Split-key access for integrated circuits with hardware roots of trust

A system, comprising:

• a hardware processor;
• and
• one or more computer-readable storage mediums having program instructions stored thereon to cause the hardware processor to perform operations comprising:
• generating, by computer hardware of a first entity, a hash of a public key of a key pair;
• splitting, by the computer hardware of the first entity, the hash into a plurality of key shares;
• sharing a first key share of the plurality of key shares with a second entity, wherein the first key share is programmed into a reserved electronic fuse (eFuse) slot of an integrated circuit device by the second entity;
• loading into the integrated circuit device a boot image signed by the second entity, wherein the boot image is configured to unlock access to circuitry configured to write to the reserved eFuse;
• and
• programming a second key share of the plurality of key shares into the reserved eFuse slot.