28 Pull requests merged by 14 people

• [sw] Ensure string in .text section doesn't misalign code

  #27716 merged Jul 25, 2025

• [spi_host, sival] Increase Winbond flash clock rate to 24 MHz on silicon

  #27711 merged Jul 25, 2025

• [otbn] Patch an error in the OTBN boot services program

  #27679 merged Jul 25, 2025

• Update Bazel to v8 on earlgrey_1.0.0

  #27433 merged Jul 25, 2025

• Backport #25563 ([manuf] ensure AST is initialized in FT individualize )

  #27703 merged Jul 25, 2025

• [rom_ext,owenrship,perso] Backport #25258 and #25278

  #27662 merged Jul 25, 2025

• [rom_ext] Add Bound Check to Next Minimum Security Version

  #27629 merged Jul 24, 2025

• [rescue] Report errors for disallowed configurations

  #27682 merged Jul 24, 2025

• [doc] Update TC membership

  #27704 merged Jul 24, 2025

• [ownership] Update ownership transfer documentation

  #27698 merged Jul 24, 2025

• [provisioning] Backport #25167

  #27656 merged Jul 24, 2025

• [manuf] Backport #25388

  #27666 merged Jul 24, 2025

• Backport some OTTF SPI GPIO TX indicator work to master

  #27623 merged Jul 24, 2025

• [CI-TEST] do not merge to master

  #27701 merged Jul 24, 2025

• [opentitantool] Ship updated firmware for HyperDebug

  #26383 merged Jul 24, 2025

• [dv,otp_ctrl] Fix some unit test failures

  #27664 merged Jul 24, 2025

• [opentitanlib] misc. UART improvements

  #27614 merged Jul 23, 2025

• [opentitanlib, testutils] Add UART bitbanging encoding/decoding utilities

  #27612 merged Jul 23, 2025

• [pentest] Remove CW310 target from test framework

  #27684 merged Jul 23, 2025

• [cov] Add more owner_block unit tests to improve the code coverage

  #27599 merged Jul 23, 2025

• [sw/crypto] Clear HMAC ctx struct

  #26990 merged Jul 23, 2025

• [pentest] Add tests to CI

  #27464 merged Jul 22, 2025

• [ottf] Add OTTF option to configure and catch alerts

  #27465 merged Jul 22, 2025

• Cherry-pick to earlgrey_1.0.0: [pentest] Integrate CryptoLib into the framework

  #27588 merged Jul 21, 2025

• [doc] Update section on DIFs in hw/design.md

  #27657 merged Jul 21, 2025

• [pre_syn] Align Yosys synthesis setups with latest prim changes

  #27655 merged Jul 21, 2025

• [kmac/doc] Correct and extend documentation of Entropy Mode

  #27660 merged Jul 20, 2025

• Top description cleanup

  #27168 merged Jul 19, 2025

30 Pull requests opened by 14 people

• [topgen] Make toplevel_pkg.sv interrupt IDs multi-PLIC aware

  #27671 opened Jul 21, 2025

• [crypto] Fixed aes_gcm uninitialized output_len pointer

  #27672 opened Jul 21, 2025

• [crypto] Check device security_config

  #27673 opened Jul 22, 2025

• [rom_ctrl] Make it possible to configure the rom to take 2 cycles

  #27676 opened Jul 22, 2025

• Cherry-pick to earlgrey_1.0.0: [pentest] Add tests to CI

  #27677 opened Jul 22, 2025

• [crypto] Disable the iCache when entering CL

  #27678 opened Jul 22, 2025

• [ownership] Handle `primary_bl0_slot` in ownership activate

  #27681 opened Jul 22, 2025

• [crypto] Fix shift in p256_random_scalar share generation

  #27685 opened Jul 23, 2025

• [rescue,test] Update rescue disability test

  #27686 opened Jul 23, 2025

• Cherry-pick to earlgrey_1.0.0: [pentest] Remove CW310 target from test framework

  #27687 opened Jul 23, 2025

• [opentitanlib, testutils] Add utilities for dumping/parsing VCDs from GPIO samples

  #27689 opened Jul 23, 2025

• [dt] Add clkmgr measurable clock information

  #27691 opened Jul 23, 2025

• [crypto,sw] Add is on curve checks to p384

  #27692 opened Jul 23, 2025

• [bazel,ci] Improve download reliability

  #27693 opened Jul 23, 2025

• [test] Catch alerts in OTTF by default

  #27694 opened Jul 23, 2025

• Add test for OTTF alert catcher

  #27695 opened Jul 23, 2025

• [rom_ext] Do not clear `RLB` in the ROM_EXT

  #27696 opened Jul 23, 2025

• [rtl,otp_ctrl] Add zeroization support for OTP

  #27699 opened Jul 24, 2025

• [util,OtpMemMap] Detect mistakes in declared partition sizes

  #27700 opened Jul 24, 2025

• Backport #25304 ([provisioning] Encrypt the RMA unlock token)

  #27705 opened Jul 24, 2025

• [ottf,usbdev] Disable OTTF alert catching on deep USB tests

  #27706 opened Jul 24, 2025

• [crypto,sw] Update struct for otcrypto_interface to compile

  #27710 opened Jul 25, 2025

• Backport #25195 [signing] Add SiVAL public key material

  #27712 opened Jul 25, 2025

• [i2c, sival] Tighten `i2c_host_fram_test` test thresholds

  #27713 opened Jul 25, 2025

• Backport #25281 ([rom_ext,dice] build ROM_EXT with DICE CWT cert format support)

  #27714 opened Jul 25, 2025

• [doc] Align copyright message in doc with actual header

  #27715 opened Jul 25, 2025

• Cherry-pick to earlgrey_1.0.0: [opentitanlib, testutils] Add UART bitbanging encoding/decoding utilities

  #27717 opened Jul 25, 2025

• Cherry-pick to earlgrey_1.0.0: [opentitanlib] Support UART break via proxy

  #27718 opened Jul 25, 2025

• Cherry-pick to earlgrey_1.0.0: [spi_host, sival] Increase Winbond flash clock rate to 24 MHz on silicon

  #27720 opened Jul 25, 2025

• [sw] Fix cast of `ujson_putbuf` to `sink_func_ptr`

  #27721 opened Jul 25, 2025

1 Issue closed by 1 person

• chip_sw_rstmgr_rst_cnsty_escalation

  #27668 closed Jul 21, 2025

15 Issues opened by 10 people

• Race condition if use clk_rst_if, so clock not guaranteed to be activated.

  #27719 opened Jul 25, 2025

• [crypto] secp256k1 not supported

  #27709 opened Jul 25, 2025

• [ottf] Investigate USB test failures with alert catching enabled

  #27708 opened Jul 24, 2025

• [python] Move UV to a dev dependency

  #27707 opened Jul 24, 2025

• [RFC] Fuse Zeroization and In-Field Programming

  #27697 opened Jul 23, 2025

• [crypto] ECC implementation FIPS compliance

  #27690 opened Jul 23, 2025

• [component] Incomplete Structure Literal Causes Vivado Error in `spid_common.sv`

  #27688 opened Jul 23, 2025

• [sw,driver] keymgr driver idle status handling

  #27683 opened Jul 23, 2025

• [fpv,pinmux] Add lc_hw_debug_clr_i in fpv/tb/pinmux_tb.sv.tpl

  #27680 opened Jul 22, 2025

• [component] Missing $sformatf argument in alert_receiver_driver.sv

  #27675 opened Jul 22, 2025

• [cryoto] Make ECC point on curve check callable from ibex

  #27674 opened Jul 22, 2025

• [tools] updating the version of verilator

  #27670 opened Jul 21, 2025

• [crypto] Modular multiplicative inverse computation - potential consolidation

  #27669 opened Jul 21, 2025

• Chip level test simulations on Xcelium

  #27667 opened Jul 21, 2025

• [rtl,otp_ctrl] Report lc_gate fsm error as fatal_prim_otp_alert

  #27665 opened Jul 21, 2025

79 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• [ac_range_check,dv] Included logging support in testbench

  #27645 commented on Jul 22, 2025 • 24 new comments

• [crypto] Re-mask AES-GCM keys

  #27647 commented on Jul 25, 2025 • 9 new comments

• [Reggen] Export more properties to SystemRDL

  #27618 commented on Jul 25, 2025 • 3 new comments

• Backport #25149 "[build] Introduce OTP emulation images."

