diff --git a/rules/opentitan.bzl b/rules/opentitan.bzl index c2f8567196b93..566ba59276aa8 100644 --- a/rules/opentitan.bzl +++ b/rules/opentitan.bzl @@ -125,23 +125,6 @@ SILICON_CREATOR_KEYS = struct( ), ) -SILICON_OWNER_KEYS = struct( - FAKE = struct( - RSA = struct( - TEST = [ - create_test_key("fake_rsa_rom_ext_test_key_0", "@//sw/device/silicon_creator/rom_ext/keys/fake:rom_ext_test_private_key_0"), - ], - DEV = [ - create_dev_key("fake_rsa_rom_ext_dev_key_0", "@//sw/device/silicon_creator/rom_ext/keys/fake:rom_ext_dev_private_key_0"), - ], - PROD = None, - ), - # We can't expose real private keys publicly. - REAL = None, - UNAUTHORIZED = None, - ), -) - def flatten(l): return [item for ll in l for item in ll] @@ -170,11 +153,6 @@ ECDSA_SPX_KEY_STRUCTS = [ create_key_struct(SILICON_CREATOR_KEYS.FAKE.ECDSA.PROD[0], None, SILICON_CREATOR_KEYS.FAKE.SPX.PROD[0]), ] -RSA_ONLY_ROM_EXT_KEY_STRUCTS = [ - create_key_struct(None, SILICON_OWNER_KEYS.FAKE.RSA.TEST[0], None), - create_key_struct(None, SILICON_OWNER_KEYS.FAKE.RSA.DEV[0], None), -] - def _obj_transform_impl(ctx): cc_toolchain = find_cc_toolchain(ctx) outputs = [] @@ -970,7 +948,7 @@ def opentitan_flash_binary( name, devices = PER_DEVICE_DEPS.keys(), platform = OPENTITAN_PLATFORM, - signing_key_structs = ECDSA_ONLY_KEY_STRUCTS + RSA_ONLY_ROM_EXT_KEY_STRUCTS, + signing_key_structs = ECDSA_ONLY_KEY_STRUCTS, signed = True, sim_otp = None, testonly = False, diff --git a/sw/device/silicon_creator/lib/ownership/keys/fake/app_dev_key_rsa_3072_exp_f4.der b/sw/device/silicon_creator/lib/ownership/keys/fake/app_dev_key_rsa_3072_exp_f4.der deleted file mode 100644 index e2ddcb881bd95..0000000000000 Binary files a/sw/device/silicon_creator/lib/ownership/keys/fake/app_dev_key_rsa_3072_exp_f4.der and /dev/null differ diff --git a/sw/device/silicon_creator/lib/ownership/keys/fake/app_dev_key_rsa_3072_exp_f4.h b/sw/device/silicon_creator/lib/ownership/keys/fake/app_dev_key_rsa_3072_exp_f4.h deleted file mode 100644 index 87146aff84567..0000000000000 --- a/sw/device/silicon_creator/lib/ownership/keys/fake/app_dev_key_rsa_3072_exp_f4.h +++ /dev/null @@ -1,38 +0,0 @@ -// Copyright lowRISC contributors (OpenTitan project). -// Licensed under the Apache License, Version 2.0, see LICENSE for details. -// SPDX-License-Identifier: Apache-2.0 - -#ifndef OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_OWNERSHIP_KEYS_FAKE_APP_DEV_KEY_RSA_3072_EXP_F4_H_ -#define OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_OWNERSHIP_KEYS_FAKE_APP_DEV_KEY_RSA_3072_EXP_F4_H_ - -#define APP_DEV_KEY_RSA_3072_EXP_F4 \ - { \ - .n = \ - {{ \ - 0x63f8a30b, 0xd703332e, 0xcfda502b, 0x2a51ada2, 0xc99413d6, \ - 0x7830792c, 0xe1107f7d, 0xe5854ec6, 0x5d410c7c, 0x88131d46, \ - 0xab8d61aa, 0xf9994b28, 0x4b52055a, 0xf7753ce2, 0xbac65041, \ - 0xf77d36c2, 0xe2c13eb1, 0xbbcf1618, 0x65f03fa4, 0x5a548fb2, \ - 0xc0845b92, 0xbb12faca, 0xb3172796, 0xe4bee37b, 0xf40ac213, \ - 0xd0914385, 0x5a4b7a11, 0x35204ba7, 0x1598a2e5, 0xcbe0e0dc, \ - 0xf5a1e236, 0x19195202, 0xfcf02de3, 0xb9757104, 0x3a3d9f19, \ - 0xf6c9a286, 0x3d30e741, 0x952bc51d, 0xe67c3a90, 0x8870ee31, \ - 0x89134026, 0xfca20db3, 0x1e82d36f, 0x034c13e3, 0xc085359f, \ - 0xc693dfdf, 0x3454d1d4, 0x7c778806, 0x80f22087, 0xeea8597c, \ - 0x467ae6d2, 0x4d5194e4, 0x2367fe77, 0xccaf7d67, 0x9fc866e0, \ - 0x3164a496, 0x58944368, 0x7ed7b0ca, 0x1cc7d16c, 0xfbd57965, \ - 0xa53c091e, 0x4dcf09ea, 0x19fccc00, 0x35422a8d, 0x66411309, \ - 0x07b1b7b7, 0xf1fcaeb0, 0xc016d776, 0x65cfb0c2, 0x383adb60, \ - 0x1e45b70f, 0x674d7502, 0x186e1c7c, 0xb9c59554, 0xab5ae125, \ - 0x110e22a9, 0x67dd11dd, 0xab890787, 0x6303702a, 0x39ff545d, \ - 0x81ef5e96, 0x682c936c, 0xa2b37ac3, 0x168138c2, 0x478d052e, \ - 0xc18577a8, 0x668b2f0c, 0xfa040834, 0x1b44c2c2, 0x37ab4e2f, \ - 0xb467dfd9, 0xf6ba4975, 0xe9894308, 0x0a2cd975, 0xca8f9260, \ - 0xa60f2fbd, \ - }}, \ - .n0_inv = { \ - 0xccd16f5d, 0xfd731e89, 0xd45f135f, 0xf03201e9, \ - 0x4d574fed, 0x4a558cfc, 0x96e3e680, 0x958fb9cc, \ - }, \ - } -#endif // OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_OWNERSHIP_KEYS_FAKE_APP_DEV_KEY_RSA_3072_EXP_F4_H_ diff --git a/sw/device/silicon_creator/lib/ownership/keys/fake/app_dev_key_rsa_3072_exp_f4.pub.der b/sw/device/silicon_creator/lib/ownership/keys/fake/app_dev_key_rsa_3072_exp_f4.pub.der deleted file mode 100644 index b19914205541b..0000000000000 Binary files a/sw/device/silicon_creator/lib/ownership/keys/fake/app_dev_key_rsa_3072_exp_f4.pub.der and /dev/null differ diff --git a/sw/device/silicon_creator/lib/ownership/keys/fake/app_prod_key_rsa_3072_exp_f4.der b/sw/device/silicon_creator/lib/ownership/keys/fake/app_prod_key_rsa_3072_exp_f4.der deleted file mode 100644 index 7e83c7fd0f43c..0000000000000 Binary files a/sw/device/silicon_creator/lib/ownership/keys/fake/app_prod_key_rsa_3072_exp_f4.der and /dev/null differ diff --git a/sw/device/silicon_creator/lib/ownership/keys/fake/app_prod_key_rsa_3072_exp_f4.h b/sw/device/silicon_creator/lib/ownership/keys/fake/app_prod_key_rsa_3072_exp_f4.h deleted file mode 100644 index f98cb82bdd48c..0000000000000 --- a/sw/device/silicon_creator/lib/ownership/keys/fake/app_prod_key_rsa_3072_exp_f4.h +++ /dev/null @@ -1,39 +0,0 @@ -// Copyright lowRISC contributors (OpenTitan project). -// Licensed under the Apache License, Version 2.0, see LICENSE for details. -// SPDX-License-Identifier: Apache-2.0 - -#ifndef OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_OWNERSHIP_KEYS_FAKE_APP_PROD_KEY_RSA_3072_EXP_F4_H_ -#define OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_OWNERSHIP_KEYS_FAKE_APP_PROD_KEY_RSA_3072_EXP_F4_H_ - -#define APP_PROD_KEY_RSA_3072_EXP_F4 \ - { \ - .n = \ - {{ \ - 0x57c16245, 0xef622191, 0x066fad45, 0x59e954cd, 0xfec92329, \ - 0x0159eef1, 0x1cb5d8c4, 0xc4a03e0d, 0x7bd1981f, 0xa3b1635d, \ - 0x4a4043cc, 0x96f233f3, 0x61899a37, 0xd7364c98, 0x840fd549, \ - 0x8a6e9b79, 0x4b57b805, 0x3d6e245d, 0x952aed3e, 0x4eb99cfe, \ - 0x4cc09a03, 0x0508a4e0, 0x76ca6b13, 0x87d9b6e4, 0x8b845774, \ - 0x5a5922a7, 0x0536a4c7, 0xfbda4ec3, 0x5eb92876, 0xaba0dd7c, \ - 0xbaf505b1, 0xbe54b9e9, 0x88bb8492, 0x8252f8db, 0x0a863853, \ - 0xde7aa0e3, 0x6e22419c, 0xa9f7a633, 0x307202a5, 0x94668bca, \ - 0x97eb70ba, 0xaa0cf94d, 0x316e1839, 0x459819f6, 0xd0df6c70, \ - 0xdc08075a, 0xc4a9de99, 0x4b4561b1, 0xb2441f56, 0x7aa03e20, \ - 0xb0223b2c, 0xe6f5771c, 0xc5b14137, 0xb216afac, 0xc81f8c58, \ - 0x4ebbb550, 0xcc480cb3, 0xabec7c08, 0x5add27ea, 0x96c4768e, \ - 0x17705358, 0x096e018f, 0xcb3db3f2, 0x298bad67, 0x19643908, \ - 0x57f549a4, 0x263f5bb1, 0x2a639177, 0x620b6b3b, 0xa217f4cd, \ - 0x0c34bd39, 0x382e5e82, 0xd500f1c7, 0x83c585bf, 0xa2d29016, \ - 0x6d08b243, 0xd0042413, 0x3f8d5917, 0xe65aa37f, 0x2577ce05, \ - 0x4390f0fd, 0x0533f174, 0x20a5c0ce, 0x14964d18, 0x58677957, \ - 0x5add31f4, 0x80dc1389, 0x3de51892, 0x5ae164d5, 0x68ea63d4, \ - 0x8f4dfa76, 0xcbd59ec7, 0xd1e1ea09, 0x722c74c2, 0x64ffef63, \ - 0xab0e98d1, \ - }}, \ - .n0_inv = { \ - 0x25389f73, 0xbeda0297, 0x8e6abac3, 0x08d0109b, \ - 0xb27dc418, 0x6f1f68fa, 0xfdc91f89, 0xc8f474e6, \ - }, \ - } - -#endif // OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_OWNERSHIP_KEYS_FAKE_APP_PROD_KEY_RSA_3072_EXP_F4_H_ diff --git a/sw/device/silicon_creator/lib/ownership/keys/fake/app_prod_key_rsa_3072_exp_f4.pub.der b/sw/device/silicon_creator/lib/ownership/keys/fake/app_prod_key_rsa_3072_exp_f4.pub.der deleted file mode 100644 index d5e83a2c8e790..0000000000000 Binary files a/sw/device/silicon_creator/lib/ownership/keys/fake/app_prod_key_rsa_3072_exp_f4.pub.der and /dev/null differ diff --git a/sw/device/silicon_creator/lib/ownership/keys/fake/app_test_key_rsa_3072_exp_f4.der b/sw/device/silicon_creator/lib/ownership/keys/fake/app_test_key_rsa_3072_exp_f4.der deleted file mode 100644 index 70309225fa91a..0000000000000 Binary files a/sw/device/silicon_creator/lib/ownership/keys/fake/app_test_key_rsa_3072_exp_f4.der and /dev/null differ diff --git a/sw/device/silicon_creator/lib/ownership/keys/fake/app_test_key_rsa_3072_exp_f4.h b/sw/device/silicon_creator/lib/ownership/keys/fake/app_test_key_rsa_3072_exp_f4.h deleted file mode 100644 index a427f543575d4..0000000000000 --- a/sw/device/silicon_creator/lib/ownership/keys/fake/app_test_key_rsa_3072_exp_f4.h +++ /dev/null @@ -1,38 +0,0 @@ -// Copyright lowRISC contributors (OpenTitan project). -// Licensed under the Apache License, Version 2.0, see LICENSE for details. -// SPDX-License-Identifier: Apache-2.0 - -#ifndef OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_OWNERSHIP_KEYS_FAKE_APP_TEST_KEY_RSA_3072_EXP_F4_H_ -#define OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_OWNERSHIP_KEYS_FAKE_APP_TEST_KEY_RSA_3072_EXP_F4_H_ - -#define APP_TEST_KEY_RSA_3072_EXP_F4 \ - { \ - .n = \ - {{ \ - 0x8cc060e5, 0xc401299d, 0xf6f6e6f7, 0x25e4392e, 0xd667b33c, \ - 0x5b8586a0, 0x24acb25c, 0xe2b291ac, 0x5866f047, 0xfe552471, \ - 0x7ba31ddf, 0x683d4c22, 0x89c4fe63, 0xf642189e, 0x8e7fa00c, \ - 0x2dbeb725, 0xd8dcb764, 0x3b0d8d12, 0x9507d661, 0x5631d52e, \ - 0xbc19dbaa, 0xc05734fe, 0x2fc72a38, 0xf22a7394, 0x9f2e752e, \ - 0xd7a05945, 0xc0e6bf7a, 0x9261e6e8, 0x89650bf1, 0x76932ef8, \ - 0x99b56c57, 0x590fda42, 0x06525cee, 0xfff0ea5b, 0x2e09ae39, \ - 0xaf51ec78, 0xfb6fde95, 0xd6112aea, 0x3fdde88d, 0x88eaec29, \ - 0xc8509a52, 0x648d38b9, 0x8ca67d25, 0x00be1651, 0x6cdd6b9b, \ - 0xd372a5ab, 0xb01b23a8, 0x6c3c43ca, 0xaa333384, 0x7b44cf31, \ - 0x48ae6650, 0x68e0be9e, 0xb3131ae3, 0xa5c6457e, 0x0cd09e62, \ - 0x51cca07b, 0x9950fe9a, 0x51371fe4, 0xdd26f224, 0xad262164, \ - 0xad4f40d2, 0x322736f9, 0x49298a49, 0xbdd376ab, 0x1aea9cdb, \ - 0xae9b2156, 0x71445f25, 0xa67c0ef4, 0x170bbe94, 0x3917d727, \ - 0x37b0c7fe, 0xab9bea53, 0x08b25e4d, 0x7d65e134, 0x35935d0f, \ - 0x824b2781, 0xbeb29840, 0xb3b84c24, 0x2bb92abf, 0x1dfaaf98, \ - 0xf1a8a765, 0x10bdde5d, 0x1e7ed4a5, 0x26c6355e, 0xdc00ce80, \ - 0xb5b94b12, 0x6d24c5c7, 0xd97266b1, 0x4fc282ce, 0xdeb39ac3, \ - 0x14f429b6, 0x221cb1ff, 0xb43df22a, 0x11dc0ea4, 0x8a676ff4, \ - 0xf396bbb4, \ - }}, \ - .n0_inv = { \ - 0x5a7ba313, 0xb119675d, 0xd56cff72, 0x8d3991af, \ - 0x1f4be5ec, 0x5466a71f, 0xced86046, 0x24bdad5e, \ - }, \ - } -#endif // OPENTITAN_SW_DEVICE_SILICON_CREATOR_LIB_OWNERSHIP_KEYS_FAKE_APP_TEST_KEY_RSA_3072_EXP_F4_H_ diff --git a/sw/device/silicon_creator/lib/ownership/keys/fake/app_test_key_rsa_3072_exp_f4.pub.der b/sw/device/silicon_creator/lib/ownership/keys/fake/app_test_key_rsa_3072_exp_f4.pub.der deleted file mode 100644 index 813d1b5de93c3..0000000000000 Binary files a/sw/device/silicon_creator/lib/ownership/keys/fake/app_test_key_rsa_3072_exp_f4.pub.der and /dev/null differ diff --git a/sw/device/silicon_creator/rom_ext/BUILD b/sw/device/silicon_creator/rom_ext/BUILD index 0018f4d90cf80..3cb2ea6db5a37 100644 --- a/sw/device/silicon_creator/rom_ext/BUILD +++ b/sw/device/silicon_creator/rom_ext/BUILD @@ -322,6 +322,7 @@ manifest(d = { opentitan_binary( name = "rom_ext_slot_a_bad_address_translation", + testonly = True, ecdsa_key = {"//sw/device/silicon_creator/rom/keys/fake/ecdsa:test_key_0_ecdsa_p256": "test_key_0"}, exec_env = [ "//hw/top_earlgrey:fpga_cw310", @@ -335,6 +336,7 @@ opentitan_binary( ":rom_ext", "//sw/device/lib/crt", "//sw/device/silicon_creator/lib:manifest_def", - "//sw/device/silicon_creator/rom_ext/keys/fake", + "//sw/device/silicon_creator/lib/ownership:test_owner", + "//sw/device/silicon_creator/lib/ownership/keys/fake", ], ) diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/BUILD b/sw/device/silicon_creator/rom_ext/keys/fake/BUILD deleted file mode 100644 index 66082363a7c8a..0000000000000 --- a/sw/device/silicon_creator/rom_ext/keys/fake/BUILD +++ /dev/null @@ -1,61 +0,0 @@ -# Copyright lowRISC contributors (OpenTitan project). -# Licensed under the Apache License, Version 2.0, see LICENSE for details. -# SPDX-License-Identifier: Apache-2.0 - -package(default_visibility = ["//visibility:public"]) - -cc_library( - name = "fake", - srcs = [ - "sigverify_rsa_keys_fake.c", - "//sw/device/silicon_creator/rom_ext:sigverify_keys.h", - ], - hdrs = [ - "rom_ext_dev_key_0_rsa_3072_exp_f4.h", - "rom_ext_prod_key_0_rsa_3072_exp_f4.h", - "rom_ext_test_key_0_rsa_3072_exp_f4.h", - ], - deps = [ - "//hw/ip/otp_ctrl/data:otp_ctrl_c_regs", - "//sw/device/lib/base:macros", - "//sw/device/silicon_creator/lib/sigverify", - ], -) - -# Flatten //sw/device/silicon_creator/lib/sigverify:rsa_verify to exclude mock_mod_exp_ibex -cc_test( - name = "fake_unittest", - srcs = [ - "sigverify_rsa_keys_fake_unittest.cc", - "//sw/device/silicon_creator/lib/sigverify:rsa_verify.c", - "//sw/device/silicon_creator/lib/sigverify:rsa_verify.h", - ], - deps = [ - ":fake", - "//sw/device/lib/base:hardened", - "//sw/device/silicon_creator/lib/drivers:hmac", - "//sw/device/silicon_creator/lib/drivers:lifecycle", - "//sw/device/silicon_creator/lib/drivers:otp", - "//sw/device/silicon_creator/lib/sigverify:mod_exp_ibex_device_library", - "//sw/device/silicon_creator/lib/sigverify:rsa_key", - "//sw/device/silicon_creator/lib/sigverify:rsa_verify", - "//sw/device/silicon_creator/rom_ext:sigverify_keys", - "//sw/device/silicon_creator/testing:rom_test", - "@googletest//:gtest_main", - ], -) - -filegroup( - name = "rom_ext_dev_private_key_0", - srcs = ["rom_ext_dev_key_0_rsa_3072_exp_f4.der"], -) - -filegroup( - name = "rom_ext_test_private_key_0", - srcs = ["rom_ext_test_key_0_rsa_3072_exp_f4.der"], -) - -filegroup( - name = "rom_ext_prod_private_key_0", - srcs = ["rom_ext_prod_key_0_rsa_3072_exp_f4.der"], -) diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_dev_key_0_rsa_3072_exp_f4.der b/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_dev_key_0_rsa_3072_exp_f4.der deleted file mode 100644 index e2ddcb881bd95..0000000000000 Binary files a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_dev_key_0_rsa_3072_exp_f4.der and /dev/null differ diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_dev_key_0_rsa_3072_exp_f4.h b/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_dev_key_0_rsa_3072_exp_f4.h deleted file mode 100644 index cece1158872e6..0000000000000 --- a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_dev_key_0_rsa_3072_exp_f4.h +++ /dev/null @@ -1,38 +0,0 @@ -// Copyright lowRISC contributors (OpenTitan project). -// Licensed under the Apache License, Version 2.0, see LICENSE for details. -// SPDX-License-Identifier: Apache-2.0 - -#ifndef OPENTITAN_SW_DEVICE_SILICON_CREATOR_ROM_EXT_KEYS_FAKE_ROM_EXT_DEV_KEY_0_RSA_3072_EXP_F4_H_ -#define OPENTITAN_SW_DEVICE_SILICON_CREATOR_ROM_EXT_KEYS_FAKE_ROM_EXT_DEV_KEY_0_RSA_3072_EXP_F4_H_ - -#define ROM_EXT_DEV_KEY_0_RSA_3072_EXP_F4 \ - { \ - .n = \ - {{ \ - 0x63f8a30b, 0xd703332e, 0xcfda502b, 0x2a51ada2, 0xc99413d6, \ - 0x7830792c, 0xe1107f7d, 0xe5854ec6, 0x5d410c7c, 0x88131d46, \ - 0xab8d61aa, 0xf9994b28, 0x4b52055a, 0xf7753ce2, 0xbac65041, \ - 0xf77d36c2, 0xe2c13eb1, 0xbbcf1618, 0x65f03fa4, 0x5a548fb2, \ - 0xc0845b92, 0xbb12faca, 0xb3172796, 0xe4bee37b, 0xf40ac213, \ - 0xd0914385, 0x5a4b7a11, 0x35204ba7, 0x1598a2e5, 0xcbe0e0dc, \ - 0xf5a1e236, 0x19195202, 0xfcf02de3, 0xb9757104, 0x3a3d9f19, \ - 0xf6c9a286, 0x3d30e741, 0x952bc51d, 0xe67c3a90, 0x8870ee31, \ - 0x89134026, 0xfca20db3, 0x1e82d36f, 0x034c13e3, 0xc085359f, \ - 0xc693dfdf, 0x3454d1d4, 0x7c778806, 0x80f22087, 0xeea8597c, \ - 0x467ae6d2, 0x4d5194e4, 0x2367fe77, 0xccaf7d67, 0x9fc866e0, \ - 0x3164a496, 0x58944368, 0x7ed7b0ca, 0x1cc7d16c, 0xfbd57965, \ - 0xa53c091e, 0x4dcf09ea, 0x19fccc00, 0x35422a8d, 0x66411309, \ - 0x07b1b7b7, 0xf1fcaeb0, 0xc016d776, 0x65cfb0c2, 0x383adb60, \ - 0x1e45b70f, 0x674d7502, 0x186e1c7c, 0xb9c59554, 0xab5ae125, \ - 0x110e22a9, 0x67dd11dd, 0xab890787, 0x6303702a, 0x39ff545d, \ - 0x81ef5e96, 0x682c936c, 0xa2b37ac3, 0x168138c2, 0x478d052e, \ - 0xc18577a8, 0x668b2f0c, 0xfa040834, 0x1b44c2c2, 0x37ab4e2f, \ - 0xb467dfd9, 0xf6ba4975, 0xe9894308, 0x0a2cd975, 0xca8f9260, \ - 0xa60f2fbd, \ - }}, \ - .n0_inv = { \ - 0xccd16f5d, 0xfd731e89, 0xd45f135f, 0xf03201e9, \ - 0x4d574fed, 