roll: third_party/pigweed/src 4432cc5..8d3f139 (37 commits) 8d3f139:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/456185 roll: gn 2544efa:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/456045 roll: luci 97f2ab1:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/455825 roll: fuchsia-infra-bazel-rules 2b1ed07..f9f35ef (2 commits) 1f91357:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/455805 roll: ninja b5e6c9c:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/455785 roll: rust-analyzer 88af1ce:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452352 docs: Update changelog for July 2026 7c84c20:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/442192 pw_rp2350: Add C++ unittest service for freertos & zephyr ba63e84:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/450333 pw_kernel: Add host side debug mailbox client library 2d18022:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/450332 pw_kernel: Add crate for shared debug mailbox protocol enums 92ae0ca:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/439194 pw_kernel: Use debug mailbox in e2e tracing test 9b7b919:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/454706 pw_async2: Support move-only types in Map and Then 5305b60:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/453172 pw_bluetooth: Add request_opcode_in_error_uint in att.emb 9bc095e:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452252 pw_log_android: Make PW_LOG_LEVEL_FATAL fatal again 33efd73:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/453972 pw_async2: Make FutureOrValue movable 8238695:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/439193 pw_kernel: Add mailbox support to host side tooling e3935a4:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452712 pw_i2c_mcuxpresso: Add check for reading too few bytes 1e2949f:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436513 pw_kernel: Add a debug mailbox library 6468319:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/451033 pw_kernel: Sleep bootstrap thread in userspace tests 5ff0d19:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/454105 pw_ide: Release v1.11.1 e177c4c:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452652 pw_ide: vscode: Fix Rust target selection and rust-analyzer 9c6a517:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/450215 pw_kernel: Trace syscalls when SYSCALL_TRACE is enabled 9bd6c00:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452353 pw_ide: Exclude test files from webview TypeScript config 55e8228:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/440432 pw_kernel: Add support for GDB RSP Run-Length Encoding (RLE) e9aa87f:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/453272 pw_presubmit: Allow multiple directories to be passed to format CLI 63ce981:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/453312 format: Fix formatting issues when running lintformat-full f0f873d:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/453254 pw_build: Add args field to workflow Tool schema 46ba7ac:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452552 pw_bluetooth_proxy: Fix typo in Sniff test helper 8f61e66:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/449292 pw_ide: Add Rust code intelligence documentation for Bazel 6f0aac3:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452572 pw_kernel: Include system_image .elf & .bin in test runfiles 4db3263:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/446694 docs: Update documentation for the pw_interrupt backends 56bbb09:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452412 pw_elf: Silence unused warning 3a9867f:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452372 pw_sync_zephyr: Fix assertion in Mutex:lock() 752ea21:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452192 docs: Remove work orders 7a8ab7d:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/450272 pw_kernel: Support span events in k trace d7948b7:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/450214 pw_kernel: Add macros to open and close tracing spans 4c0d4b7:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/431673 pw_kernel: Add a TraceSpan record 6dd08d0:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/452032 pw_metric: Fix Android build Rolled-Repo: https://pigweed.googlesource.com/pigweed/pigweed Rolled-Commits: 4432cc52382ed8..8d3f13936f1299 Roll-Count: 1 Roller-URL: https://cr-buildbucket.appspot.com/build/8673264795284727137 GitWatcher: ignore CQ-Do-Not-Cancel-Tryjobs: true Change-Id: I7f7f29d591a50aadbfee80ba285d58ec8bf3277a Reviewed-on: https://pigweed-review.googlesource.com/c/open-dice/+/456226
This repository contains the specification for the Open Profile for DICE along with production-quality code. This profile is a specialization of the Hardware Requirements for a Device Identifier Composition Engine and DICE Layering Architecture specifications published by the Trusted Computing Group (TCG). For readers already familiar with those specs, notable distinctives of this profile include:
You can find us (and join us!) at https://groups.google.com/g/open-profile-for-dice. We're happy to answer questions and discuss proposed changes or features.
The specification can be found here. It is versioned using a major.minor scheme. Compatibility is maintained across minor versions but not necessarily across major versions.
