secure_boot_kdf.c

uint8_t secret_entropy[64];
uint8_t pk[32];
uint8_t sk[64];

#include <ed25519/ed25519.h>

/* This seed is as valuable as the secret key,
   so make sure it comes from a trustworthy source
   and will remian private. */
// Read/generate the secret seed from which keys are created
// TODO: get_trusted_entropy(secret_entropy);

// generate manufacturer's keys
ed25519_create_keypair(pk, sk, secret_entropy);