0x4a558cfc, 0x96e3e680, 0x958fb9cc, \ - }, \ - } -#endif // OPENTITAN_SW_DEVICE_SILICON_CREATOR_ROM_EXT_KEYS_FAKE_ROM_EXT_DEV_KEY_0_RSA_3072_EXP_F4_H_ diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_dev_key_0_rsa_3072_exp_f4.pub.der b/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_dev_key_0_rsa_3072_exp_f4.pub.der deleted file mode 100644 index b19914205541b..0000000000000 Binary files a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_dev_key_0_rsa_3072_exp_f4.pub.der and /dev/null differ diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_prod_key_0_rsa_3072_exp_f4.der b/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_prod_key_0_rsa_3072_exp_f4.der deleted file mode 100644 index 7e83c7fd0f43c..0000000000000 Binary files a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_prod_key_0_rsa_3072_exp_f4.der and /dev/null differ diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_prod_key_0_rsa_3072_exp_f4.h b/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_prod_key_0_rsa_3072_exp_f4.h deleted file mode 100644 index 8983089d33366..0000000000000 --- a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_prod_key_0_rsa_3072_exp_f4.h +++ /dev/null @@ -1,39 +0,0 @@ -// Copyright lowRISC contributors (OpenTitan project). -// Licensed under the Apache License, Version 2.0, see LICENSE for details. -// SPDX-License-Identifier: Apache-2.0 - -#ifndef OPENTITAN_SW_DEVICE_SILICON_CREATOR_ROM_EXT_KEYS_FAKE_ROM_EXT_PROD_KEY_0_RSA_3072_EXP_F4_H_ -#define OPENTITAN_SW_DEVICE_SILICON_CREATOR_ROM_EXT_KEYS_FAKE_ROM_EXT_PROD_KEY_0_RSA_3072_EXP_F4_H_ - -#define ROM_EXT_PROD_KEY_0_RSA_3072_EXP_F4 \ - { \ - .n = \ - {{ \ - 0x57c16245, 0xef622191, 0x066fad45, 0x59e954cd, 0xfec92329, \ - 0x0159eef1, 0x1cb5d8c4, 0xc4a03e0d, 0x7bd1981f, 0xa3b1635d, \ - 0x4a4043cc, 0x96f233f3, 0x61899a37, 0xd7364c98, 0x840fd549, \ - 0x8a6e9b79, 0x4b57b805, 0x3d6e245d, 0x952aed3e, 0x4eb99cfe, \ - 0x4cc09a03, 0x0508a4e0, 0x76ca6b13, 0x87d9b6e4, 0x8b845774, \ - 0x5a5922a7, 0x0536a4c7, 0xfbda4ec3, 0x5eb92876, 0xaba0dd7c, \ - 0xbaf505b1, 0xbe54b9e9, 0x88bb8492, 0x8252f8db, 0x0a863853, \ - 0xde7aa0e3, 0x6e22419c, 0xa9f7a633, 0x307202a5, 0x94668bca, \ - 0x97eb70ba, 0xaa0cf94d, 0x316e1839, 0x459819f6, 0xd0df6c70, \ - 0xdc08075a, 0xc4a9de99, 0x4b4561b1, 0xb2441f56, 0x7aa03e20, \ - 0xb0223b2c, 0xe6f5771c, 0xc5b14137, 0xb216afac, 0xc81f8c58, \ - 0x4ebbb550, 0xcc480cb3, 0xabec7c08, 0x5add27ea, 0x96c4768e, \ - 0x17705358, 0x096e018f, 0xcb3db3f2, 0x298bad67, 0x19643908, \ - 0x57f549a4, 0x263f5bb1, 0x2a639177, 0x620b6b3b, 0xa217f4cd, \ - 0x0c34bd39, 0x382e5e82, 0xd500f1c7, 0x83c585bf, 0xa2d29016, \ - 0x6d08b243, 0xd0042413, 0x3f8d5917, 0xe65aa37f, 0x2577ce05, \ - 0x4390f0fd, 0x0533f174, 0x20a5c0ce, 0x14964d18, 0x58677957, \ - 0x5add31f4, 0x80dc1389, 0x3de51892, 0x5ae164d5, 0x68ea63d4, \ - 0x8f4dfa76, 0xcbd59ec7, 0xd1e1ea09, 0x722c74c2, 0x64ffef63, \ - 0xab0e98d1, \ - }}, \ - .n0_inv = { \ - 0x25389f73, 0xbeda0297, 0x8e6abac3, 0x08d0109b, \ - 0xb27dc418, 0x6f1f68fa, 0xfdc91f89, 0xc8f474e6, \ - }, \ - } - -#endif // OPENTITAN_SW_DEVICE_SILICON_CREATOR_ROM_EXT_KEYS_FAKE_ROM_EXT_PROD_KEY_0_RSA_3072_EXP_F4_H_ diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_prod_key_0_rsa_3072_exp_f4.pub.der b/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_prod_key_0_rsa_3072_exp_f4.pub.der deleted file mode 100644 index d5e83a2c8e790..0000000000000 Binary files a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_prod_key_0_rsa_3072_exp_f4.pub.der and /dev/null differ diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_test_key_0_rsa_3072_exp_f4.der b/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_test_key_0_rsa_3072_exp_f4.der deleted file mode 100644 index 70309225fa91a..0000000000000 Binary files a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_test_key_0_rsa_3072_exp_f4.der and /dev/null differ diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_test_key_0_rsa_3072_exp_f4.h