Caliptra releases

Caliptra is released in independently versioned components: RTL, ROM, FMC and Runtime FW. They are all represented by 3 values: major.minor.patch (such as 1.0.2). The first 2 values, major.minor, correspond to a set of features caliptra supports. The patch value is incremented as new releases are made with bug fixes.

Caliptra 2.0

Additional Features

  • Support ML-DSA Caliptra FW Signature
  • Support OCP Recovery
  • Support Caliptra Sub-System
  • IDevID CSR HMAC Signing
  • Crypto Offload Mailbox Services

Compatible Configurations

RTLROMRuntime FMC/FW
2.0.x2.0.x2.0.x

Caliptra 1.2

Additional Features

  • Manifest-based Authorization
  • SET_AUTH_MANIFEST
  • AUTHORIZE_AND_STASH
  • Deferred retrieval of IDEV CSR**
  • GET_IDEVID_CSR
  • Self-signed FMC Alias CSR
  • GET_FMC_ALIAS_CSR
  • DPE export of CDI
  • SIGN_WITH_EXPORTED_ECDSA
  • REVOKE_EXPORTED_CDI_HANDLE
  • DPE max cert size increased to 6kB

** Requires 1.2 ROM

Compatible Configurations

RTLROMRuntime FMC/FW
1.1.x1.2.x1.2.x
1.1.x1.1.x1.2.x
1.0.x1.0.x1.2.x

Caliptra 1.1

Additional Features

  • ECC HW performance enhancements*
  • LMS HW acceleration*
  • New Runtime commands
  • LMS_SIGNATURE_VERIFY
  • ADD_SUBJECT_ALT_NAME
  • CERTIFY_KEY_EXTENDED
  • Expanded PL0 contexts to 16

* Requires 1.1 RTL

Compatible Configurations

RTLROMRuntime FMC/FW
1.1.x1.1.x1.1.x
1.0.x1.0.x1.1.x

Caliptra 1.0

Compatible Configurations

RTLROMRuntime FMC/FW
1.0.x1.0.x1.0.x