Bootgen supports ECDSAp384, HSS-SHAKE256, RSA-4096, and LMS-SHAKE256 authentication algorithm. NIST SHA3-384 calculates hash on the PLM partition for Versal AI Edge Series Gen 2 and Versal Prime Series Gen 2.
HashBlock0
In Versal AI Edge Series Gen 2 and Versal Prime Series Gen 2, HashBlock0 is placed next to authenticate certificate by default in PDI. HashBlock0 is composed with BH hash, PLM hash, PL data hash, and padding. The signature calculated on the HashBlock0 is placed next to it in the PDI.
Note:
- For non secure PDI generation,
HashBlock0is calculated by default for data integrity check. - Digest size is 48 bytes (SHA3-384) and total size of hash block is 320 bytes. 8 bytes of padding is required as block length must be 16 bytes aligned.
| Data | Field | Length (Bytes) |
|---|---|---|
| BH Hash | Hash Index | 4 |
| Hash Value | Digest Size | |
| PLM | Hash Index | 4 |
| Hash Value | Digest Size | |
| PL | Hash Index | 4 |
| Hash Value | Digest Size | |
| User Slot 1 | Hash Index | 4 |
| Hash Value | Digest Size |
HashBlock1
It is composed of metaheader hashes and partition hashes incase PSK/SSK are same.
Note:
- For non secure PDI generation, HashBlock1 is calculated by default for data integrity check.
- Digest size is 48 bytes (SHA3-384) and total size of hash block1 based on the number partition applies.
- If PSK/SSK keys are different between partition then hashes are generated separately in different hash block.
- If any two of partition's PSK/SSK are matching, then those partition hashes falls in single hashblock.
| Data | Field | Length (Bytes) |
|---|---|---|
| MH Hash (IHT+ Optional Data + IHs + PHTs) |
Hash Index Hash Value |
4 Digest Size |
| Partition1 |
Hash Index Hash Value |
4 Digest Size |
| Partition2 |
Hash Index Hash Value |
4 Digest Size |
| Partition n(n is the index of the Partition in the PDI) |
Hash Index Hash Value |
4 Digest Size |