b/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_test_key_0_rsa_3072_exp_f4.h deleted file mode 100644 index 856df9fcfeb03..0000000000000 --- a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_test_key_0_rsa_3072_exp_f4.h +++ /dev/null @@ -1,38 +0,0 @@ -// Copyright lowRISC contributors (OpenTitan project). -// Licensed under the Apache License, Version 2.0, see LICENSE for details. -// SPDX-License-Identifier: Apache-2.0 - -#ifndef OPENTITAN_SW_DEVICE_SILICON_CREATOR_ROM_EXT_KEYS_FAKE_ROM_EXT_TEST_KEY_0_RSA_3072_EXP_F4_H_ -#define OPENTITAN_SW_DEVICE_SILICON_CREATOR_ROM_EXT_KEYS_FAKE_ROM_EXT_TEST_KEY_0_RSA_3072_EXP_F4_H_ - -#define ROM_EXT_TEST_KEY_0_RSA_3072_EXP_F4 \ - { \ - .n = \ - {{ \ - 0x8cc060e5, 0xc401299d, 0xf6f6e6f7, 0x25e4392e, 0xd667b33c, \ - 0x5b8586a0, 0x24acb25c, 0xe2b291ac, 0x5866f047, 0xfe552471, \ - 0x7ba31ddf, 0x683d4c22, 0x89c4fe63, 0xf642189e, 0x8e7fa00c, \ - 0x2dbeb725, 0xd8dcb764, 0x3b0d8d12, 0x9507d661, 0x5631d52e, \ - 0xbc19dbaa, 0xc05734fe, 0x2fc72a38, 0xf22a7394, 0x9f2e752e, \ - 0xd7a05945, 0xc0e6bf7a, 0x9261e6e8, 0x89650bf1, 0x76932ef8, \ - 0x99b56c57, 0x590fda42, 0x06525cee, 0xfff0ea5b, 0x2e09ae39, \ - 0xaf51ec78, 0xfb6fde95, 0xd6112aea, 0x3fdde88d, 0x88eaec29, \ - 0xc8509a52, 0x648d38b9, 0x8ca67d25, 0x00be1651, 0x6cdd6b9b, \ - 0xd372a5ab, 0xb01b23a8, 0x6c3c43ca, 0xaa333384, 0x7b44cf31, \ - 0x48ae6650, 0x68e0be9e, 0xb3131ae3, 0xa5c6457e, 0x0cd09e62, \ - 0x51cca07b, 0x9950fe9a, 0x51371fe4, 0xdd26f224, 0xad262164, \ - 0xad4f40d2, 0x322736f9, 0x49298a49, 0xbdd376ab, 0x1aea9cdb, \ - 0xae9b2156, 0x71445f25, 0xa67c0ef4, 0x170bbe94, 0x3917d727, \ - 0x37b0c7fe, 0xab9bea53, 0x08b25e4d, 0x7d65e134, 0x35935d0f, \ - 0x824b2781, 0xbeb29840, 0xb3b84c24, 0x2bb92abf, 0x1dfaaf98, \ - 0xf1a8a765, 0x10bdde5d, 0x1e7ed4a5, 0x26c6355e, 0xdc00ce80, \ - 0xb5b94b12, 0x6d24c5c7, 0xd97266b1, 0x4fc282ce, 0xdeb39ac3, \ - 0x14f429b6, 0x221cb1ff, 0xb43df22a, 0x11dc0ea4, 0x8a676ff4, \ - 0xf396bbb4, \ - }}, \ - .n0_inv = { \ - 0x5a7ba313, 0xb119675d, 0xd56cff72, 0x8d3991af, \ - 0x1f4be5ec, 0x5466a71f, 0xced86046, 0x24bdad5e, \ - }, \ - } -#endif // OPENTITAN_SW_DEVICE_SILICON_CREATOR_ROM_EXT_KEYS_FAKE_ROM_EXT_TEST_KEY_0_RSA_3072_EXP_F4_H_ diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_test_key_0_rsa_3072_exp_f4.pub.der b/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_test_key_0_rsa_3072_exp_f4.pub.der deleted file mode 100644 index 813d1b5de93c3..0000000000000 Binary files a/sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_test_key_0_rsa_3072_exp_f4.pub.der and /dev/null differ diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/sigverify_rsa_keys_fake.c b/sw/device/silicon_creator/rom_ext/keys/fake/sigverify_rsa_keys_fake.c deleted file mode 100644 index df87f6d56c46f..0000000000000 --- a/sw/device/silicon_creator/rom_ext/keys/fake/sigverify_rsa_keys_fake.c +++ /dev/null @@ -1,43 +0,0 @@ -// Copyright lowRISC contributors (OpenTitan project). -// Licensed under the Apache License, Version 2.0, see LICENSE for details. -// SPDX-License-Identifier: Apache-2.0 - -#include "sw/device/lib/base/macros.h" -#include "sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_dev_key_0_rsa_3072_exp_f4.h" -#include "sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_prod_key_0_rsa_3072_exp_f4.h" -#include "sw/device/silicon_creator/rom_ext/keys/fake/rom_ext_test_key_0_rsa_3072_exp_f4.h" -#include "sw/device/silicon_creator/rom_ext/sigverify_keys.h" - -/** - * Number of RSA public keys. - */ -enum { - kSigverifyRsaKeysCnt_ = 3, -}; -const size_t kSigverifyRsaKeysCnt = kSigverifyRsaKeysCnt_; - -/** - * Step size to use when checking RSA public keys. - * - * This must be coprime with and less than `kSigverifyNumRsaKeys`. - * Note: Step size is not applicable when `kSigverifyNumRsaKeys` is 1. - */ -const size_t kSigverifyRsaKeysStep = 1; - -/** - * Fake public keys for signature verification in tests. - */ -const sigverify_rom_ext_key_t kSigverifyRsaKeys[kSigverifyRsaKeysCnt_] = { - { - .key = ROM_EXT_PROD_KEY_0_RSA_3072_EXP_F4, - .key_type = kSigverifyKeyTypeFirmwareProd, - }, - { - .key = ROM_EXT_TEST_KEY_0_RSA_3072_EXP_F4, - .key_type = kSigverifyKeyTypeFirmwareTest, - }, - { - .key = ROM_EXT_DEV_KEY_0_RSA_3072_EXP_F4, - .key_type = kSigverifyKeyTypeFirmwareDev, - }, -}; diff --git a/sw/device/silicon_creator/rom_ext/keys/fake/sigverify_rsa_keys_fake_unittest.cc b/sw/device/silicon_creator/rom_ext/keys/fake/sigverify_rsa_keys_fake_unittest.cc deleted file mode 100644 index 288aad1c9190d..0000000000000 --- a/sw/device/silicon_creator/rom_ext/keys/fake/sigverify_rsa_keys_fake_unittest.cc +++ /dev/null @@ -1,216 +0,0 @@ -// Copyright lowRISC contributors (OpenTitan project). -// Licensed under the Apache License, Version 2.0, see LICENSE for details. -// SPDX-License-Identifier: Apache-2.0 - -#include -#include -#include -#include -#include - -#include "gtest/gtest.h" -#include "sw/device/lib/base/hardened.h" -#include "sw/device/silicon_creator/lib/drivers/mock_lifecycle.h" -#include "sw/device/silicon_creator/lib/drivers/mock_otp.h" -#include "sw/device/silicon_creator/lib/drivers/mock_rnd.h" -#include "sw/device/silicon_creator/lib/error.h" -#include "sw/device/silicon_creator/lib/sigverify/rsa_verify.h" -#include "sw/device/silicon_creator/rom_ext/sigverify_keys.h" -#include "sw/device/silicon_creator/testing/rom_test.h" - -#include "otp_ctrl_regs.h" - -namespace sigverify_keys_unittest { -namespace { -using ::testing::Return; - -TEST(Keys, UniqueIds) { - std::unordered_set ids; - for (size_t i = 0; i < kSigverifyRsaKeysCnt; ++i) { - ids.insert(sigverify_rsa_key_id_get(&kSigverifyRsaKeys[i].key.n)); - } - - EXPECT_EQ(ids.size(), kSigverifyRsaKeysCnt); -} - -/** - * An implementation of the Euclidean algorithm since we can't use c++17's - * `std::gcd()` yet. - */ -uint32_t Gcd(uint32_t a, uint32_t b) { - while (b != 0) { - std::tie(a, b) = std::make_tuple(b, a % b); - } - return a; -} - -TEST(KeysStep, IsCorrect) { - if (kSigverifyRsaKeysCnt > 1) { - EXPECT_LT(kSigverifyRsaKeysStep, kSigverifyRsaKeysCnt); - EXPECT_EQ(Gcd(kSigverifyRsaKeysStep, kSigverifyRsaKeysCnt), 1); - } -} - -// Note: The test cases below test sigverify using ROM keys. They have some -// overlap with sigverify_mod_exp_ibex unit tests but this way we don't have to -// worry about keeping the keys used in those tests in sync with ROM keys. - -/** - * Message and digest used in tests. - * - * The digest can be obtained using: - * ``` - * echo -n "test" | openssl dgst -sha256 -binary | \ - * xxd -p -c 4 | tac | sed 's|.*|0x&,|' - * ``` - */ -constexpr hmac_digest_t kDigest = { - .digest = - { - 0xb0f00a08, - 0xd15d6c15, - 0x2b0b822c, - 0xa3bf4f1b, - 0xc55ad015, - 0x9a2feaa0, - 0x884c7d65, - 0x9f86d081, - }, -}; - -/** - * Keys and signatures used in tests. - */ -struct RsaVerifyTestCase { - /** - * Signer's RSA public key. - */ - const sigverify_rsa_key_t *key; - /** - * Signature to be verified. - */ - sigverify_rsa_buffer_t sig; -}; - -const RsaVerifyTestCase kRsaVerifyTestCases[3]{ - // message: "test" - { - .key = &kSigverifyRsaKeys[0].key, - /* - * echo -n "test" | openssl dgst -sha256 -keyform DER -sign \ - * rom_ext_prod_key_0_rsa_3072_exp_f4.der -binary \ - * | xxd -p -c 4 | tac | sed 's|.*|0x&,|' - */ - .sig = - { - 0x36eaced4, 0xfd86736f, 0x4be5bc52, 0xd58c0bad, 0x7bbaf753, - 0xe1d483d5, 0xb91e93df, 0xdc5a4d8b, 0x31a81dd8, 0x03964d74, - 0x4110c8e8, 0x4b26bd63, 0xeec9e880, 0x0658fbad, 0x9115acbb, - 0x30546e81, 0xd89b004a, 0x46ec0654, 0x7c790757, 0x40e5518a, - 0x5a8cac89, 0x77b9f7bf, 0xdde3ddb5, 0x74e3a826, 0xd63bfa53, - 0x72b514f8, 0xf6122729, 0x1196c0a4, 0x8c874559, 0xd7d8e6c9, - 0xa9dedeaa, 0xa7e09a18, 0xdcfd6da6, 0x31190e90, 0xf9e418ac, - 0xfdecd060, 0x422ffa89, 0x96b47e16, 0xfae6baab, 0x0e483c70, - 0x6ed98af7, 0xfdb5502a, 0xead118d2, 0x6fb8f362, 0xadfccb76, - 0x20c69cc4, 0x6a3eb2d1, 0x0ae30269, 0xf55a6c6a, 0xc7195f63, - 0x6178d106, 0x183df636, 0xc575b1c2, 0x0bfddb1b, 0xe3807c38, - 0x6fbe2b23, 0xf162c7dd, 