Caliptra RTL v2.1.2 Patch Release

Overview

Patch release for Caliptra 2.1 RTL.
Includes security hardening of AES countermeasures and Key Vault.
Includes Adams-Bridge ML-KEM Key Vault endianness bug fix for future use model. No impact to prior release security or functionality.
Includes Adams-Bridge ML-DSA streaming message bug fix.

Release Notes
Refer to README for guidance on release consumption.

What's Changed

• [DOC] Define procedure and convention for val updates to official releases (cherry-pick) by @calebofearth in #1193
• [RTL] KV error code and write entry bug fixes 2.1 by @Nitsirks in #1209
• [RTL] Update CPTRA_HW_REV_ID to 2.1.2 by @calebofearth in #1207
• [VAL] Misc validation updates from patch_v2.1 regressions by @Nitsirks in #1221
• [RTL] lock aes entropy if after seeded once to prevent re-seed 2p1 by @Nitsirks in #1226
• [DOC] Updates version numbers and release notes for 2p1p2 release by @Nitsirks in #1235

Full Changelog: v2.1.1...v2.1.2

Caliptra RTL v2.0.4 Patch Release

Overview

Patch release for Caliptra 2.0 RTL.
Includes security hardening of AES countermeasures and Key Vault.

Release Notes
Refer to README for guidance on release consumption.

What's Changed

• [RTL] KV error code and write entry bug fixes 2.0 by @Nitsirks in #1210
• [RTL] Update CPTRA_HW_REV_ID to 2.0.4 by @calebofearth in #1206
• [RTL] lock aes entropy if after seeded once to prevent re-seed 2p0 by @Nitsirks in #1227
• [DOC] Update version numbers and release notes for 2p0p4 release by @Nitsirks in #1234

Full Changelog: v2.0.3...v2.0.4

Caliptra RTL v2.0.3 Patch Release

Overview

Patch release for Caliptra 2.0 RTL. Includes critical bug fix for debug unlock.

Release Notes
Refer to README for guidance on release consumption.

What's Changed

• [RTL] Fix for security state debug not unlocking after manuf/prod dbg unlock flow patch_v2.0 by @Nitsirks in #1133
• [RTL] Update CPTRA_HW_REV_ID and doc versions to v2.0.3 by @calebofearth in #1137

Full Changelog: v2.0.2...v2.0.3

Caliptra RTL v2.1.1 Patch Release

Overview

Patch release for Caliptra 2.1 RTL. Includes critical bug fixes.
Release Notes
Refer to README for guidance on release consumption.

What's Changed

• [DOC] Apply documentation updates from main to 2.1 by @calebofearth in #1109
• [RTL] Fix for bug #1118 from ABR and test case to validate by @Nitsirks in #1121
• [RTL] Set CPTRA_HW_REV_ID to 2.1.1 by @calebofearth in #1124
• [DOC] Update release notes and doc versions to 2.1.1 by @calebofearth in #1125
• [RTL] Fix for security state debug not unlocking after manuf/prod dbg unlock flow patch_v2.1 by @Nitsirks in #1132

Full Changelog: v2.1...v2.1.1

Caliptra RTL v2.0.2 Patch Release

Overview

Patch release for Caliptra 2.0 RTL. Includes critical bug fixes and several validation plan enhancements.
Final checklist for this release: #1057
Release Notes
Refer to README for guidance on release consumption.

What's Changed

• [RTL] Keyvault hardening and adamsbridge submodule update by @Nitsirks in #1033
• [ENV] Clean up regression collateral by @calebofearth in #1036
• [ENV] Regenerate file-lists to remove duplicate entries on the last line by @calebofearth in #1044
• [VAL] update ABR submodule to version 1.0.3 by @Nitsirks in #1058
• [Doc] Added FC strap pins into Documentation by @ekarabu in #1067
• [RTL] Update VeeR core to apply AHB fix + lint fixes by @calebofearth in #1089
• [DOC] Add release notes for 2.0.2 and apply 2.1 documentation updates by @calebofearth in #1102
• [DOC] Fix the access desc for SS_DBG_MANUF_SERVICE_REG_REQ bits by @calebofearth in #1108

