roll: third_party/pigweed/src 34edcc4..116506d (49 commits) 116506d:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/438692 roll: luci 02a6d5a:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/438492 roll: fuchsia-infra-bazel-rules 8fc414b..70f5247 (2 commits) b7064e2:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/433956 pw_bluetooth_proxy: Drop queued commands on allocator failure f9a3f0c:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434639 pw_bluetooth_sapphire: Cap BR/EDR EIR service UUIDs set size 6b5eee3:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434638 pw_bluetooth_sapphire: Limit L2CAP signaling channel ERTX timer resets 5552f64:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/433952 pw_bluetooth_sapphire: Fix unbounded allocation in ServiceSearchResponse 1cc1c28:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/438152 pw_protobuf: Rename 'oneof' field names matching C++ keyword fcfb555:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434636 pw_bluetooth_sapphire: Fix SDP client queue wedge on transaction Cancel 589dc34:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434234 docs: Update changelog for June 2026 b2f8a06:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/437512 pw_target_runner: Pass runner arguments 637cfad:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/433954 pw_bluetooth_sapphire: Invoke fail_cb on command handler malformed response 2d5b7c6:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/433953 pw_bluetooth_sapphire: Clamp invalid LE CoC MPS in TX engine e54f8f1:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436374 pw_bluetooth_sapphire: Erase connection request by peer ID to prevent iterator invalidation a53234d:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/437332 sphinx: Tidy config file 72392c5:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434640 pw_bluetooth_sapphire: Guard CCC write handler against null callback 312d1f7:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434644 pw_bluetooth_sapphire: Cap L2CAP recombiner fragments f67419c:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434641 pw_bluetooth_sapphire: Fix LE connection matching during address resolution fa5457e:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436872 pw_bluetooth_sapphire: Constrain ERTM max SDU size ca04025:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436912 pw_bluetooth_sapphire: Gracefully handle no pairing delegate on PIN 3748ed5:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436892 pw_bluetooth_sapphire: Clear LTK on LE pairing failure 17cfe2a:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436893 pw_bluetooth_sapphire: Truncate oversized notifications 0470be5:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436932 pw_bluetooth_sapphire: Add liveness check in read callback 8df6b63:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434642 pw_bluetooth_sapphire: Clear SecurityRequestPhase on responder encryption a7adb57:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436452 pw_bluetooth_sapphire: Fix use-after-free in RemoteServiceManager during discovery 5a8c6d3:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435533 pw_bluetooth_proxy: Fix narrowing conversion in L2cap recombination 3bb52f7:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435553 pw_bluetooth_proxy: Fix OOB in HandleNumberOfCompletedPacketsEvent e264645:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/417052 pw_bluetooth_proxy: Handle duplicate buffer-size events gracefully c1c5afa:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436555 pw_async2: Fix visibility issue in channel storage 67c6159:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436272 pw_bluetooth_sapphire: Harden ACL RX against oversized packets 57a64fc:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436118 pw_thread_zephyr: Enable constexpr thread Options 83f61c4:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/436033 pw_thread_zephyr: Make portable thread creation optional b5431af:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434632 pw_bluetooth_sapphire: use .empty() instead of .size() == 0 92fbccc:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/338952 pw_bluetooth_sapphire: Move Vendor Capabilities opcode usage to Emboss f7da1a0:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435454 pw_bluetooth_sapphire: Bound LowEnergyScanner cached scan results ee316e7:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/413774 pw_bluetooth_sapphire: Add CIG server 86c381c:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434559 pw_sys_io_zephyr: Make Kconfig optional for bazel usage eac11e9:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435452 sphinx: Use sphinxdocs Bazel module 11e74f0:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434513 pw_thread_zephyr: Make Kconfig optional for bazel usage 204475e:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434493 pw_thread_zephyr: Refactor BUILD.bazel rules ce5eee7:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434554 pw_chrono_zephyr: Refactor BUILD.bazel rules ad6e598:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/434492 pw_sync_zephyr: Refactor BUILD.bazel rules 6425890:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435453 pw_bluetooth_sapphire: Fix GenericAccessClient WeakPtr crash 420cc37:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435813 pw_sync: Remove thread notification backend constraint e183067:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435732 pw_bluetooth_sapphire: Validate LE CoC MTU and MPS parameters e4acf4a:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435634 bazel: Add sphinxdocs as dev_dependency 3c53d3e:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435433 docs: Fix Mermaid diagrams 850040e:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/433693 pw_async2: Reduce code size for coroutine allocation 37d76ca:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435073 pw_sync_zephyr.mutex_backend: add pw_assert as public dep f90f2c0:https://pigweed-review.googlesource.com/c/pigweed/pigweed/+/435212 roll: go Rolled-Repo: https://pigweed.googlesource.com/pigweed/pigweed Rolled-Commits: 34edcc4fedf98b..116506db544d22 Roll-Count: 1 Roller-URL: https://cr-buildbucket.appspot.com/build/8675801509202362833 GitWatcher: ignore CQ-Do-Not-Cancel-Tryjobs: true Change-Id: I15dbd655408ae28054c7604a43e3fcffb2c5ebe3 Reviewed-on: https://pigweed-review.googlesource.com/c/open-dice/+/438832
This repository contains the specification for the Open Profile for DICE along with production-quality code. This profile is a specialization of the Hardware Requirements for a Device Identifier Composition Engine and DICE Layering Architecture specifications published by the Trusted Computing Group (TCG). For readers already familiar with those specs, notable distinctives of this profile include:
You can find us (and join us!) at https://groups.google.com/g/open-profile-for-dice. We're happy to answer questions and discuss proposed changes or features.
