Comments (3)
Hi @vogelpi, I think it is worth considering to add support to initialize all EDN instances as a backup option, and potentially even one additional seed for CSRNG SW channel. It is too early for us to know the priority for this, but it is a good idea to get a high level estimate.
from opentitan.
Thanks for your feedback @moidx . I thought a bit more about this and also discussed with @h-filali and @johannheyszl .
IIUC, we would need probably need FIPS quality entropy for this. And maybe it's only needed once per new ROM ext, so for these one off cases, one could boot the entropy src into FIPS mode. But discussions are still ongoing. We'll likely discuss this weeks Sec WG.
Independent of such discussions, changing the hardware design to produce 3 seeds in boot mode should be doable without area overhead / timing impact. If we conclude that we really need that, we can add this also after M2. To not forget about this, I am moving this issue to M3 for now.
from opentitan.
@moidx: No longer an issue because ROM space is limited.
from opentitan.
Related Issues (20)
- [rom] Ensure UART has correct baud rate HOT 1
- [dv,alert_if] Detect alerts that are ping responses
- [dvsim ] primary_build_mode: default in <IP> cfg is invalid HOT 2
- [tools,englishbreakfast] Do not tag aon_timer_aon as "templated" for englishbreakfast
- [rom] sec_mmio audit
- [doc] Coverage dashboard for Xcelium IP blocks empty HOT 4
- [dv,flash_ctrl] Avoid double writes in flash_ctrl_rw_evict
- [hmac,dv] Run UNR analysis
- [test-triage] `otbn_stack_addr_integ_chk` CSR read timeout
- [rom] `Earlgrey-PROD.ROM` Release
- Issue with Building (and Testing) Software: Verilator Test Read-only File System Error HOT 1
- [usbdev] Packet reception does not tolerate corrupted SYNC signal HOT 1
- [rv_dm,dv] Implement sec_cm testplan HOT 1
- [ROM] Improve boot failure error reporting HOT 2
- [hmac,rtl] FIFO Empty interrupt raised after FIFO seen full HOT 4
- [CW340] Ubuntu machine - sudo dmesg -Hw returns - [ +28.350217] usb 3-10.3.1: usbfs: process 195787 (opentitantool) did not claim interface 0 before use
- [rtl,prim_alert_receiver] Ping mechanism is broken HOT 2
- [rv_dm,dv] Exercise scanmode
- [usbdev] Increase robustness of packet reception when SYNC signal is corrupted. HOT 4
- [entropy_src] Delay ht_done_pulse_i for the main SM by 1 cycle HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from opentitan.