Full Changelog: v2.0.1...v2.0.2

Caliptra RTL v2.1 Release

Overview

Release of Caliptra 2.1 RTL. All features are frozen, verification plans are executed and signed-off, documentation has been updated, and CDC, Lint, RDC, Synthesis runs are clean.
Final checklist for this release: #1000
Release Notes

What's Changed

• [Val] OCP cov by @mojtaba-bisheh in #1012
• [TB] AES Collision test extension by @nileshbpat in #1022
• [VAL] SVA fixes by @upadhyayulakiran in #1029
• [VAL] Fix regression failures: UVM rand reg access and top TB KV injection by @calebofearth in #1032
• [TB] Expected kv error flags for hmac and mlkem keyvault access by @Nitsirks in #1040
• [Val] fixed regression failures and enhanced cov by @mojtaba-bisheh in #1039
• [TESTS] SHA3 interrupts by @marnovandermaas in #1026
• Update KV covergroup for better coverage by @upadhyayulakiran in #1043
• [VAL] Fix ocp progress tests by @upadhyayulakiran in #1047
• [VAL] Update FW defines for OCP LOCK KV slots by @calebofearth in #1048
• [VAL] Add missing handlers by @upadhyayulakiran in #1050
• [TESTS] SHA3 external mu test by @marnovandermaas in #956
• [RTL][VAL] Update ABR submodule, update mlkem kv test case, remove redundant cov interface by @Nitsirks in #1054
• [Val] Enhanced coverage by @mojtaba-bisheh in #1052
• [doc,sha3] Remove mentions of masking and add explanation for removal by @marnovandermaas in #1025
• [RTL][VAL] AES Caliptra wrapper lint fix, CPTRA_FW_REV_ID to pwrgood, assertions (hready), fix TB KV injection force/rel by @calebofearth in #1059
• [RTL] Update ABR with fix for MLKEM entropy loading by @mojtaba-bisheh in #1064
• [Val] Enhanced coverage for hmac/kv interface by @mojtaba-bisheh in #1068
• [DOC] updated spec for crypto diagram, DOE and KV by @mojtaba-bisheh in #1071
• [RTL] RISC-V AXI to AHB bridge bug fix by @calebofearth in #1073
• [VAL][RTL] ABR kv masking bugfix and ABR kv test coverage improvements by @Nitsirks in #1072
• [TB] Fix DMA functional coverage by @clayton8 in #1074
• [RTL,TESTS] SHA3 interrupt fixes by @marnovandermaas in #1069
• [Val] improved hmac coverage by @mojtaba-bisheh in #1076
• [RTL] Update VeeR core to apply AHB fix + lint fixes by @calebofearth in #1080
• [TB] Fix DMA functional coverage by @clayton8 in #1079
• [RTL] Update Adams Bridge to v2.0, apply lint fixes, coverage updates by @calebofearth in #1081
• [DOC] Clarify strap and fuse programming requirements by @clayton8 in #1083
• Add RFC issue template by @calebofearth in #1078
• [DOC] Update 2.1 releases notes by @calebofearth in #1085
• [DOC] Clarify how obf_key is sampled after cold reset by @calebofearth in #1086

Full Changelog: v2.1-rc1...v2.1

Caliptra RTL v2.1-rc1 Release Candidate

Overview

Release candidate for Caliptra 2.1 RTL. All features are frozen, verification plans are executed and signed-off, documentation has been updated, and CDC, Lint, RDC, Synthesis runs are clean.
Final checklist for this release: #1000
Final release is pending the completion of a security audit. Nightly regression testing will continue.
Release Notes

