Add prod RW manifest and public key.

Change-Id: If008b0dc388fdd81366e52aab8046af83a288e12
Reviewed-on: https://chromium-review.googlesource.com/407050
Commit-Ready: Marius Schilder <mschilder@chromium.org>
Tested-by: Marius Schilder <mschilder@chromium.org>
Reviewed-by: Marius Schilder <mschilder@chromium.org>
Reviewed-by: Bill Richardson <wfrichar@chromium.org>

2 files changed, 167 insertions, 0 deletions

diff --git a/util/signer/cr50_RW-prod.pem.pub b/util/signer/cr50_RW-prod.pem.pub
new file mode 100644
index 0000000000..f043eea161
--- /dev/null
+++ b/util/signer/cr50_RW-prod.pem.pub
@@ -0,0 +1,9 @@
+-----BEGIN PUBLIC KEY-----
+MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAthqml36PUHk5MgurodTG
+puEsqK9/28/gEiCZGgfKL2rZKzU7CSiD82nmMgMoaxNTcPZgln+WELXIZUv81Up3
+GT6dA2dSDSQgmdgI1/x3OkEf9BkmHajuvhZTDteI18X/9TsXwly9zoxEFRy/JW8X
+Cz9/eOE7xcgoIzji0WmnosMKyxiOv67hhH+JvJ01uQhcxOag2606uIBknovHZT7l
+kf3RsEquoZqGK2WFwin9gl4KXv8yQ2F0h9LnfezIURWuz4J6pNc8EI7jYeP5eBrJ
+AfE8HsnDD6I2OpoNNM0BnbPq7gbn5CJJn5bZ6dNM4YBH8saJgNVBYOV9XqHdtiLV
+uwIBAw==
+-----END PUBLIC KEY-----
diff --git a/util/signer/ec_RW-manifest-prod.json b/util/signer/ec_RW-manifest-prod.json
new file mode 100644
index 0000000000..26d4b0293c
--- /dev/null
+++ b/util/signer/ec_RW-manifest-prod.json
@@ -0,0 +1,158 @@
+{
+// List of fuses and their expected values.
+"fuses": {
+        "FLASH_PERSO_PAGE_LOCK": 5,  // individualized
+        "FW_DEFINED_DATA_BLK0": 2,  // cros SKU
+        "FW_DEFINED_DATA_EXTRA_BLK6": 0  // escape hatch
+},
+// Rollback state.
+"info": {
+"0": -1,
+"1": -1,
+"2": -1,
+"3": -1,
+"4": -1,
+"5": -1,
+"6": -1,
+"7": -1,
+"8": -1,
+"9": -1,
+"10": -1,
+"11": -1,
+"12": -1,
+"13": -1,
+"14": -1,
+"15": -1,
+"16": -1,
+"17": -1,
+"18": -1,
+"19": -1,
+"20": -1,
+"21": -1,
+"22": -1,
+"23": -1,
+"24": -1,
+"25": -1,
+"26": -1,
+"27": -1,
+"28": -1,
+"29": -1,
+"30": -1,
+"31": -1,
+"32": -1,
+"33": -1,
+"34": -1,
+"35": -1,
+"36": -1,
+"37": -1,
+"38": -1,
+"39": -1,
+"40": -1,
+"41": -1,
+"42": -1,
+"43": -1,
+"44": -1,
+"45": -1,
+"46": -1,
+"47": -1,
+"48": -1,
+"49": -1,
+"50": -1,
+"51": -1,
+"52": -1,
+"53": -1,
+"54": -1,
+"55": -1,
+"56": -1,
+"57": -1,
+"58": -1,
+"59": -1,
+"60": -1,
+"61": -1,
+"62": -1,
+"63": -1,
+"64": -1,
+"65": -1,
+"66": -1,
+"67": -1,
+"68": -1,
+"69": -1,
+"70": -1,
+"71": -1,
+"72": -1,
+"73": -1,
+"74": -1,
+"75": -1,
+"76": -1,
+"77": -1,
+"78": -1,
+"79": -1,
+"80": -1,
+"81": -1,
+"82": -1,
+"83": -1,
+"84": -1,
+"85": -1,
+"86": -1,
+"87": -1,
+"88": -1,
+"89": -1,
+"90": -1,
+"91": -1,
+"92": -1,
+"93": -1,
+"94": -1,
+"95": -1,
+"96": -1,
+"97": -1,
+"98": -1,
+"99": -1,
+"100": -1,
+"101": -1,
+"102": -1,
+"103": -1,
+"104": -1,
+"105": -1,
+"106": -1,
+"107": -1,
+"108": -1,
+"109": -1,
+"110": -1,
+"111": -1,
+"112": -1,
+"113": -1,
+"114": -1,
+"115": -1,
+"116": -1,
+"117": -1,
+"118": -1,
+"119": -1,
+"120": -1,
+"121": -1,
+"122": -1,
+"123": -1,
+"124": -1,
+"125": -1,
+"126": -1,
+"127": -1
+},
+
+  // Note: tag needs to match what cros_personalize anticipated!
+  // https://cs.corp.google.com/search/?q=kCrosFwr
+  "tag": "00000000000000000000000000000000000000000000000000000000",
+
+  // cros_loader uses b1-dev key as key to verify RW with
+  //"keyid": -1187158727,  // b1-dev key
+  "keyid": -561489779,  // prod RW key
+
+  "p4cl": 177,  // P4 sync cl for XML we link against. 177 == 0xb1.
+
+  "timestamp": 0,
+  "epoch": 0,  // FWR diversification contributor, 32 bits.
+  "major": 0,  // FW2_HIK_CHAIN counter.
+  "minor": 10,  // Mostly harmless version field.
+  "applysec": -1,  // Mask to and with fuse BROM_APPLYSEC.
+  "config1": 13,  // Which BROM_CONFIG1 actions to take before launching.
+  "err_response": 0,  // Mask to or with fuse BROM_ERR_RESPONSE.
+  "expect_response": 3  // purgatory level when expectation fails.
+}