Backport 26620 ([ownership, rescue] Fix errors) #29023
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
pamaury
requested review from
cfrantz and
timothytrippel
and removed request for
a team
cfrantz
approved these changes
Jan 6, 2026
Allow using detached signatures in flash for owner operations. 1. A detached signature is detected when the 64-byte built-in ECDSA signature field is all zeros. 2. The entire flash DATA region is scanned for a detached signature. The signature must be aligned on a flash page boundary and must contain the command/entity that it is signing and the current ROM_EXT nonce. Signed-off-by: Chris Frantz <cfrantz@google.com> (cherry picked from commit 284716b)
The auxilliary ECDSA wrapper library was added at the start of ownership development because we had not yet created our own implmentation using the OTBN accelerator. Now that owner signature verification is consolidated into `owner_verify`, we no longer need the ECDSA wrapper library. Signed-off-by: Chris Frantz <cfrantz@google.com> (cherry picked from commit 4d44b10)
A loop variable of type `size_t` was being passed to `launder32` which accepts `uint32_t`. Signed-off-by: Chris Frantz <cfrantz@google.com> (cherry picked from commit 0ebf7b9)
There was a potential out-of-bounds access when receiving an xmodem frame. Check that the buffer has enough space to receive the next frame. Signed-off-by: Chris Frantz <cfrantz@google.com> (cherry picked from commit 96c9af6)
Signed-off-by: Chris Frantz <cfrantz@google.com> (cherry picked from commit 849f9b7)
pamaury
force-pushed
the
backport_26620
branch
from
bbb1224 to
534b824
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Backport #26620. Depends on #29018, only review the last 3 commits.