opentitan icon indicating copy to clipboard operation
opentitan copied to clipboard
verified publisher icon lowRISC

[manuf] update TPM EK and probably (CEK and CIK) keys from P256 to P384

Open vbendeb opened this issue 1 year ago • 0 comments

The newest TPM platform profile requires TPM endorsement keys to be at least P384. Currently, TPM keys are P256 keys. This will require updating the OTBN boot.S code (and C lib wrapper otbn_boot_services) to contain an option for deriving both P256 and P384 key types

vbendeb avatar Apr 23 '24 23:04 vbendeb