazel-out/k8-fastbuild/bin/external/provisioning_exts/shared/rom_ext/gb/digests.tar +eacd161fd033b4383cd7396d0c13122a1a086049dd9d722087a3b87fb3282b45 bazel-out/k8-fastbuild/bin/sw/device/silicon_creator/rom_ext/sival/digests.tar +49bc29af1e4771e0f5248777f197a07b9665f92896251771777b7124d604729d bazel-out/k8-fastbuild/bin/external/provisioning_exts/shared/rom_ext/gb/digests.tar + +``` + +Note: there is a build reproducibility error with the `dice_cwt` variant of the ROM_EXT. We verified that the `dice_x509` ROM_EXTs are reproducible by examining the SHA256 digets of the digest files: + +``` +sival$ sha256sum *x509*.digest +be1a9f502cb7419b2b980e288a9ba7e2629a23744dc788711ac732a2d5ebfc0d rom_ext_dice_x509_prod_slot_a_fpga_cw310.digest +be1a9f502cb7419b2b980e288a9ba7e2629a23744dc788711ac732a2d5ebfc0d rom_ext_dice_x509_prod_slot_a_fpga_cw340.digest +bdf03ffd4972d216c7d8c9990c6c5310aa7165f2cea39e20d5541efb58454a96 rom_ext_dice_x509_prod_slot_a_silicon_creator.digest +1ad4c3e1cc4155645457cc2ac556bf42e6e789b1cbb52546c11e7d14f83eadaa rom_ext_dice_x509_prod_slot_b_fpga_cw310.digest +1ad4c3e1cc4155645457cc2ac556bf42e6e789b1cbb52546c11e7d14f83eadaa rom_ext_dice_x509_prod_slot_b_fpga_cw340.digest +b1dc4d7351f36832acede7d0db5090c10466c96eb154af3232428ff1f093c035 rom_ext_dice_x509_prod_slot_b_silicon_creator.digest +e67c1e6e4d8b159de67f6970ec0da5ba0ae321a84905077fea2d17d91c1d78b3 rom_ext_dice_x509_prod_slot_virtual_fpga_cw310.digest +e67c1e6e4d8b159de67f6970ec0da5ba0ae321a84905077fea2d17d91c1d78b3 rom_ext_dice_x509_prod_slot_virtual_fpga_cw340.digest +be38e349ba3331b3081103ba1c2ca136488b22b42a5c25cd612884b002ba6ae8 rom_ext_dice_x509_prod_slot_virtual_silicon_creator.digest + +gb$ sha256sum *x509*.digest +9b96c73872a8ef7fb24fac722805d64dd3919b409a6d558b05bc44dd98e8fff0 rom_ext_dice_x509_prod_slot_a_fpga_cw310.digest +9b96c73872a8ef7fb24fac722805d64dd3919b409a6d558b05bc44dd98e8fff0 rom_ext_dice_x509_prod_slot_a_fpga_cw340.digest +1ce702517305ae501c3a5b52c24a9300add0518eb866e1a9c5f1e94de96bd6aa rom_ext_dice_x509_prod_slot_a_silicon_creator.digest +2517e453520009e7933500519a928553014f15c0b631b3af9a9e61bb12513c6c rom_ext_dice_x509_prod_slot_b_fpga_cw310.digest +2517e453520009e7933500519a928553014f15c0b631b3af9a9e61bb12513c6c rom_ext_dice_x509_prod_slot_b_fpga_cw340.digest +224de5da6fee9721f3663135fdb44de9e74366b29d7baa60d33a2dbacef6ccc3 rom_ext_dice_x509_prod_slot_b_silicon_creator.digest +66925ca85ccf19fee3fe98644eb887b253305ca18a2ee6cffa2722ed0b2b5014 rom_ext_dice_x509_prod_slot_virtual_fpga_cw310.digest +66925ca85ccf19fee3fe98644eb887b253305ca18a2ee6cffa2722ed0b2b5014 rom_ext_dice_x509_prod_slot_virtual_fpga_cw340.digest +d0117ca73a009d2dc2cbede1372df93a2c7417acc3cbe993ac95f6e0d80a2675 rom_ext_dice_x509_prod_slot_virtual_silicon_creator.digest +``` + +We copied the digests and `hsmtool` to a staging subdirectory. +``` +cp bazel-out/k8-fastbuild/bin/sw/device/silicon_creator/rom_ext/sival/digests.tar ~/siging/sival.tar +cp bazel-out/k8-fastbuild/bin/external/provisioning_exts/shared/rom_ext/gb/digests.tar ~/signing/gb.tar +cp bazel-out/k8-fastbuild/bin/sw/host/hsmtool/hsmtool ~/signing +``` + +## NitroKey Preparation + +In order to communicate with the NitroKey token holding the key material, we used the `opensc` package. + +## Ceremony + +### Setup & Authenticate to the HSM + +``` +$ cd ~/signing +$ export HSMTOOL_MODULE=/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so + +$ ./hsmtool token list +{ + "tokens": [ + { + "label": "earlgrey_a1 (UserPIN)", + "manufacturer_id": "www.CardContact.de", + "model": "PKCS#15 emulated", + "serial_number": "DENK0107124" + } + ] +} + +$ export HSMTOOL_SPX_MODULE=pkcs11-ef +``` + +## Signing + +Signing was performed in the staging subdirectory. +I have an `hsmtool` profile defined named `earlgrey_a1_opensc` which supplies the username and PIN. + +### Sival signatures + +``` +$ mkdir sival +$ cd sival +$ tar xvf ../sival.tar +$ ../hsmtool --profile earlgrey_a1_opensc exec presigning.json +``` + +### GB signatures + +``` +$ mkdir gb +$ cd gb +$ tar xvf ../gb.tar +$ ../hsmtool --profile earlgrey_a1_opensc exec presigning.json +``` + +## Ceremony Epilog + +After signing, the signatures were collected so they could be tested prior to +publishing the signatures and binaries. + +``` +$ tar cvf signatures.tar */*_sig +gb/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.ecdsa_sig +gb/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.spx_sig +gb/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.ecdsa_sig +gb/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.spx_sig +gb/rom_ext_dice_cwt_prod_slot_a_silicon_creator.ecdsa_sig +gb/rom_ext_dice_cwt_prod_slot_a_silicon_creator.spx_sig +gb/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.ecdsa_sig +gb/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.spx_sig +gb/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.ecdsa_sig +gb/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.spx_sig +gb/rom_ext_dice_cwt_prod_slot_b_silicon_creator.ecdsa_sig +gb/rom_ext_dice_cwt_prod_slot_b_silicon_creator.spx_sig +gb/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.ecdsa_sig +gb/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.spx_sig +gb/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.ecdsa_sig +gb/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.spx_sig +gb/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.ecdsa_sig +gb/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.spx_sig +gb/rom_ext_dice_x509_prod_slot_a_fpga_cw310.ecdsa_sig +gb/rom_ext_dice_x509_prod_slot_a_fpga_cw310.spx_sig +gb/rom_ext_dice_x509_prod_slot_a_fpga_cw340.ecdsa_sig +gb/rom_ext_dice_x509_prod_slot_a_fpga_cw340.spx_sig +gb/rom_ext_dice_x509_prod_slot_a_silicon_creator.ecdsa_sig +gb/rom_ext_dice_x509_prod_slot_a_silicon_creator.spx_sig +gb/rom_ext_dice_x509_prod_slot_b_fpga_cw310.ecdsa_sig +gb/rom_ext_dice_x509_prod_slot_b_fpga_cw310.spx_sig +gb/rom_ext_dice_x509_prod_slot_b_fpga_cw340.ecdsa_sig +gb/rom_ext_dice_x509_prod_slot_b_fpga_cw340.spx_sig +gb/rom_ext_dice_x509_prod_slot_b_silicon_creator.ecdsa_sig +gb/rom_ext_dice_x509_prod_slot_b_silicon_creator.spx_sig +gb/rom_ext_dice_x509_prod_slot_virtual_fpga_cw310.ecdsa_sig +gb/rom_ext_dice_x509_prod_slot_virtual_fpga_cw310.spx_sig +gb/rom_ext_dice_x509_prod_slot_virtual_fpga_cw340.ecdsa_sig +gb/rom_ext_dice_x509_prod_slot_virtual_fpga_cw340.spx_sig +gb/rom_ext_dice_x509_prod_slot_virtual_silicon_creator.ecdsa_sig +gb/rom_ext_dice_x509_prod_slot_virtual_silicon_creator.spx_sig +sival/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.ecdsa_sig +sival/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.ecdsa_sig +sival/rom_ext_dice_cwt_prod_slot_a_silicon_creator.ecdsa_sig +sival/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.ecdsa_sig +sival/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.ecdsa_sig +sival/rom_ext_dice_cwt_prod_slot_b_silicon_creator.ecdsa_sig +sival/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.ecdsa_sig +sival/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.ecdsa_sig +sival/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.ecdsa_sig +sival/rom_ext_dice_x509_prod_slot_a_fpga_cw310.ecdsa_sig +sival/rom_ext_dice_x509_prod_slot_a_fpga_cw340.ecdsa_sig +sival/rom_ext_dice_x509_prod_slot_a_silicon_creator.ecdsa_sig +sival/rom_ext_dice_x509_prod_slot_b_fpga_cw310.ecdsa_sig +sival/rom_ext_dice_x509_prod_slot_b_fpga_cw340.ecdsa_sig +sival/rom_ext_dice_x509_prod_slot_b_silicon_creator.ecdsa_sig +sival/rom_ext_dice_x509_prod_slot_virtual_fpga_cw310.ecdsa_sig +sival/rom_ext_dice_x509_prod_slot_virtual_fpga_cw340.ecdsa_sig +sival/rom_ext_dice_x509_prod_slot_virtual_silicon_creator.ecdsa_sig + +$ exit +``` + +### Attaching signatures + +The following command was used to attach the signatures to the ROM\_EXT binaries: + +``` +bazel build --stamp \ + //sw/device/silicon_creator/rom_ext/sival:signed \ + @provisioning_exts//shared/rom_ext/gb:signed +``` diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.signed.bin index 18f4bac6b8e35..ce15b09fed7d6 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.signed.bin index 530105fd128d9..9c777c2ed66b9 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_silicon_creator.