  #27654 commented on Jul 25, 2025 • 3 new comments

• [cryptolib,sw] Add instruction count checks to ECC functions

  #27569 commented on Jul 21, 2025 • 2 new comments

• [crypto] Wipe OTBN's DMEM in failure cases

  #27650 commented on Jul 23, 2025 • 2 new comments

• [devbundle] Create a devbundle for out-of-tree development

  #27663 commented on Jul 22, 2025 • 2 new comments

• [rom_ctrl,rtl] Add a flop between rom_ctrl and kmac

  #27658 commented on Jul 19, 2025 • 1 new comment

• [keymgr_dpe,rtl] Allow a flop between keymgr_dpe and KMAC

  #27661 commented on Jul 22, 2025 • 1 new comment

• [dv] Add some more calls to uvm_object_utils

  #26831 commented on Jul 25, 2025 • 1 new comment

• [rv_timer, verissimo] wait and disable forks are not enclosed by a protective fork-join block

  #27484 commented on Jul 23, 2025 • 0 new comments

• [dv,manuf] Fixup bootstrapping of ate_manuf sims

  #27510 commented on Jul 23, 2025 • 0 new comments

• [adc_ctrl, verissimo][UVM69] UVM new() functions

  #27426 commented on Jul 23, 2025 • 0 new comments

• [DO NOT MERGE] Fix usb suspend reset

  #27415 commented on Jul 22, 2025 • 0 new comments

• [ROM_EXT] Integrate flash exec in ownership functions

  #27385 commented on Jul 24, 2025 • 0 new comments

• Move OTP map and overlays to top attributes to have per-top OTP images

  #27169 commented on Jul 22, 2025 • 0 new comments

• [sw/crypto] Randomize write address offset

  #27007 commented on Jul 21, 2025 • 0 new comments

• [Darjeeling] Build OTP images

  #26508 commented on Jul 22, 2025 • 0 new comments

• [rescue, rom_ext] DFU rescue may not report disallowed command errors

  #27120 commented on Jul 24, 2025 • 0 new comments

• [rom,rom_ext] Add instruction count checks for OTBN operations.

  #20024 commented on Jul 23, 2025 • 0 new comments

• [crypto, test] Test second share for ECDSA P-256.

  #15409 commented on Jul 23, 2025 • 0 new comments

• [crypto] Add a test for malicious ECDSA-P256 keys.

  #17305 commented on Jul 23, 2025 • 0 new comments

• [rom, rom_ext] Run known-answer tests for used cryptographic algorithms before signature verification

  #22801 commented on Jul 23, 2025 • 0 new comments

• [manuf] Handling of attestation seed values is not FIPS 186-5 compliant

  #24399 commented on Jul 23, 2025 • 0 new comments

• [crypto] Simplify random_order

  #27638 commented on Jul 21, 2025 • 0 new comments

• [crypto,sw] Add is on curve checks to scalar_mult_int

  #27539 commented on Jul 21, 2025 • 0 new comments

• [bazel] Decouple test binaries from `googletest`

  #27581 commented on Jul 25, 2025 • 0 new comments

• [crypto,sw] Add is on curve check to base point mult

  #27582 commented on Jul 21, 2025 • 0 new comments

• [crypto] Protect HMAC against FI

  #27586 commented on Jul 21, 2025 • 0 new comments

• [crypto] Protect AES against FI

  #27600 commented on Jul 21, 2025 • 0 new comments

• [crypto] Harden RSA padding selection against FI

  #27602 commented on Jul 23, 2025 • 0 new comments

• [crypto] Add Verify-after-Sign for ECDSA as a FI countermeasure

  #27604 commented on Jul 21, 2025 • 0 new comments

• [opentitanlib, testutils] Add SPI bitbanging encoding utilities & improved SPI decoding

  #27613 commented on Jul 25, 2025 • 0 new comments

• [rescue] Remove help messages from non-UART protocols

  #27626 commented on Jul 25, 2025 • 0 new comments

• [crypto] AES-GCM FI Hardening

  #27633 commented on Jul 21, 2025 • 0 new comments

• Cherry-pick to earlgrey_1.0.0: OTBN coverage support #27573 #27580

  #27636 commented on Jul 23, 2025 • 0 new comments

• [ci] Drop non-HyperDebug CW310 bitstream for testing

  #27644 commented on Jul 25, 2025 • 0 new comments

• [test]: fix early return due to incorrect indent

  #27649 commented on Jul 23, 2025 • 0 new comments

• [cov] Add corner case unit tests for uncovered code

  #27652 commented on Jul 22, 2025 • 0 new comments

• [cov] add perso_tlv_data unit test

  #27653 commented on Jul 22, 2025 • 0 new comments

• [crypto] Use OTBN's checksum register in cryptolib

  #19173 commented on Jul 21, 2025 • 0 new comments

• [crypto] Determine appropriate thresholds for entropy health tests.

  #19392 commented on Jul 21, 2025 • 0 new comments

• [hw/kmac] key integrity checks

  #6546 commented on Jul 21, 2025 • 0 new comments

• [tlul] Side-channel Hamming weight leakage of `data` on TL-UL

  #16767 commented on Jul 21, 2025 • 0 new comments

• [crypto] Use hardened memory functions in cryptolib.