0x47a54ad4, 0x45a48579, 0xa70aa643, - 0x77ecaa63, 0x77702f39, 0x5a7ded0c, 0x5c6db917, 0xfc5be756, - 0x119d6f7a, 0x4e55fe65, 0xbc3ad594, 0x753675d7, 0x909ad497, - 0x0bda2c0e, 0xc118e450, 0x99ac8b0c, 0xb1cd6836, 0x76dd6b92, - 0xd3e982b7, 0x8719abd7, 0xb1384cee, 0x86bbcbdc, 0xc211cab7, - 0x18ce7877, 0x9650d2ea, 0xda551fc0, 0x037bb2d5, 0x9dcadb98, - 0x8e65dd62, 0x582c6490, 0xc2f5e492, 0xc05f78f7, 0x24ee7700, - 0x682504ec, 0x46737d60, 0x482ab4a5, 0x23463420, 0x7b5b99c1, - 0x4293d6b4, - }, - }, - { - .key = &kSigverifyRsaKeys[1].key, - /* - * echo -n "test" | openssl dgst -sha256 -keyform DER -sign \ - * rom_ext_test_key_0_rsa_3072_exp_f4.der -hex - */ - .sig = - { - 0x0a43b030, 0xa82d7c33, 0xb9b1228a, 0x5a0f8892, 0xaa58c077, - 0x365e2b25, 0xc5f013f8, 0xbf32bc11, 0x15350128, 0x07522924, - 0x8f7e0889, 0x82084b48, 0xb92b0077, 0x82d3514e, 0xbecda671, - 0x571009d2, 0xd4606ba7, 0x66bd5fc3, 0xddae3c76, 0xc388a4c3, - 0x808d5e2a, 0x2dc32965, 0x4e008e5b, 0x4abfc93d, 0xdb6eb16d, - 0x6cb028f0, 0x4aeffb6b, 0xe7574f3e, 0xff73b548, 0x08649d80, - 0xb2009425, 0xe2bbd368, 0xa28e3b8a, 0xdd2875cb, 0xc54fdf24, - 0x1a9a59ac, 0x54ee1013, 0x6da6244d, 0x5cfd3eaa, 0xc7cb551f, - 0x68626f79, 0xf1cd06c6, 0x5fe8eadd, 0x220c9362, 0x8cc33f50, - 0xc3918984, 0xe1967286, 0xfd0376ac, 0x41e0f3ee, 0x5f221d07, - 0x90803f71, 0x6c7cef85, 0x835975e7, 0xa6b9fee5, 0x87155038, - 0x0fb5407e, 0x050f0cd0, 0x85225aec, 0x0a407a9f, 0x5a175126, - 0xe2e67818, 0x21deaa56, 0x9df45426, 0x361f14ab, 0xd93d22e7, - 0xb9cc475e, 0xe8b28289, 0xc56fbc95, 0x18b2d1ab, 0x14e18896, - 0x07ff5105, 0xce8f5e9f, 0xdee539a9, 0x2cf56ccd, 0xabe93abf, - 0xc51bee68, 0xd29df209, 0xebba0ab8, 0x9985a37b, 0xf30ec0fb, - 0xeba0bf7b, 0xa508045c, 0x02f09bb2, 0x9f674fe3, 0xb9c07238, - 0xc9c88282, 0xada38689, 0x6d7c3294, 0x479e27dd, 0x01bd6436, - 0x412c377f, 0x51a56959, 0x530432e8, 0x53e4f546, 0x163d3282, - 0xc25256a9, - }, - }, - - { - .key = &kSigverifyRsaKeys[2].key, - /* - * echo -n "test" | openssl dgst -sha256 -keyform DER -sign \ - * rom_ext_dev_key_0_rsa_3072_exp_f4.der -hex - */ - .sig = - { - 0x6e317a1c, 0x9068313e, 0x3f9610c1, 0x261cb66b, 0x0d6f49c6, - 0x6e062654, 0x87a0febe, 0xae824f16, 0xeca90143, 0x56ea924c, - 0x34dc1f64, 0xa9b756f9, 0xa6965f0d, 0x366c89cc, 0x921520ca, - 0xab0c17ec, 0x199a0b02, 0x6551663a, 0x9ff7ab3e, 0x4aea7455, - 0x3a3d6b2f, 0x0e8fe77e, 0x1b18ed7c, 0x643168d0, 0x91de7e47, - 0x86190fc2, 0x7b9b7a64, 0x5784b535, 0xb358354a, 0xad42ed4c, - 0x539823a8, 0xe7cf98ec, 0x68c4a7ae, 0xad35612e, 0xc43c18c6, - 0x5da4fa0b, 0x918a15b2, 0xbde51df7, 0x5d63a9d2, 0x96af2137, - 0x02c1cf63, 0x0a285e1a, 0x4d228a24, 0x45aa181e, 0xdefe4371, - 0x5a6c986e, 0x1d5455a5, 0xf342a7f2, 0x9e6d116f, 0x0cde267b, - 0x360997c0, 0x5da55860, 0xfe2ccf61, 0xc9517096, 0xb5e3891b, - 0xa7a0194b, 0xa1b094bd, 0x1dd61621, 0x79061426, 0x5eba1c71, - 0x5e3981c4, 0xcd38b155, 0xe47d6d5a, 0x985ef71c, 0xe69e4ba9, - 0xbfec165d, 0x1f5beff6, 0x15f18950, 0x18173348, 0xdfb7d0b2, - 0x8379cf38, 0x16636f15, 0x8b741f64, 0xd7bbd6e6, 0x0915d0fa, - 0x16f60d28, 0x54966caf, 0x5d415bc1, 0x2f033158, 0x140efe45, - 0xe0ed8089, 0xa79d27fa, 0xb256bf12, 0x4597dc61, 0x75d62c3e, - 0x18cb1285, 0xdedc32a3, 0x7238f240, 0xe9c7e35b, 0xecab323e, - 0xf39e74b9, 0x04cba244, 0x36ff5c6a, 0x5ed63996, 0xe5510a91, - 0x536875ef, - }, - }, -}; - -TEST(RsaVerifyTestCases, AllKeys) { - std::unordered_set ids; - for (auto const &test_case : kRsaVerifyTestCases) { - ids.insert(sigverify_rsa_key_id_get(&test_case.key->n)); - } - - EXPECT_EQ(ids.size(), kSigverifyRsaKeysCnt); -} - -class SigverifyRsaVerify - : public rom_test::RomTest, - public testing::WithParamInterface {}; - -TEST_P(SigverifyRsaVerify, Ibex) { - uint32_t flash_exec = 0; - EXPECT_EQ(sigverify_rsa_verify(&GetParam().sig, GetParam().key, &kDigest, - kLcStateProd, &flash_exec), - kErrorOk); - EXPECT_EQ(flash_exec, kSigverifyRsaSuccess); -} - -INSTANTIATE_TEST_SUITE_P(AllCases, SigverifyRsaVerify, - testing::ValuesIn(kRsaVerifyTestCases)); - -} // namespace -} // namespace sigverify_keys_unittest