Skip to content

[sku] Add ti04 SKU and ti04-ica-dice-key-mldsa-v0 HSM configuration - #340

Merged
willyzha merged 1 commit into
lowRISC:mainfrom
willyzha:sku-add-ti04
Sep 29, 2026
Merged

willyzha merged 1 commit into
lowRISC:mainfrom
willyzha:sku-add-ti04

Conversation

@willyzha

Copy link
Copy Markdown
Collaborator

Add the ti04 Earlgrey SKU configuration for PQC (ML-DSA) provisioning:

  • Define ti04-ica-dice-key-mldsa-v0, ti04_spm_ca_keygen, and ti04_ca_intermediate_certgen in config/spm/sku/eg/ti/BUILD.bazel, endorsed by opentitan-mldsa-ca-root-v0.
  • Add config/spm/sku_ti04.yml.tmpl reusing ti01-ica-dice-key-p256-v0 for ECDSA DICE and using ti04-ica-dice-key-mldsa-v0 for ML-DSA-87 DICE endorsement.
  • Register ti04 in config/token_init.sh, config/spm/sku_auth.yml.tmpl, and PQ test/deployment scripts.

Add the ti04 Earlgrey SKU configuration for PQC (ML-DSA) provisioning:
- Define ti04-ica-dice-key-mldsa-v0, ti04_spm_ca_keygen, and ti04_ca_intermediate_certgen in config/spm/sku/eg/ti/BUILD.bazel, endorsed by opentitan-mldsa-ca-root-v0.
- Add config/spm/sku_ti04.yml.tmpl reusing ti01-ica-dice-key-p256-v0 for ECDSA DICE and using ti04-ica-dice-key-mldsa-v0 for ML-DSA-87 DICE endorsement.
- Register ti04 in config/token_init.sh, config/spm/sku_auth.yml.tmpl, and PQ test/deployment scripts.
@willyzha
willyzha requested a review from clundin25 September 28, 2026 22:59
@willyzha
willyzha merged commit 17d5eee into lowRISC:main Sep 29, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants