Cryptography in Caliptra#
OCP Global Summit 2025 digest Program Wildcard pick 13–16 October 2025
Speakers: Christopher Swenson (Microsoft), Jeff Andersen (Google)
- Why: Caliptra is the open-source silicon RoT shipping in real hardware, and this talk covers how hardware identity is actually derived and wielded (DICE, DPE, attestation) plus the post-quantum migration plan — the grounding for the PM's identity interests at the hardware layer, and a preview of what every accelerator will be expected to do.
- What: How Caliptra derives and uses hardware identity via DICE and DPE, provides attestation and secure boot, exposes generic crypto services through mailbox commands powering ownership and device encryption, and how it adapts to post-quantum requirements with the Adams Bridge hardware. (from abstract only)
- How: Open-source hardware RoT design (caliptra.io materials linked) with a mailbox interface to the parent SoC security subsystem; DICE-style identity derivation layered into DPE for delegation.
- Where applicable: OCP-server and accelerator ecosystems broadly — Caliptra is a shared open design adopted across vendors, not a single-company design.