Platform key hierarchy

1. A system for a platform key hierarchy, comprising:

an embedded controller to:

store a first public platform key with a key bit list corresponding to a number of valid private platform keys;

verify a second public platform key by comparing a key number corresponding to a private platform key to the key bit list, wherein the key bit list includes a revoked key bit mask to determine which of a number of private platform keys associated with the public platform keys are active and inactive; and

revoke the second public platform key based on a determination that the corresponding private platform key associated with the public platform key is inactive.

2. The system of claim 1 , wherein the first public platform key is permanently embedded within the embedded controller.

3. The system of claim 2 , comprising the embedded controller to verify the second public platform key by verifying a signature produced by the private platform key.

4. The system of claim 1 , wherein the key bit list is stored in a one-time programmable (OTP) memory resource within the embedded controller.

5. The system of claim 1 , wherein to verify the second public platform key includes verifying a digital signature generated by the private key prior to executing the instructions.

6. The system of claim 1 , comprising the embedded controller to revoke a particular platform key.

7. The system of claim 6 , wherein the embedded controller is to update a key bit list stored on the embedded controller to revoke the particular platform key.

8. A system for a platform key hierarchy, comprising:

an embedded controller coupled to a non-volatile memory resource, wherein the embedded controller is to:

verify a public platform key and corresponding key number stored in an external memory resource by:

verifying a signature generated by a private platform key utilizing the public platform key;

comparing the corresponding key number to a key bit list, wherein the key bit list includes a revoked key bit mask to determine which of a number of private platform keys associated with the public platform keys are active and inactive; and

revoking the public platform key based on a determination that the corresponding private platform key associated with the public platform key is inactive.

9. The system of claim 8 , wherein a number of instructions of the non-volatile memory resource are verified utilizing the public platform key when the private platform key is verified.

10. The system of claim 8 , wherein the key bit list is stored in a memory resource comprising a number of bits where each setting of a bit is locked by a fuse.

11. The system of claim 10 , wherein a platform key is revoked when a corresponding key number of the platform key is locked in the key bit list.

12. A method for a platform key hierarchy, comprising:

receiving, at an embedded controller, a request for platform key verification, wherein the request comprises a header, a key number associated with the platform key, and a platform key signature;

verifying, at the embedded controller, the header, the key number and the platform key signature;

comparing, at the embedded controller, the key number to a key bit list, wherein the key bit list includes a revoked key bit mask to determine which of a number of private platform keys associated with the platform keys are active and inactive; and

revoking, at the embedded controller, the key number based on a determination that a corresponding private platform key associated with the platform key is inactive.

13. The method of claim 12 , wherein verifying the header includes utilizing the platform key embedded within the embedded controller to verify the header.

14. The method of claim 12 , comprising updating, at the embedded controller, a blocked key slot by comparing a key bit list with the platform key signature to a key bit list stored in the embedded controller.

15. The method of claim 14 , wherein updating a blocked key slot includes locking a fuse of the key bit list stored in the embedded controller to match the key bit list with the private platform key signature.