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_silicon_creator.signed.bin index 6ee8bcf5d34de..6e1df0ace40b0 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_silicon_creator.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_a_silicon_creator.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.signed.bin index 599c2656618b0..16c46a2c8f5ed 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.signed.bin index a3d9ed047872b..26c4e1e01ba1a 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_silicon_creator.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_silicon_creator.signed.bin index 42ba15afe5622..5d4694d0471d9 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_silicon_creator.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_b_silicon_creator.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.signed.bin index e3d42102c6775..cc0415414be03 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.signed.bin index e7d2ea3a9dbdf..89fb0ef4b0e9c 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.signed.bin index 1f9dc8e8d007e..3e5a17c36549f 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_fpga_cw310.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_fpga_cw310.signed.bin index e18a57901a148..9c093106e1c95 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_fpga_cw310.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_fpga_cw310.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_fpga_cw340.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_fpga_cw340.signed.bin index 356ffd3f7a05a..98653cf3d89d3 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_fpga_cw340.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_fpga_cw340.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_silicon_creator.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_silicon_creator.signed.bin index cc229fd30701a..423b535d3ebb4 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_silicon_creator.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_a_silicon_creator.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_fpga_cw310.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_fpga_cw310.signed.bin index 923a849987961..cab8144f4bf8d 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_fpga_cw310.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_fpga_cw310.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_fpga_cw340.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_fpga_cw340.signed.bin index f3f648a4c7bc4..75d77652d8cfe 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_fpga_cw340.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_fpga_cw340.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_silicon_creator.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_silicon_creator.signed.bin index 16f6c96641897..6a6768698181c 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_silicon_creator.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_b_silicon_creator.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_fpga_cw310.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_fpga_cw310.signed.bin index 5c522d5ec1b34..0a4e7c52662d0 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_fpga_cw310.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_fpga_cw310.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_fpga_cw340.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_fpga_cw340.signed.bin index 8a1da8a4a377c..51b98104806c5 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_fpga_cw340.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_fpga_cw340.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_silicon_creator.signed.bin b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_silicon_creator.signed.bin index b3bc13c961428..88c0d7ef8b105 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_silicon_creator.signed.bin and b/sw/device/silicon_creator/rom_ext/sival/binaries/rom_ext_dice_x509_prod_slot_virtual_silicon_creator.signed.bin differ diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.ecdsa_sig index 39b9ef2245c03..a287b388fb2de 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.ecdsa_sig and b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_fpga_cw310.ecdsa_sig differ diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.ecdsa_sig index 6a247ae5ad6bb..f27abd91120d6 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.ecdsa_sig and b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_fpga_cw340.ecdsa_sig differ diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_silicon_creator.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_silicon_creator.ecdsa_sig index fe8bc985a7459..cdc747b6a4af8 100644 --- a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_silicon_creator.ecdsa_sig +++ b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_a_silicon_creator.ecdsa_sig @@ -1 +1 @@ -›VÆØ´×{3g…N€v÷Ôš ×HŠ²ô‰¶ÕŸ•‚?⮿¨¤ðFÚ¤ãí$„¡‘s¾äºçÖìSÖÍ \ No newline at end of file +$*‡×Íq[©èZ\ó<“`Õ h¨H-ÏR/ `<ÉWµŠUƒxŒa™Qe’Þ”ÏøOxnÖƒÏé“ÀW…r \ No newline at end of file diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.ecdsa_sig index d246495e68a6a..47eede951d185 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.ecdsa_sig and b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_fpga_cw310.ecdsa_sig differ diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.ecdsa_sig index d63d1f2d1c1d0..35f5d2965d610 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.ecdsa_sig and b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_fpga_cw340.ecdsa_sig differ diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_silicon_creator.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_silicon_creator.ecdsa_sig index e82d545d412b2..a3dd6e3b242f6 100644 --- a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_silicon_creator.ecdsa_sig +++ b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_b_silicon_creator.ecdsa_sig @@ -1 +1,2 @@ -©zÂ5@½¨„œÌc ¯7¥¼ 몋Á™V­çù¾†C´MPbå¹ëûŸï=±ò4\’ü#qœ›Êpþœ \ No newline at end of file +ä¼zCåµ±‘DØNBd¡ÂB¦*O¹KÔê&# qý¤ +ôw‚²0A´_H#ÿÁèõ ’?œì'ˆ ßË;Ç^ \ No newline at end of file diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.ecdsa_sig index b5c9fbad830b2..9d67043f8bc2d 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.ecdsa_sig and b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw310.ecdsa_sig differ diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.ecdsa_sig index 00904a7806724..dba37909b4ab0 100644 --- a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.ecdsa_sig +++ b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_fpga_cw340.ecdsa_sig @@ -1 +1 @@ -û©P³È0÷Zz­-±r™ÿÒÝãÚÅFXe§æX7Ø’BÝõnaæ„“Ë & UV­Wú$ã\=Ÿ¤ã{• \ No newline at end of file +`2X…Û¯óÇWg©5òÊ÷°x·ïY'Äñ$µ¯8Ic7â ÑJùÊÅÛàB}ö Vc 7ú»æ¥ö̾¥~„FÄvø \ No newline at end of file diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.ecdsa_sig index cd65f8dd75d9f..d5c99fec7f821 100644 --- a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.ecdsa_sig +++ b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_cwt_prod_slot_virtual_silicon_creator.ecdsa_sig @@ -1 +1 @@ -ÛÌ[QŽý÷,çÛÅ0îéi·_)vˆƒ8‰á ,ô…Rª°öô‰T§Ó¿=Ôuâ Ä]ß}SÎüŠ¯û§ \ No newline at end of file +R+Û³Ùœëîú„«tÕ‘±j×ò]ÅØê9ykhykÛw‚ñvµV¥¯êÖ“XmmCµ‚0|º Ù H³Q, \ No newline at end of file diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_fpga_cw310.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_fpga_cw310.ecdsa_sig index d71598c834745..d45727a91c934 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_fpga_cw310.ecdsa_sig and b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_fpga_cw310.ecdsa_sig differ diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_fpga_cw340.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_fpga_cw340.ecdsa_sig index 133fcea203119..d7450311fab9e 100644 Binary files a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_fpga_cw340.ecdsa_sig and b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_fpga_cw340.ecdsa_sig differ diff --git a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_silicon_creator.ecdsa_sig b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_silicon_creator.ecdsa_sig index 9070e1312b2e6..f58cccefd0da9 100644 --- a/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_silicon_creator.ecdsa_sig +++ b/sw/device/silicon_creator/rom_ext/sival/signatures/rom_ext_dice_x509_prod_slot_a_silicon_creator.ecdsa_sig @@ -1,2 +1,2 @@ -Æ