Ecosyste.ms: Timeline
Browse the timeline of events for every public repo on GitHub. Data updated hourly from GH Archive.
timothytrippel pushed 6 commits to earlgrey_1.0.0 timothytrippel/opentitan
- [signing] Implement owner-stage signing Implement signing of owner-stage payloads with owner keys. By default, we s... a5cc512
- [provisioning] add sc-hsm-embedded PKCS11 .so as orchestrator dep This adds the sc-hsm-embedded PKCS11 shared object... 5ab078e
- [manuf] Fix missing test tags for FT FPGA tests Commit fd9ba9d261e23647cca2285248014526dab8f4b1 dropped some test co... bafac9e
- [manuf] Device ID handling cleanup in orchestrator - Fix bug in DeviceId.update_base_id() - Add pretty-print of FT d... 7743040
- [manuf] Allow unset DIN in orchestrator Signed-off-by: Noah Moroze <[email protected]> 3e4925d
- [manuf] Clean up --cp-only handling in orchestrator Signed-off-by: Noah Moroze <[email protected]> 25dfdf4
timothytrippel pushed 3 commits to earlgrey_1.0.0 lowRISC/opentitan
- [manuf] Device ID handling cleanup in orchestrator - Fix bug in DeviceId.update_base_id() - Add pretty-print of FT d... 7743040
- [manuf] Allow unset DIN in orchestrator Signed-off-by: Noah Moroze <[email protected]> 3e4925d
- [manuf] Clean up --cp-only handling in orchestrator Signed-off-by: Noah Moroze <[email protected]> 25dfdf4
timothytrippel closed a pull request on lowRISC/opentitan
[manuf] Clean up device ID confirmation message
This PR tweaks the DIN handling in the device ID to create a `None` default and makes the CP confirmation message clearer. I also tossed in a few other small fixes/cleanups while I was in there. ...
timothytrippel closed a pull request on lowRISC/opentitan
[manuf] Fix missing test tags for FT FPGA tests
Commit fd9ba9d261e23647cca2285248014526dab8f4b1 dropped some test coverage, since the conditional unintentionally removes the default test tags if it evaluates to False. This commit fixes the is...
timothytrippel pushed 1 commit to earlgrey_1.0.0 lowRISC/opentitan
- [provisioning] add sc-hsm-embedded PKCS11 .so as orchestrator dep This adds the sc-hsm-embedded PKCS11 shared object... 5ab078e
timothytrippel opened a pull request on lowRISC/opentitan
[provisioning] add sc-hsm-embedded PKCS11 .so as orchestrator dep
This adds the sc-hsm-embedded PKCS11 shared object, thas is built in this repo to support Nitrokey signing flows, as a dep to the orchestrator ZIP so it can be used in offline provisioning environm...
timothytrippel created a branch on timothytrippel/opentitan
add-pkcs11-so-dep - OpenTitan: Open source silicon root of trust
timothytrippel pushed 10 commits to earlgrey_1.0.0 timothytrippel/opentitan
- [sphincsplus] Add serde for algorithm variant names Signed-off-by: Chris Frantz <[email protected]> (cherry picked ... e606529
- [rust] Add libloading crate Signed-off-by: Chris Frantz <[email protected]> (cherry picked from commit 60f22c7c7a65... 23a6230
- [hsmtool] Original `acorn` header file This is the original, unmodified version of the `acorn.h` file from Entrust's... 5ede609
- [hsmtool] Add a binding to Entrust's `acorn` library Entrust's `acorn` library is their experimental PQ cryptography... ddf726a
- [hsmtool] Add SPHINCS+ operations 1. Allow loading the Entrust PQ crypto module from a shared library. 2. Add a comm... 7c37492
- [provisioning] enable SIVAL cert endorsement with Nitrokeys The DICE CA key is stored on a Nitrokey, which can be us... d8cbf64
- [provisioning] check in SIVAL RMA unlock token wrapping pubkey This pubkey is used to encrypt RMA unlock tokens duri... f8fa058
- [orchestrator] fix device ID test The DIN portion of the device ID contains fields that are in BCD format, as was up... bed096d