What's Changed

• [ENV] Update doc-gen workflow to publish v2.0 register documentation by @calebofearth in #865
• [TB] Fix for test code that runs large random DMA transfers by @calebofearth in #863
• [DOC] Clarify some text in integration spec; open Gen2 test plan permissions by @calebofearth in #869
• [DOC] Clarify 2.0 restrictions on SHA accel in HW spec by @calebofearth in #875
• update adams bridge submodule to patch 1.0.1 by @Nitsirks in #884
• [DOC] Hardware Spec update - aes/mldsa changes missed by @Nitsirks in #886
• [RTL] GitHub Issues fixes by @anjpar in #883
• [SVA] Update WDT SVA to check for timer1 enable by @anjpar in #892
• [VAL] Add invalid command parsing error injection scenarios for DMA test by @calebofearth in #895
• [RTL] Add support for endian-swap in SHA Accelerator for streaming mode by @calebofearth in #905
• [VAL] Add tests for SS_SOC_DBG_UNLOCK_LEVEL by @anjpar in #903
• [RTL/DOC] Add AES DMA to spec and design by @clayton8 in #878
• [RTL] Add HW clearing of secure assets when debug_intent set by @clayton8 in #902
• [DOC] Clarify and revise the example error handling section related to SRAM implementation by @calebofearth in #906
• [TB] Fix build errors in two SOC_IFC TBs by @clayton8 in #912
• [DOC/RTL] Add spec for External staging area and MBOX SRAM size reduction by @clayton8 in #908
• [VAL] Add XCELIUM ifdef to resolve conflict of functional RTL and sim tasks by @calebofearth in #919
• [RTL/VAL] Fix ECDH pubkey check by @mojtaba-bisheh in #921
• [DOC] Clarify AXI_USER uniqueness requirement in integration spec by @calebofearth in #911
• [VAL,UVM] Add endian-toggle support in UVM SHA Acc sequence by @calebofearth in #920
• [RTL/DOC] Fuse Granularity HW Config and Rename MANUF_SERVICE_REG 2.1 by @clayton8 in #913
• [RTL/Val] crypto coverage by @mojtaba-bisheh in #923
• [RTL] Add CALIPTRA_PRIM_MODULE_NAME macro and update file lists with CALIPTRA_PRIM_ROOT env var by @anjpar in #900
• [DOC] L0 regression script path added to README by @marnovandermaas in #927
• [RTL][TB] Adamsbridge ML-KEM integration by @Nitsirks in #929
• [VAL] fix soc_ifc_tb invalid_reg test by @mojtaba-bisheh in #924
• [RTL/VAL] Enable MLDSA External_mu by @mojtaba-bisheh in #935
• [VAL] MLKEM Val by @mojtaba-bisheh in #936
• [TB] New dut for subsystem mode mailbox size by @Nitsirks in #940
• [VAL,UVM] Disable/remove large logs from UVM regressions by @calebofearth in #942
• [TB] Fix testbenches that broke from splitting caliptra top defines by @Nitsirks in #947
• [SHA3] Implementation of new SHA3 IP by @andrea-caforio in #931
• [RTL,VAL] OCP Lock HW changes - AES KV WR, Key Release, KV filtering, etc. by @calebofearth in #950
• [RTL, VAL] MSFT Daily PR 20250820 by @nileshbpat in #966
• [RTL,COV] Coverage for ocp lock scenarios and latest adams bridge by @Nitsirks in #964
• [8/21] MSFT Aggregate PR by @mojtaba-bisheh in #975
• [Doc] Added MLKEM into spec by @mojtaba-bisheh in #978
• [RTL, VAL] OCP LOCK register updates, fix some testbench build failures and regression issues by @calebofearth in #965
• Crypto KV flows in OCP LOCK mode by @upadhyayulakiran in #974
• Remove UVM caliptra top rand test from promote pipeline by @calebofearth in #981
• [RTL] Fix RDC violations and fix random regressions by @clayton8 in #983
• [hw,sha3] Fix TODOs in SHA3 IP by @marnovandermaas in #970
• [8/26] MSFT Aggregate PR by @clayton8 in #995
• [8/27] MSFT Aggregate PR by @calebofearth in #1001
• [TB/COV] fix abr coverage for ocp lock, moved to clp specific file for coverage by @Nitsirks in #1002
• [RTL, RDL] SHA3 register fixes by @marnovandermaas in #996
• [8/28] MSFT Aggregate PR by @calebofearth in #1010
• [TB] DMA AES Regression Imrovements by @clayton8 in #1006
• [8/29] MSFT Aggregate PR by @calebofearth in #1019
• [DOC] Add OCP L.O.C.K. hardware support and firmware rules to specifications by @ekarabu in #994
• [DOC] 2.1 Release doc updates by @Nitsirks in #1020

New Contributors

• @andrea-caforio made their first contribution in #931

Full Changelog: v2.0...v2.1-rc1

Caliptra RTL v2.0.1 Patch Release

Overview

Patch release for Caliptra 2.0 RTL. Includes critical bug fixes and several validation plan enhancements.
Final checklist for this release: #934
Release Notes
Refer to README for guidance on release consumption.