  #17711 commented on Jul 21, 2025 • 0 new comments

• [crypto] Harden memory operations in the cryptolib OTBN driver.

  #18333 commented on Jul 21, 2025 • 0 new comments

• [rom] Verify after sign in OTBN boot services library.

  #21943 commented on Jul 21, 2025 • 0 new comments

• [cryptolib] Implement missing ECC operations

  #26939 commented on Jul 21, 2025 • 0 new comments

• [cryptolib] Open FI hardening TODOs

  #26940 commented on Jul 21, 2025 • 0 new comments

• [cryptolib] Open SCA hardening TODOs

  #26941 commented on Jul 21, 2025 • 0 new comments

• [cryptolib] Algorithms for considered for hardening review

  #27051 commented on Jul 21, 2025 • 0 new comments

• [base] Adjust hardening primitives to use function pointers for randomness.

  #27141 commented on Jul 21, 2025 • 0 new comments

• [crypto] Ensure keys get re-masked regularly throughout cryptolib.

  #27243 commented on Jul 21, 2025 • 0 new comments

• [crypto] Rename HARDENED_TRY.

  #27298 commented on Jul 21, 2025 • 0 new comments

• [crypto] Protect HMAC streaming implementation against FI

  #27632 commented on Jul 21, 2025 • 0 new comments

• [crypto] Protect AES-GCM against SCA

  #27637 commented on Jul 21, 2025 • 0 new comments

• [crypto] Harden RSA against FI and SCA

  #27639 commented on Jul 21, 2025 • 0 new comments

• [crypto] Adding a seed input to the ECC key gen API

  #27640 commented on Jul 21, 2025 • 0 new comments

• [crypto] Consequently use OTBN's instruction counter

  #27641 commented on Jul 21, 2025 • 0 new comments

• [Chip, dv] Inconsistency b/w parent and child reset in rstmgr_cnsty_chk.sv

  #27659 commented on Jul 23, 2025 • 0 new comments

• [rom] misconfigured rstmgr cpu crash dump when activated by OTP

  #27498 commented on Jul 23, 2025 • 0 new comments

• When should cryptolib disable icache to keep operations constant-time?

  #15832 commented on Jul 22, 2025 • 0 new comments

• [cryptolib] continuous mode config incl. health checks for entropy_src

  #14364 commented on Jul 22, 2025 • 0 new comments

• [cryptolib] entropy driver

  #14363 commented on Jul 22, 2025 • 0 new comments

• [sw/crypto] Update comments and code for P-256 and P-384 keygen/scalargen to comply with the latest FIPS 186-5 specification

  #19692 commented on Jul 22, 2025 • 0 new comments

• [sca] Make Ibex sleep for OTBN operations in `sw/device/sca`.

  #17338 commented on Jul 22, 2025 • 0 new comments

• [tlul] tlul_sram_byte data integrity check

  #8815 commented on Jul 22, 2025 • 0 new comments

• [cryptolib] HMAC driver TODO list

  #23191 commented on Jul 22, 2025 • 0 new comments

• [top_darjeeling] Memory scrambling and ECC | undetected faults

  #17661 commented on Jul 22, 2025 • 0 new comments

• [cryptolib] support for EC key generation from provided DRBG

  #21936 commented on Jul 22, 2025 • 0 new comments

• [cryptolib] implement software DRBG

  #22127 commented on Jul 22, 2025 • 0 new comments

• [keymgr] add support for injected FIPS key and swap key/context in KMAC

  #22296 commented on Jul 22, 2025 • 0 new comments

• [RFC] PQC Support on OTBN

  #26846 commented on Jul 22, 2025 • 0 new comments

• [crypto] Resharing ECC keys and scalar blinding

  #27648 commented on Jul 22, 2025 • 0 new comments

• [test-triage] //sw/device/tests/crypto:aes_gcm_timing_test not constant time with icache enabled

  #15788 commented on Jul 22, 2025 • 0 new comments

• [alert_handler] Mismatch between documentation and implementation

  #27560 commented on Jul 22, 2025 • 0 new comments

• [crypto] Bug in `aes_gcm_*crypt` causes incorrect behavior when the full plaintext size is less than the block size

  #27634 commented on Jul 21, 2025 • 0 new comments

• [crypto] Add function to set / check chip configuration

  #27646 commented on Jul 21, 2025 • 0 new comments

• [cryptolib] Add base point validation checks to ECDSA as FI hardening

  #27117 commented on Jul 21, 2025 • 0 new comments