Application image verification procedure in caliptra-1.1.0

[smam-emb]

Hi, I will be using caliptra-1.1.0 with an application processor interfaced via mailbox. I want to know what is the method of verifying the soc image (once the caliptra RT is up and running).

I guess we have to use OP_ECDSA384_VERIFY (which has keys as input parameter) command to verify the application image. I am interested to know where do we store/retrieve the keys when verifying the application image. Can anyone provide information on how soc verification is to be done using caliptra-1.1.0?

[JohnTraverAmd]

Caliptra does provide the crypto needed to verify the image, however, since the execution of that FW is owned by the SOC Mgr ROM, you get to decide how you securely get the SOC FW keys into the platform for the verification.