Skip to content

fw-2.0.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Aug 15:34
· 745 commits to main since this release
Immutable release. Only release title and notes can be modified.
fw-2.0.3
e5ceee8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

This is a combined runtime and FMC release.

Caliptra Firmware 2.0.3 Release Notes

Release notes for changes introduced since Firmware 2.0.2.

Features

  • Authorization, Attestation & DPE:
    • Anchor MCU runtime in the Caliptra-managed DPE chain with SVN (#3729)
    • Add SoC manifest preamble DPE contexts (#3989)
    • Add owner authorization manifest support (#4058)
    • Report tagged DPE context SVN through DPE_GET_TAGGED_TCI (#4087)
    • Expose manifest SVN state through FW_INFO (#4093)
    • Allow PL1 callers to use AUTHORIZE_AND_STASH with SKIP_STASH (#4119)
  • Runtime, Drivers & Firmware Images:
    • Chunk DMA image hashing to support images larger than 1 MiB (#3940)
    • Skip ELF segments containing ELF and program-header metadata (#3970)
    • Add dynamic power handling for entropy_src (#4072)
  • FPGA, Hardware Model & Emulator:
    • Add an OpenOCD JTAG load_image command (#3937)
    • Generate a stable FPGA MAC address from the boot SD serial number (#3979)
    • Support downloading prebuilt Caliptra artifacts in the builder (#3999)
    • Add staged subsystem OTP provisioning through ProvisioningStage (#4007)
  • Build, Test & Documentation:
    • Update the DPE and CFI dependencies while preserving the 2.0 DPE state layout (#3924)
    • Add stable-key derivation diagrams (#3934)
    • Update the ROM IDevID CSR specification to match the implementation (#3952)
    • Add standard PKCS#8 and SPKI fake-key assets (#4025)

Fixes

  • Subsystem, FPGA & Emulator:
    • Fix subsystem-mode tests for the latest caliptra-mcu-sw ROM (#3879)
    • Correct the emulator MCU SRAM size (#3975)
    • Fix a subsystem-mode smoke test assertion (#4006)
    • Fix latching of SoC IFC interrupt lines and expose CPU halt state (#4020)
    • Restore caliptra-builder as a development dependency of the hardware model (#4035)
    • Fix fixed-mode FPGA and MCU activation test compatibility (#4121)
    • Correct frozen-ROM DeviceStatus expectations (#4127)
  • Authorization, Runtime & Security:
    • Harden the DPE index cache (#3988)
    • Expand libcaliptra PAUSER validation and fix asynchronous response and memory-transfer handling (#3985)
    • Correct DMA/SHA endianness handling (#4076)
    • Reject the reserved MCU runtime firmware ID in STASH_MEASUREMENT (#4075)
    • Fall back to owner metadata in GET_IMAGE_INFO (#4092)
    • Restrict SET_AUTH_MANIFEST to PL0 callers (#4103)
    • Correct the POPULATE_IDEV_CERT privilege level (#4098)
  • CI & Test Compatibility:
    • Test DPE index-cache behavior across hitless updates (#3996)
    • Record subsystem mode in ROM DeviceStatus, PCR0, and FMC alias measurements (#3930)
    • Fix remaining subsystem FPGA DPE context expectations (#4121)
  • Documentation & Maintenance:
    • Rename DICE diagram HKDF labels to KBKDF (#3933)
    • Fix spelling errors in the runtime README (#3991)
    • Format ECC fake-key PEM files for RFC 7468 compliance (#4034)
    • Fix typos across ROM, FMC, emulator, and X.509 documentation (#4053)
    • Add @parvathib to CODEOWNERS (#4094)

Full Changelog: fw-2.0.2...fw-2.0.3

Assets 84
Loading