[rom_ext,perso] bump version numbers to prepare for signing

Signed-off-by: Tim Trippel <ttrippel@google.com>

[rom_ext,perso] bump version numbers to prepare for signing

Signed-off-by: Tim Trippel <ttrippel@google.com>

[perso] rev perso version

This bumps the perso version to prepare for the next signing operation.

Signed-off-by: Tim Trippel <ttrippel@google.com>

[perso] rev perso version

This bumps the perso version to prepare for the next signing operation.

Signed-off-by: Tim Trippel <ttrippel@google.com>

[signing] re-sign / release ROM_EXT and perso binaries

This resigns and re-releases the sival ROM_EXT (version 0.112) and
personalization binaries.

Signed-off-by: Tim Trippel <ttrippel@google.com>

[perso] start versioning perso firmware

This sets the perso firmware version to an integer that represents the
following format for a given release candidate:
<year><month><day><release candidate>.

The perso firmware version will no longer be match the ROM_EXT version.

Signed-off-by: Tim Trippel <ttrippel@google.com>

[perso] start versioning perso firmware

This sets the perso firmware version to an integer that represents the
following format for a given release candidate:
<year><month><day><release candidate>.

The perso firmware version will no longer be match the ROM_EXT version.

Signed-off-by: Tim Trippel <ttrippel@google.com>

[bazel] fix/add patches to enable downstream builds

The opentitan-provisioning loads this repo as a bazel dependency to build
opentitanlib. Minor updates to rules rust in this repo broke builds
downstream. This should fix them.

Signed-off-by: Tim Trippel <ttrippel@google.com>

[hsmtool] Add vendor specific AES_KWP mechanism

The HSM used in provisioning infrastructure uses a custom mechanism
identifier (CKM_AES_KW = (CKM_VENDOR_DEFINED + 0x170)) even though the
implementation follows the RFC 3394 specification. The CKM_AES_KW
implemented by Thales is also equivalent to the KW algorithm specified by
NIST SP 800-38F.

This change adds a custom Wrap::VendorThalesAesKw mechanism to hsmtool to
be able to wrap/unwrap private keys with AES_KW. This is similar to #26565.

Signed-off-by: Tim Trippel <ttrippel@google.com>

[manuf] set DIN to all 1s for FPGA devices

This updates the DIN to be set to all 1s for FPGA emulated devices to
enable test owner firmware images to bind to this invalid device ID.

Signed-off-by: Tim Trippel <ttrippel@google.com>