Skip to content

Commit b58f5fa

Browse files
Reduce required physical fuses for Caliptra 1.x (#226)
Reduce required IDEVID CERT IDEVID ATTR fuse utilization to 352 bits and HSM IDENTIFIER to 0 bits
1 parent 12f4636 commit b58f5fa

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

Diff for: doc/Caliptra.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -1185,8 +1185,8 @@ The following table describes Caliptra's fuse map:
11851185
| FMC KEY MANIFEST SVN | 32 | ROM FMC RUNTIME | In-field programmable | FMC security version number. |
11861186
| RUNTIME SVN | 128 | ROM FMC RUNTIME | In-field programmable | Runtime firmware security version number. |
11871187
| ANTI-ROLLBACK DISABLE | 1 | ROM FMC RUNTIME | SoC manufacturing or in-field programmable | Disables anti-rollback support from Caliptra. (For example, if a Platform RoT is managing FW storage and anti-rollback protection external to the SoC.) |
1188-
| IDEVID CERT IDEVID ATTR | 768 | ROM FMC RUNTIME | SoC manufacturing | IDevID Certificate Generation Attributes. See [IDevID certificate section](#idevid-certificate)
1189-
| IDEVID MANUF HSM IDENTIFIER | 128 | ROM FMC RUNTIME | SoC manufacturing | Spare bits for Vendor IDevID provisioner CA identifiers. |
1188+
| IDEVID CERT IDEVID ATTR | 768, 352 used | ROM FMC RUNTIME | SoC manufacturing | IDevID Certificate Generation Attributes. See [IDevID certificate section](#idevid-certificate). Caliptra only uses 352 bits. Integrator is not required to back the remaining 416 bits with physical fuses.
1189+
| IDEVID MANUF HSM IDENTIFIER | 128, 0 used | ROM FMC RUNTIME | SoC manufacturing | Spare bits for Vendor IDevID provisioner CA identifiers. Caliptra does not use these bits. Integrator is not required to back these with physical fuses. |
11901190
| LIFE CYCLE | 2 | ROM FMC RUNTIME | SoC manufacturing | **Caliptra Boot Media Integrated mode usage only**. SoCs that build with a Boot Media Dependent profile don’t have to account for these fuses.<br> - '00 - Unprovisioned <br> - '01 - Manufacturing<br> - '10 - Undefined<br> - '11 - Production<br> **Reset:** Can only be reset on powergood. |
11911191
| LMS VERIFY | 1 | ROM | In-field programmable | - 0 - Verify Caliptra firmware images with ECDSA-only.<br> - 1 - Verify Caliptra firmware images with both ECDSA and LMS. |
11921192
| LMS REVOCATION | 32 | ROM | In-field programmable | One-hot encoded list of revoked Vendor LMS Public Keys. |

0 commit comments

Comments
 (0)