[fix] ROM README.md update (#900)

rom/dev/src/flow/cold_reset/fmc_alias.rs

@@ -53,7 +53,7 @@ impl FmcAliasLayer {
         // We use the value of PCR0 as the measurement for deriving the CDI.
         let mut measurement = env.pcr_bank.read_pcr(PCR_ID_FMC_CURRENT);
 
-        // Derive the DICE CDI from decrypted UDS
+        // Derive the DICE CDI from the measurement
         let result = Self::derive_cdi(env, &measurement, KEY_ID_ROM_FMC_CDI);
         measurement.0.zeroize();
         result?;

rom/dev/src/flow/cold_reset/idev_id.rs

@@ -64,7 +64,7 @@ impl InitDevIdLayer {
         // Decrypt the UDS
         Self::decrypt_uds(env, KEY_ID_UDS)?;
 
-        // Decrypt the Filed Entropy
+        // Decrypt the Field Entropy
         Self::decrypt_field_entropy(env, KEY_ID_FE)?;
 
         // Clear Deobfuscation Engine Secrets
@@ -100,7 +100,7 @@ impl InitDevIdLayer {
             env.soc_ifc.flow_status_set_ready_for_firmware();
         }
 
-        // Write IDevID pub to FHT
+        // Write IDevID public key to FHT
         env.persistent_data.get_mut().fht.idev_dice_pub_key = output.subj_key_pair.pub_key;
 
         cprintln!("[idev] --");
@@ -208,7 +208,7 @@ impl InitDevIdLayer {
         //
         // Generate the CSR if requested via Manufacturing Service Register
         //
-        // A flag is asserted via JTAG interface to enble the generation of CSR
+        // A flag is asserted via JTAG interface to enable the generation of CSR
         if !env.soc_ifc.mfg_flag_gen_idev_id_csr() {
             return Ok(());
         }
@@ -248,7 +248,7 @@ impl InitDevIdLayer {
             key_pair.priv_key as u8
         );
 
-        // Sign the the `To Be Signed` portion
+        // Sign the `To Be Signed` portion
         let mut sig =
             Crypto::ecdsa384_sign_and_verify(env, key_pair.priv_key, &key_pair.pub_key, tbs.tbs());
         let sig = okmutref(&mut sig)?;

rom/dev/src/flow/cold_reset/ldev_id.rs

@@ -169,7 +169,7 @@ impl LocalDevIdLayer {
         // Generate the `To Be Signed` portion of the CSR
         let tbs = LocalDevIdCertTbs::new(&params);
 
-        // Sign the the `To Be Signed` portion
+        // Sign the `To Be Signed` portion
         cprintln!(
             "[ldev] Signing Cert with AUTHORITY.KEYID = {}",
             auth_priv_key as u8
@@ -178,8 +178,6 @@ impl LocalDevIdLayer {
         let sig = okmutref(&mut sig)?;
 
         // Clear the authority private key
-        //To-Do : Disabling The Print Temporarily
-        //cprintln!("[ldev] Erasing AUTHORITY.KEYID = {}", auth_priv_key as u8);
         env.key_vault.erase_key(auth_priv_key).map_err(|err| {
             sig.zeroize();
             err
@@ -200,7 +198,7 @@ impl LocalDevIdLayer {
         env.data_vault.set_ldev_dice_signature(sig);
         sig.zeroize();
 
-        // Lock the Local Device ID public keys in data vault until
+        // Lock the Local Device ID public key in data vault until
         // cold reset
         env.data_vault.set_ldev_dice_pub_key(pub_key);