Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

humility bankerase doesn't. #387

Open
cbiffle opened this issue May 24, 2023 · 0 comments
Open

humility bankerase doesn't. #387

cbiffle opened this issue May 24, 2023 · 0 comments

Comments

@cbiffle
Copy link
Contributor

cbiffle commented May 24, 2023

The humility bankerase command claims to erase a flash bank on the LPC55, in 32 kiB pages.

This is problematic for a few reasons.

  1. The LPC55 doesn't have a concept of "flash banks." There is just flash.
  2. The LPC55 has a 512B erase/programming granularity, not 32 kiB.
  3. The command doesn't actually erase. It writes zeros. On the LPC55 in particular this is a very different state from erase.

Ran into this while attempting to use bankerase to prepare an RoT for remanufacturing -- the DICE key generation code distinguishes an erased identity cert from a programmed identity cert. So, despite its name, bankerase cannot be used to erase the cert.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant