andrius
/
arm-trusted-firmware
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Merge changes from topic "sb/threat-model" into integration 

* changes:
  docs(threat-model): make measured boot out of scope
  docs(threat-model): revamp threat #9
This commit is contained in:
Bipin Ravi 2022-05-19 21:33:32 +02:00 committed by TrustedFirmware Code Review
parent 4cafcc30ed d08c496699
commit 453abc80b2
1 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
docs/threat_model/threat_model.rst
View File

@ -36,6 +36,9 @@ assumptions:
- There is no Secure-EL2. We don't consider threats that may come with
Secure-EL2 software.
- Measured boot is disabled. We do not consider the threats nor the mitigations
that may come with it.
- No experimental features are enabled. We do not consider threats that may come
from them.
@ -617,19 +620,18 @@ each diagram element of the data flow diagram.
| Threat | | **Improperly handled SMC calls can leak register |
| | contents** |
| | |
| | | When switching between secure and non-secure |
| | states, register contents of Secure world or |
| | register contents of other normal world clients |
| | can be leaked. |
| | | When switching between worlds, TF-A register state |
| | can leak to software in different security |
| | contexts. |
+------------------------+------------------------------------------------------+
| Diagram Elements | DF5 |
| Diagram Elements | DF4, DF5 |
+------------------------+------------------------------------------------------+
| Affected TF-A | BL31 |
| Components | |
+------------------------+------------------------------------------------------+
| Assets | Sensitive Data |
+------------------------+------------------------------------------------------+
| Threat Agent | NSCode |
| Threat Agent | NSCode, SecCode |
+------------------------+------------------------------------------------------+
| Threat Type | Information Disclosure |
+------------------------+-------------------+----------------+-----------------+