[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: [PATCH] Add virtio rpmb device specification
This is the virtio-rpmb specification draft, applied to the current virtio-spec. Below is a short description of RPMB and why we are doing this: RPMB (Replay Protected Memory Block) is a physical partition in eMMC, UFS or NVMe. Different from the traditional user partition, RPMB requires an RPMB authentication key and a monotonic write counter to access it. Every access to RPMB is in an authenticated and replay protected manner. RPMB access is authenticated by the Message Authentication Code (MAC), which is a hash value generated based on RPMB authentication key and the message using HMAC-SHA. The authentication key is programmed in a secure environment before any access to RPMB. Writer counter is the total number of successful authenticated data write on RPMB. It is added by one automatically by RPMB controller after each successful write operation. It is a required factor in messageto be MACed together. RPMB is widely used as a tamper-resistant and anti-replay storage. For example, itâs used in these open source projects: Google Trusty (https://source.android.com/security/trusty), ACRN (https://projectacrn.org/), OP-TEE (https://www.op-tee.org/) and so on. But virtualization software like Qemu doesn't provide eMMC/UFS/NVMe RPMB emulation. It blocks the OS like Trusty or OP-TEE running in a virtualization environment. For instance, Google right now uses another way to work around RPMB emulation issue when running Trusty in ARM Qemu: https://android.googlesource.com/trusty/external/trusty/+/refs/heads/master/test-runner/ Virtio RPMB standardization will definitely benefit OP-TEE, Google Trusty TEE, Qemu, OVMF or other modules to develop the RPMB based secure storage in virtualization. Virtio RPMB has been implemented in ACRN (https://projectacrn.org/). Virtio RPMB device in ACRN devicemodel: https://github.com/projectacrn/acrn-hypervisor/blob/master/devicemodel/hw/pci/virtio/virtio_rpmb.c Virtio RPMB frontend driver in kernel: https://github.com/projectacrn/acrn-kernel/blob/master/drivers/char/rpmb/virtio_rpmb.c Huang Yang (1): Add virtio rpmb device specification conformance.tex | 18 +++++++++++- content.tex | 3 ++ virtio-rpmb.tex | 88 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 3 files changed, 108 insertions(+), 1 deletion(-) create mode 100644 virtio-rpmb.tex -- 2.7.4
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]