xilocp
Vitis Drivers API Documentation
xocp_keymgmt.c File Reference

Overview

This file contains the implementation of the interface functions for key management related to DEVIK and DEVAK.

MODIFICATION HISTORY:
Ver   Who  Date     Changes
----- ---- -------- -------------------------------------------------------
1.0   vns  07/08/22 Initial release
1.1   vns  12/27/22 Skips the device key generation if CDI is not valid
      vns  01/10/23 Adds logic to generate the DEVAK on subsystem based.
1.2   har  02/24/23 Added logic to get index of usr cfg for requested subsystem ID
      vns  07/06/23 Added DEVAK regenerate support and Data clear before shutdown
      am   07/20/23 Cleared DICE_CDI seed
      kpt  07/25/23 Add redundancy for key generation APIs
      yog  08/07/23 Replaced trng API calls using trngpsx driver
      am   09/04/23 Added XOcp_ValidateDiceCdi function
1.3   kpt  11/06/23 Add support to run ECC KAT before attestation
      kpt  11/24/23 Replace Xil_SMemSet with Xil_SecureZeroize
      ng   02/12/24 optimised u8 vars to u32 for size reduction
      am   02/14/24 Fixed internal security review comments
      kpt  02/21/24 Add support for DME CSR extension
1.4   har  06/04/24 Add support to store personalization string for additional DevAk
                    Add support to generate additional DevAk for key wrap
      har  07/19/24 Fixed issue in generating certificates for multiple subsystem
      har  08/08/24 Update FwHash for both DevIk certificate and DevIk CSR
      vss  09/23/24 Modified code as per security best practices
      kpt  12/03/24 Updated IsCsr value to False during DevAk certificate generation
 
Note