WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity
wolfBoot/tools/keytools/otp
History
Daniele Lacamera a20101d6df Add support for DICE attestation + PSA attestation 2026-02-06 18:36:47 +01:00
..
Makefile Add support for DICE attestation + PSA attestation 2026-02-06 18:36:47 +01:00
README.md Add support for DICE attestation + PSA attestation 2026-02-06 18:36:47 +01:00
otp-keystore-gen.c Add support for DICE attestation + PSA attestation 2026-02-06 18:36:47 +01:00
otp-keystore-primer.c Add support for DICE attestation + PSA attestation 2026-02-06 18:36:47 +01:00
startup.c
…
target.ld
…

README.md

OTP keystore primer application

This application is used to provision the public keys into a dedicated FLASH OTP area. For more information about its usage, please refer to /docs/flash-OTP.md.

Attestation UDS storage

For targets that support it (for example STM32H5), wolfBoot can store a random UDS for DICE attestation in OTP using the primer app. This is the default approach when OBKeys secure storage is not available or not provisioned.

If you have access to STM32H5 OBKeys secure storage, prefer that for production iRoT key material. Enable WOLFBOOT_UDS_OBKEYS=1 and provision OBKeys via STM32TrustedPackageCreator/STM32CubeProgrammer (see docs/DICE.md). OTP should be used for development or as a fallback when OBKeys is unavailable.