3 ms·
Can you explain how the root of trust is configured? Is it efuses or some sort of onboard mutable nonvolatile storage? If I buy a system with one of these chips
by hlandau 3y ago
Can you explain how the root of trust is configured? Is it efuses or some sort of onboard mutable nonvolatile storage? If I buy a system with one of these chips in, am I likely to be able to set my own root of trust, or will the OEM have irreversibly set the root of trust to their own key?
- mkj 3y agoIt looks like the chips themselves should support change of ownership. Whether an OEM ships them in an unlocked (transferrable) state is up to them. https://opentitan.org/book/doc/security/specs/ownership_transfer/#unlock-ownership https://opentitan.org/book/doc/security/specs/ownership_tran...