Skip to content

Commit 77b2940

Browse files
committed
cleared the air
1 parent 111d958 commit 77b2940

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

doc/Caliptra.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1246,7 +1246,7 @@ All fuse based cryptographic keying material and seeds (for example, UDS Seed) s
12461246

12471247
SoC shall support in-field programmable fusing. [Fuse Map](#fuse-map) shows which fuses are expected to be in-field programmable. SoCs shall implement authorization for in-field programmable fusing to mitigate denial-of-service attacks. Authorization design is outside the scope of this specification. In Subsystem mode, SoC may use MCU RT FW for these actions.
12481248

1249-
SoC shall support a field entropy programming API. The API shall support retrieving an input value from an external interface. It should cryptographically mix that value with the output of an on-die TRNG to generate the field entropy value. The API implementation shall burn the field entropy value into the first available field entropy fuse slot (or fail if no slots are available). Caliptra is expected to be in Caliptra Production state. The device owner is expected to call this API in a “clean room environment” to minimize risk of attack on the programming process.
1249+
SoC shall support a field entropy programming API. It should cryptographically generate a value from an on-die TRNG and used as the field entropy value. The API implementation shall burn the field entropy value into the first available field entropy fuse slot (or fail if no slots are available). Caliptra is expected to be in Caliptra Production state. The device owner is expected to call this API in a “clean room environment” to minimize risk of attack on the programming process.
12501250

12511251
#### Fuse zeroing
12521252

0 commit comments

Comments
 (0)