[perso] fix bug in SHA256 measurement computation

A SHA256 measurement of the owner FW and owner configuration block had not been completed before using the measurement. Signed-off-by: Tim Trippel <[email protected]>
lowRISC · Nov 8, 2024 · c0945f9 · c0945f9
1 parent 993188b
commit c0945f9
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/sw/device/silicon_creator/manuf/base/ft_personalize.c b/sw/device/silicon_creator/manuf/base/ft_personalize.c
@@ -311,6 +311,8 @@ static void compute_keymgr_owner_binding(manuf_certgen_inputs_t *inputs) {
                      kDiceMeasurementSizeInBytes);
   hmac_sha256_update((unsigned char *)inputs->owner_manifest_measurement,
                      kDiceMeasurementSizeInBytes);
+  hmac_sha256_process();
+  hmac_sha256_final(&combined_measurements);
   memcpy(attestation_binding_value.data, combined_measurements.digest,
          kDiceMeasurementSizeInBytes);
   memset(sealing_binding_value.data, 0, kDiceMeasurementSizeInBytes);