What's Changed

• update adams bridge submodule to patch 1.0.1 - patch_v2.0 by @Nitsirks in #885
• Apply patch fixes for v2.0.1 to patch_v2.0 branch by @calebofearth in #932
• [RTL][DOC] Update HW_REV_ID and doc versions to 2.0.1 by @calebofearth in #933

Full Changelog: v2.0...v2.0.1

Caliptra RTL v2.0 Release

Overview

Release of Caliptra 2.0 RTL. All features are frozen, verification plans are executed and signed-off, documentation has been updated, and CDC, Lint, RDC, Synthesis runs are clean.
Final checklist for this release: #708
Release Notes

What's Changed

• Fix soc_ifc_tb build break by @anjpar in #823
• [TB] Update assertion in axi_sub to expect a reset if the protocol handshake rules are violated by @calebofearth in #825
• [TB] Fix display in sha acc test by @upadhyayulakiran in #826
• Mark AXI user 0xFFFF_FFFF as reserved by @jhand2 in #822
• [UVM] Update ROM regression to use non-default USER values for mailbox commands by @calebofearth in #787
• [ENV] Add test exclusions to Verilator regression and add status prints by @calebofearth in #828
• fix missing V update in DRBG corner case by @mojtaba-bisheh in #832
• [UVM] Force security state to production for ROM regression by @calebofearth in #835
• updated a constant LC token by @ekarabu in #836
• split ecc tests by @mojtaba-bisheh in #839
• [ENV] Enhance Makefile to support more flexible FW test builds by @calebofearth in #833
• Updates to AXI DMA random test by @anjpar in #829
• [TB] Fix assertion threshold for AXI DMA tests by @calebofearth in #844
• fix hmac directed test by @mojtaba-bisheh in #846
• Integration docs: Add recommended TRNG self-test thresholds. by @korran in #569
• [TB] Fix tb AXI complex logic for delay injection; fix hexfile check: '$system' returns an int, not a bit by @calebofearth in #850
• Subsystem Mode only: TAP mailbox lock priority by @ekarabu in #854
• [TB] Fix block-size emulation for DMA test across warm resets by @calebofearth in #856
• [TB] Fix a corner case in random DMA testbench that pushes data to FIFO during reset by @calebofearth in #859
• Update ABR submodule to include streaming message and dword swizzle fix by @Nitsirks in #860
• Calitpra 2.0 doc update by @ravithakurAMD in #862
• RDC and Synthesis documentation update by @amullick007 in #858
• [doc] Revise and detail TRNG configuration for integration spec by @moidx in #861
• [DOC] AXI updates for CaliptraIntegrationSpecification by @calebofearth in #864

New Contributors

• @ravithakurAMD made their first contribution in #862

Full Changelog: v2.0-rc1...v2.0

Caliptra RTL v2.0-rc1 Release Candidate

Overview

Release Candidate for Caliptra 2.0 RTL. All features are frozen, verification plans are executed and signed-off, documentation has been updated, and CDC, Lint, RDC, Synthesis runs are clean.
Final release is pending the completion of a security audit. Nightly regression testing will continue.
 

What's Changed

• Update file lists by @calebofearth in #651
• enabled hmac error by @mojtaba-bisheh in #653
• [RDL/DOC] Change SoC IFC external-reg-docs from absolute to relative address offsets by @calebofearth in #660
• Pure MLDSA KATs and coverage by @mojtaba-bisheh in #655
• Update abr submodule by @upadhyayulakiran in #663
• tlul library from OT by @Nitsirks in #666
• AES block with gcm by @Nitsirks in #664
• re-enabled mldsa smoke tests by @mojtaba-bisheh in #672
• mldsa pcr signing by @mojtaba-bisheh in #670
• User/dev/kupadhyayula/mldsa rand val by @upadhyayulakiran in #682
• Make WDT more module for MCI reuse by @clayton8 in #679
• Increased mbox size to 256KB, ROM to 96KB and DCCM/ICCM to 256KB by @Nitsirks in #681
• abr submodule zeroize update by @upadhyayulakiran in #684
• updated KV uvm to include AES by @mojtaba-bisheh in #689
• Adding wires to drive uds/field entropy from external source by @Nitsirks in #690
• Update caliptra_prim and caliptra_prim_generic on to Earlgrey.PROD_M5. by @anjpar in #685
• [RTL] Update RISCV core version by @calebofearth in #691
• [RTL] Fix bug in axi sub where AxREADY is asserted during reset by @calebofearth in #695
• MLDSA validation by @mojtaba-bisheh in #692
• Strap sampling fix and tb fix for dut hierarchical paths by @calebofearth in #697
• [ENV] Fixes for building pages and running Verilator regressions by @calebofearth in #698
• [RDL] Update fuse map with new/renamed fuses by @calebofearth in #669
• [ENV] Fix for excluding GH workflow files in hash check; skip Verilator for doc PRs by @calebofearth in #704
• added ExternalMu support for MLDSA by @mojtaba-bisheh in #703
• updating adams bridge to latest with memory export by @Nitsirks in #705
• fixing bug in soc ifc arb by @Nitsirks in #706
• fixed uvmf KV/PV due to PR #669 by @mojtaba-bisheh in #714
• [TB] Fix coverage file so TB enums don't conflict with RTL enums by @calebofearth in #711
• MLDSA locked API validation by @mojtaba-bisheh in #717
• AES GCM KeyVault enabled with smoke test by @Nitsirks in #716
• updated lcc pkg for susbsytem req by @ekarabu in #721
• DICE flow validation by @mojtaba-bisheh in #715
• Update UVM testbench to support AXI and new 2.0 features; fix some minor RTL bugs by @calebofearth in #724
• AES test cases by @Nitsirks in #725
• [RTL] Fix arbitration bug in soc_ifc_arb by @calebofearth in #728
• Sync latest aes block by @Nitsirks in #730
• [ENV] Fix workflow bug that prevents pre-run-checks from working with fork pull requests by @calebofearth in #731
• fixed hmac drbg by @mojtaba-bisheh in #723
• Publish HTML docs for 1.1 RTL in addition to main by @jhand2 in #676
• MLDSA PCR Injection Test by @ekarabu in #729
• [DOCS] Document some additional audit items in release checklist for thoroughness by @calebofearth in #656
• MLDSA KAT for Signature randomness by @ekarabu in #734
• SOC_IFC Register Tests for Caliptra 2.0 by @anjpar in #736
• ECDH Validation by @mojtaba-bisheh in #733
• libs: ahb_slv_sif: Latch hsize on address phase by @wkkuna in #502
• Fixing UVM sequences by @Nitsirks in #727
• Fix soc_ifc_tb build fail in nightly directed regression by @anjpar in #743
• [RTL] Bug fixes for AHB slave module, fe/uds hw load signals, and AXI wstrb usage by @calebofearth in #747
• Fix debug_unlock_manuf_test regression failure by @anjpar in #752
• Integration spec updates by @Nitsirks in #713
• Aggregate feature pull requests from 2025/02/26 by @calebofearth in #763
• Aggregate feature pull requests from 2025/02/27 by @Nitsirks in #767
• Aggregate feature pull requests from 2025/02/28 by @mojtaba-bisheh in #775
• Aggregate feature pull requests from 2025/03/01 by @calebofearth in #786
• manuf_dbg_unlock_token, ECDH tests, and more aggregated pull requests from 2025/03/03 by @calebofearth in #795
• aggregated pull requests from 2025/03/05 by @Nitsirks in #802
• Update CaliptraHardwareSpecification.md by @Nitsirks in #790
• [WORKFLOW] Update file exclusions in file hash check by @calebofearth in #816
• AES specification update by @vogelpi in #815
• [DOCS] 2.0-rc1 Release Notes and README by @calebofearth in #801
• [DOC] Update integration spec version to 2.0 by @calebofearth in #818
• Update Hardware Specification to 2.0 by @calebofearth in #819
• Update CaliptraReleaseChecklist.md version to 2.0 by @calebofearth in #820

New Contributors

• @jhand2 made their first contribution in #676

Full Changelog: v2.0-0.8...v2.0-rc1