- [provisioning] fix device ID ujson payload order The ujson payload containing the device ID was sent to the FT indiv... 2f4e838
- [orchestrator] fix path of non-emulation perso bins The personalization binaries of non-emulation SKUs are checked i... df426c3
timothytrippel pushed 5 commits to earlgrey_1.0.0 lowRISC/opentitan
- [provisioning] enable SIVAL cert endorsement with Nitrokeys The DICE CA key is stored on a Nitrokey, which can be us... d8cbf64
- [provisioning] check in SIVAL RMA unlock token wrapping pubkey This pubkey is used to encrypt RMA unlock tokens duri... f8fa058
- [orchestrator] fix device ID test The DIN portion of the device ID contains fields that are in BCD format, as was up... bed096d
- [provisioning] fix device ID ujson payload order The ujson payload containing the device ID was sent to the FT indiv... 2f4e838
- [orchestrator] fix path of non-emulation perso bins The personalization binaries of non-emulation SKUs are checked i... df426c3
timothytrippel closed a pull request on lowRISC/opentitan
[provisioning] enable benchtop SIVAL cert endorsement with Nitrokeys
The DICE CA key may be stored on a Nitrokey, which can be used in a benchtop provisioning flow to endorse DICE certificates. This enables such flows by simply setting an envar (`PKCS11_MODULE_PATH`...
timothytrippel pushed 2 commits to enable-nk-cert-endorse timothytrippel/opentitan
timothytrippel pushed 2 commits to enable-nk-cert-endorse timothytrippel/opentitan
timothytrippel pushed 1 commit to enable-nk-cert-endorse timothytrippel/opentitan
- DO NOT MERGE: this is a test Signed-off-by: Tim Trippel <[email protected]> 473f2cb
timothytrippel pushed 4 commits to enable-nk-cert-endorse timothytrippel/opentitan
- [provisioning] enable SIVAL cert endorsement with Nitrokeys The DICE CA key is stored on a Nitrokey, which can be us... fd9ba9d
- [provisioning] check in SIVAL RMA unlock token wrapping pubkey This pubkey is used to encrypt RMA unlock tokens duri... ae03d39
- [orchestrator] fix device ID test The DIN portion of the device ID contains fields that are in BCD format, as was up... 09f8da7
- [provisioning] fix device ID ujson payload order The ujson payload containing the device ID was sent to the FT indiv... f8a137f
timothytrippel pushed 2 commits to enable-nk-cert-endorse timothytrippel/opentitan
timothytrippel pushed 2 commits to enable-nk-cert-endorse timothytrippel/opentitan
timothytrippel pushed 1 commit to enable-nk-cert-endorse timothytrippel/opentitan
- [orchestrator] fix device ID test The DIN portion of the device ID contains fields that are in BCD format, as was up... 6ebe90e
timothytrippel pushed 1 commit to enable-nk-cert-endorse timothytrippel/opentitan
- [orchestrator] fix device ID test The DIN portion of the device ID contains fields that are in BCD format, as was up... 39853e4
timothytrippel pushed 1 commit to enable-nk-cert-endorse timothytrippel/opentitan
- [provisioning] check in SIVAL RMA unlock token wrapping pubkey This pubkey is used to encrypt RMA unlock tokens duri... f2def7c
timothytrippel created a comment on a pull request on lowRISC/opentitan
> nit: You may have to add the keys/sival data dependencies to orchestrator if you are planning to use it without bazel. Ah right, fixed. Thanks.
timothytrippel pushed 1 commit to enable-nk-cert-endorse timothytrippel/opentitan
- [provisioning] enable SIVAL cert endorsement with Nitrokeys The DICE CA key is stored on a Nitrokey, which can be us... 3ec1f6f
timothytrippel created a review comment on a pull request on lowRISC/opentitan
Updated README. Thanks.
timothytrippel pushed 1 commit to enable-nk-cert-endorse timothytrippel/opentitan
- [provisioning] enable SIVAL cert endorsement with Nitrokeys The DICE CA key is stored on a Nitrokey, which can be us... 24ddaf3