arm-trusted-firmware/docs/threat_model
Sandrine Bailleux 446354122c docs(threat-model): add a threat model for TF-A with Arm CCA
Arm Confidential Compute Architecture (Arm CCA) support, underpinned by
Arm Realm Management Extension (RME) support, brings in a few important
software and hardware architectural changes in TF-A, which warrants a
new security analysis of the code base. Results of this analysis are
captured in a new threat model document, provided in this patch.

The main changes introduced in TF-A to support Arm CCA / RME are:

 - Presence of a new threat agent: realm world clients.

 - Availability of Arm CCA Hardware Enforced Security (HES) to support
   measured boot and trusted boot.

 - Configuration of the Granule Protection Tables (GPT) for
   inter-world memory protection.

This is only an initial version of the threat model and we expect to
enrich it in the future.

Signed-off-by: Sandrine Bailleux <sandrine.bailleux@arm.com>
Co-authored-by: Manish Pandey <manish.pandey2@arm.com>
Change-Id: Iab84dc724df694511508f90dc76b6d469c4cccd5
2023-11-14 09:21:31 +01:00
..
index.rst docs(threat-model): add a threat model for TF-A with Arm CCA 2023-11-14 09:21:31 +01:00
threat_model.rst docs(threat-model): add a threat model for TF-A with Arm CCA 2023-11-14 09:21:31 +01:00
threat_model_arm_cca.rst docs(threat-model): add a threat model for TF-A with Arm CCA 2023-11-14 09:21:31 +01:00
threat_model_el3_spm.rst fix(docs): replace deprecated urls under tfa/docs 2023-09-07 16:29:11 -05:00
threat_model_fvp_r.rst docs(threat-model): cover threats inherent to receiving data over UART 2023-11-13 10:28:24 +01:00
threat_model_rss_interface.rst docs: add threat model for AP-RSS interface 2022-12-09 10:15:09 +01:00
threat_model_spm.rst fix(docs): replace deprecated urls under tfa/docs 2023-09-07 16:29:11 -05:00