Production quality, portable C code is included. The main code is in dice.h and dice.c. Cryptographic and certificate generation operations are injected via a set of callbacks. Multiple implementations of these operations are provided, all equally acceptable. Integrators should choose just one of these, or write their own.
Tests are included for all code and the build files in this repository can be used to build and run these tests.
Disclaimer: This is not an officially supported Google product.
Different implementations use different third party libraries. The third_party directory contains build files and git submodules for each of these. The submodules must be initialized once after cloning the repo, using git submodule update --init, and updated after pulling commits that roll the submodules using git submodule update.
To setup the build environment the first time:
$ git submodule update --init --recursive $ source bootstrap.sh $ gn gen out
To build and run tests:
$ ninja -C out
The easiest way, and currently the only supported way, to build and run tests is from a Pigweed environment on Linux. Pigweed does support other host platforms so it shouldn't be too hard to get this running on Windows for example, but we use Linux.
There are two scripts to help set this up:
bootstrap.sh will initialize submodules, bootstrap a Pigweed environment, and generate build files. This can take some time and may download on the order of 1GB of dependencies so the normal workflow is to just do this once.
activate.sh quickly reactivates an environment that has been previously bootstrapped.
These scripts must be sourced into the current session: source activate.sh.
In the environment, from the base directory of the dice-profile checkout, run ninja -C out to build everything and run all tests. You can also run pw watch which will build, run tests, and continue to watch for changes.
This will build and run tests on the host using the clang toolchain. Pigweed makes it easy to configure other targets and toolchains. See toolchains/BUILD.gn and the Pigweed documentation.
The code is designed to be portable and should work with a variety of modern toolchains and in a variety of environments. The main code in dice.h and dice.c is C99; it uses uint8_t, size_t, and memcpy from the C standard library. The various ops implementations are as portable as their dependencies (often not C99 but still very portable). Notably, this code uses designated initializers for readability. This is a feature available in C since C99 but missing from C++ until C++20 where it appears in a stricter form.
The Google C++ Style Guide is used. A .clang-format file is provided for convenience.
To incorporate the code into another project, there are a few options:
Copy only the necessary code. For example:
Take the main code as is: include/dice/dice.h, src/dice.c
Choose an implementation for crypto and certificate generation or choose to write your own. If you choose the boringssl implementation, for example, take include/dice/utils.h, include/dice/boringssl_ops.h, src/utils.c, and src/boringssl_ops.c. Taking a look at the library targets in BUILD.gn may be helpful.
Add this repository as a git submodule and integrate into the project build, optionally using the gn library targets provided.
Integrate into a project already using Pigweed using the gn build files provided.
The build reports code size using Bloaty McBloatface via the pw_bloat Pigweed module. There are two reports generated:
Library sizes - This report includes just the library code in this repository. It shows the baseline DICE code with no ops selected, and it shows the delta introduced by choosing various ops implementations. This report does not include the size of the third party dependencies.
Executable sizes - This report includes sizes for the library code in this repository plus all dependencies linked into a simple main function which makes a single DICE call with all-zero input. It shows the baseline DICE code with no ops (and therefore no dependencies other than libc), and it shows the delta introduced by choosing various ops implementations. This report does include the size of the third party dependencies. Note that rows specialized from ‘Boringssl Ops’ use that as a baseline for sizing.
The reports will be in the build output, but you can also find the reports in .txt files in the build output. For example, cat out/host_optimized/gen/*.txt | less will display all reports.
This code does not itself use mutable global variables, or any other type of shared data structure so there is no thread-safety concerns. However, additional care is needed to ensure dependencies are configured to be thread-safe. For example, the current boringssl configuration defines OPENSSL_NO_THREADS_CORRUPT_MEMORY_AND_LEAK_SECRETS_IF_THREADED, and that would need to be changed before running in a threaded environment.
This code makes a reasonable effort to clear memory holding sensitive data. This may help with a broader strategy to clear sensitive data but it is not sufficient on its own. Here are a few things to consider.