[signing] Enable signing silicon_creator code with a token

Signed-off-by: Chris Frantz <[email protected]>
lowRISC · Dec 10, 2024 · f45f06c · f45f06c
1 parent 5d2dd80
commit f45f06c
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/hw/top_earlgrey/BUILD b/hw/top_earlgrey/BUILD
@@ -413,8 +413,11 @@ silicon(
         "--interface={interface}",
     ],
     design = "earlgrey",
-    # TODO: Add switch to enable privdate key.
-    ecdsa_key = {"//sw/device/silicon_creator/rom/keys/fake/ecdsa:test_key_0_ecdsa_p256": "test_key_0"},
+    ecdsa_key = select({
+        "//signing:test_keys": {"//sw/device/silicon_creator/rom/keys/fake/ecdsa:test_key_0_ecdsa_p256": "test_key_0"},
+        # We choose key zero in the keyset, which should be `*-earlgrey-a1-root-ecdsa-prod-0`.
+        "//conditions:default": {"//signing:appkey": "0"},
+    }),
     exec_env = "silicon_creator",
     extract_sw_logs = "//util/device_sw_utils:extract_sw_logs_db",
     flash_scramble_tool = "//util/design:gen-flash-img",