BLOCK0 data register 2.
KM_HUK_GEN_STATE_HIGH | Set this bit to control validation of HUK generate mode. Odd of 1 is invalid, even of 1 is valid. |
KM_RND_SWITCH_CYCLE | Set bits to control key manager random number switch cycle. 0: control by register. 1: 8 km clk cycles. 2: 16 km cycles. 3: 32 km cycles. |
KM_DEPLOY_ONLY_ONCE | Set each bit to control whether corresponding key can only be deployed once. 1 is true, 0 is false. Bit0: ecdsa. Bit1: xts. Bit2: hmac. Bit3: ds. |
FORCE_USE_KEY_MANAGER_KEY | Set each bit to control whether corresponding key must come from key manager… 1 is true, 0 is false. Bit0: ecdsa. Bit1: xts. Bit2: hmac. Bit3: ds. |
FORCE_DISABLE_SW_INIT_KEY | Set this bit to disable software written init key, and force use efuse_init_key. |
XTS_KEY_LENGTH_256 | Set this bit to configure flash encryption use xts-128 key, else use xts-256 key. |
WDT_DELAY_SEL | Represents whether RTC watchdog timeout threshold is selected at startup. 1: selected. 0: not selected. |
SPI_BOOT_CRYPT_CNT | Represents whether SPI boot encrypt/decrypt is disabled or enabled. Odd number of 1: enabled. Even number of 1: disabled. |
SECURE_BOOT_KEY_REVOKE0 | Represents whether revoking first secure boot key is enabled or disabled. 1: enabled. 0: disabled. |
SECURE_BOOT_KEY_REVOKE1 | Represents whether revoking second secure boot key is enabled or disabled. 1: enabled. 0: disabled. |
SECURE_BOOT_KEY_REVOKE2 | Represents whether revoking third secure boot key is enabled or disabled. 1: enabled. 0: disabled. |
KEY_PURPOSE_0 | Represents the purpose of Key0. |
KEY_PURPOSE_1 | Represents the purpose of Key1. |