The specification can be found here. It is versioned using a major.minor scheme. Compatibility is maintained across minor versions but not necessarily across major versions.
Production quality, portable C code is included. The main code is in dice.h and dice.c. Cryptographic and certificate generation operations are injected via a set of callbacks. Multiple implementations of these operations are provided, all equally acceptable. Integrators should choose just one of these, or write their own.
Tests are included for all code and the build files in this repository can be used to build and run these tests.
Disclaimer: This is not an officially supported Google product.
Different implementations use different third party libraries. The third_party directory contains build files and git submodules for each of these. The submodules must be initialized once after cloning the repo, using git submodule update --init, and updated after pulling commits that roll the submodules using git submodule update.
To setup the build environment the first time:
$ git submodule update --init --recursive $ source bootstrap.sh $ gn gen out
To build and run tests:
$ ninja -C out
The easiest way, and currently the only supported way, to build and run tests is from a Pigweed environment on Linux. Pigweed does support other host platforms so it shouldn't be too hard to get this running on Windows for example, but we use Linux.
There are two scripts to help set this up:
bootstrap.sh will initialize submodules, bootstrap a Pigweed environment, and generate build files. This can take some time and may download on the order of 1GB of dependencies so the normal workflow is to just do this once.
activate.sh quickly reactivates an environment that has been previously bootstrapped.
These scripts must be sourced into the current session: source activate.sh.
In the environment, from the base directory of the dice-profile checkout, run ninja -C out to build everything and run all tests. You can also run pw watch which will build, run tests, and continue to watch for changes.
This will build and run tests on the host using the clang toolchain. Pigweed makes it easy to configure other targets and toolchains. See toolchains/BUILD.gn and the Pigweed documentation.
The code is designed to be portable and should work with a variety of modern toolchains and in a variety of environments. The main code in dice.h and dice.c is C99; it uses uint8_t, size_t, and memcpy from the C standard library. The various ops implementations are as portable as their dependencies (often not C99 but still very portable). Notably, this code uses designated initializers for readability. This is a feature available in C since C99 but missing from C++ until C++20 where it appears in a stricter form.
The Google C++ Style Guide is used. A .clang-format file is provided for convenience.
To incorporate the code into another project, there are a few options:
Copy only the necessary code. For example:
Take the main code as is: include/dice/dice.h, src/dice.c
Choose an implementation for crypto and certificate generation or choose to write your own. If you choose the boringssl implementation, for example, take include/dice/utils.h, include/dice/boringssl_ops.h, src/utils.c, and src/boringssl_ops.c. Taking a look at the library targets in BUILD.gn may be helpful.
Add this repository as a git submodule and integrate into the project build, optionally using the gn library targets provided.
Integrate into a project already using Pigweed using the gn build files provided.
The build reports code size using Bloaty McBloatface via the pw_bloat Pigweed module. There are two reports generated:
Library sizes - This report includes just the library code in this repository. It shows the baseline DICE code with no ops selected, and it shows the delta introduced by choosing various ops implementations. This report does not include the size of the third party dependencies.
Executable sizes - This report includes sizes for the library code in this repository plus all dependencies linked into a simple main function which makes a single DICE call with all-zero input. It shows the baseline DICE code with no ops (and therefore no dependencies other than libc), and it shows the delta introduced by choosing various ops implementations. This report does include the size of the third party dependencies. Note that rows specialized from ‘Boringssl Ops’ use that as a baseline for sizing.
The reports will be in the build output, but you can also find the reports in .txt files in the build output. For example, cat out/host_optimized/gen/*.txt | less will display all reports.
This code does not itself use mutable global variables, or any other type of shared data structure so there is no thread-safety concerns. However, additional care is needed to ensure dependencies are configured to be thread-safe. For example, the current boringssl configuration defines OPENSSL_NO_THREADS_CORRUPT_MEMORY_AND_LEAK_SECRETS_IF_THREADED, and that would need to be changed before running in a threaded environment.
This code makes a reasonable effort to clear memory holding sensitive data. This may help with a broader strategy to clear sensitive data but it is not sufficient on its own. Here are a few things to consider.