tf-m secure storageconnect.linaro.org.s3.amazonaws.com/hkg18/... · connected devices have secrets!...

LinaroConnect–HongKongMarch2018

TF-MSecureStorage

CE-OpenSourceSoftware

AshutoshSingh

QuickIntroductiontoTF-M

IntroductiontoServices

SecureStorageOverview

SecureStorageDesign

Exampleuse-case

SecureStorageOutlook

Agenda

Pleasefeelfreetointerruptduringthepresentation!

TrustedFirmwareMoverview

Introduction

PlatformSecurityarchitecture(PSA)publiclaunchinlate2017

TFMengineeringworkstartedearly2017,PSA–evenearlier

PSA:setofspecs&implementation–whichisTF-M

Non-securePartition

Applicationfirmware

OSlibraries

OSkernel

SecurePartition

Securefunction

TrustedPartition

TrustedFunction

TF-MCore

SecurecallAPIandrouting

PartitionManager

SecureDebug

Isolationboundary

SecureProcessingEnvironment(Sbinary)

SecurePartition

SecureIRQ

Crashhandling

SecureDrivers

Non-secureProcessingEnvironment

(NSbinary)

TFMNSAPI

Partition-privatecode

Securefunction

Scheduling

Secureisolation

TF-MFramework

•  Securebootloader

•  Securesysteminit

•  SecurePartitionManagement(SPM)

•  Securefunctioncallrouting

•  IsolationwithinSPE

•  Trustedservices,functions

•  NSPEAPI

•  Buildenvironment

•  Testsuite

•  ...

Non-securePartition

Applicationfirmware

OSlibraries

OSkernel

SecurePartition

Securefunction

TrustedPartition

TrustedFunction

TF-MCore

SecurecallAPIandrouting

PartitionManager

SecureDebug

Isolationboundary

SecureProcessingEnvironment(Sbinary)

SecurePartition

SecureIRQ

Crashhandling

SecureDrivers

Non-secureProcessingEnvironment

(NSbinary)

TFMNSAPI

Partition-privatecode

Securefunction

Scheduling

Secureisolation

TF-MTerminologySecurePartitionManager(SPM)

•  Providestheboot,isolationandIPCservicestotheSPE

Partition

•  Theunitofexecution

SecureFunction

•  AsetofrelatedAPIsinvokedthroughsecureIPC

Trustedfunction

•  ASecureFunctionthatprovidesaRootofTrustservice

IntroductiontoTF-MServices

SecurePartition/Function/Service

Secureendpointofthesystem

Userauthenticationandaccesspolicybasedservice

Sandboxedtoallowmutualdistrustandlimitthreatvectors

InvokedfromSPEaswellNSPEentities

Independentinteractionwithmultipleentities

MultipleFunctions(SF)insamePartition(SP)

Non-securepartition

Applicationfirmware

OSlibraries

OSkernel

CryptoSecurepartitionSecurefunction

Securefunction

Trustedpartition

Trustedfunction

SecurePartitionManager

SecureIPC Secureisolation Securedebug

Isolationboundary

SecureProcessingEnvironmentNon-secure

ProcessingEnvironment

SSTSecurepartitionSecurefunction

Securefunction

TF-MSecureStorage

SecureStorageIntroduction

Connecteddeviceshavesecrets!

•  RoTkeys,Communicationskeys,hashes,certificates

•  Vendorsecrets(provisioningkeys,featurecertificates)•  Criticalfordevicesecurityandoperability•  Needfor-

•  Restrictedaccesstoplaintextsecrets

•  Tamperresistance/detection

•  Reliability

SecureStorageIntroduction•  Confidentiality

•  AEADEncryption

•  PolicyBasedAccessControl

•  RedefineAccessGranularity(Read/Write/Reference)

•  Integrity•  AEADAuthentication

•  Availability•  AtomicUpdateOperations

•  PowerFailureSafeDesign

•  Scalability

Confidentiality

AvailabilityIntegrity

Scalability

SSTSystemView

Non-securepartition

Applicationfirmware

OSlibraries

OSkernel

CryptoSecurepartition

CryptoSF

Trustedpartition

Trustedfunction

Isolationboundary

Non-SecureProcessingEnvironment

SSTCAPI

SecureProcessingEnvironment

Key Cert Hash

FileSystem(orproxy)

Cryptographicbinding

AccessPolicyManagement

Policydatabase

HUKderivedkey

FirstRelease

•  Policybasedaccess•  Compiled-inpolicytable

•  SingleKeyOperation•  AES-GCMForAEAD

•  Atomicaccess,powerfailuresafe

•  CustomFileSystem

Key Cert Hash

FileSystem(orproxy)

Policydatabase

HUKderivedkey

TF-MSecureStorageAccessPolicyManagement

AccessPolicyManagement•  Gatekeeperforalltheaccesses•  Placeholderforfutureadditions

•  lifecyclemanagement•  secureassetmanagement

•  Compiletimepolicydefinition

•  Use-case1:DirectAccessfrom(SPEorNSPE)Client•  Read/Write/Deleterequest•  Accesspermissionlookupinpolicydatabase

Key Cert Hash

FileSystem(orproxy)

AccessPolicyManagement Policydatabase

HUKderivedkey

AccessPolicyManagement•  Use-case2:Referenced

Access•  Onlyreadinindirectaccess•  ClientasksCryptoto

performacryptographicoperationwiththekeyreference(UUID)

•  CryptomakesareadrequestonNSPEcaller’sbehalf

•  ‘Reference’permissionlookupfortheoriginalNSPEclient

•  OnlySPEcallerallowedtomakereferencedreadonother’sbehalf

Non-securepartition

OSlibraries

OSkernel

Crypto

CryptoSF

Trustedpartition

Trustedfunction

SecureIPCSecureisolation Securedebug

Non-SecureProcessingEnvironment

SSTCAPI

SecureProcessingEnvironment

Key1 Cert

FileSystem(orproxy)

Policydatabase

HUKderivedkey

TF-MSecureStorageFileSystem

SSTFileSystem–FlashLayoutSST

Key Cert Hash

FileSystem(orproxy)

Policydatabase

HUKderivedkey

MetaBlock

ScratchMetaBlock

DataBlock

ScratchDataBlock

DataBlock •  SetofBlocksear-

marked•  Firsttwoformetadata

block•  Restaredatablocks•  Scratchmetablockand

scratchdatablock

Key Cert Hash

FileSystem(orproxy)

Policydatabase

HUKderivedkey

SSTFileSystem–FlashLayoutContdMetadataBlock

Metaheader

Blockmetadata• Block0Meta• Block1meta• ....

ObjectMetadata• Object0meta• Objectxxmeta

UNUSEDSPACE

Objectxxdata

DataBlock0

Objectxx

Objectyy

Objectzz

Objectaa

Objectbb

UNUSEDSPACE

DataBlock1

Objectcc

Objectdd

Objectee

Objectff

Objectgg

UNUSEDSPACE

•  Metaheader•  Metadataauthentication•  Atomicupdates

•  BlockMetadata•  Logicalblocktophysicalblockinfo•  Infoaboutfreespaceineachblock

•  ObjectMetadata•  Infoaboutanobject’swhereabouts•  Objectauthenticationdata

TF-MSecureStorageFlows

KeyDerivationSST

Key Cert Hash

FileSystem(orproxy)

Policydatabase

HUKderivedkey

HardwareUnique

Key(HUK)

KeyDerivation

SSTKey •  SimpleKeyDerScheme

•  HUK–needstobeuniqueperdevice

•  Implementationstubbed

•  _to_evolve_

AuthenticateEncryptionWithAssociatedDataSST

Key Cert Hash

FileSystem(orproxy)

Policydatabase

HUKderivedkey

Encryption

AuthenticatedData

Data(Plain-text)

AES-GCM

AuthTag

ObjectData(Encrypted)

AuthenticatedDecryption

AuthenticatedData

Data(Encrypted)

AES-GCM

AuthenticationResult

Data(Plain-Text)

AuthTagIV

ObjectEncryption/DecryptionSST

Key Cert Hash

FileSystem(orproxy)

Policydatabase

HUKderivedkey

ObjectEncryption

ObjectMetadata

ObjectData(Plain-text)

AES-GCM

SSTKey

MAC(AuthTag)

ObjectDecryption

ObjectMetadata

AES-GCM

SSTKey

ObjectData(Plain-Text)

MAC IV

Key Cert Hash

FileSystem(orproxy)

Policydatabase

HUKderivedkey

Boot-MetadataBlockAuthentication

MetaBlockAuthentication

Metadataheader

BlockMetadata AES-GCMAuth

SSTKey

MAC IV

ObjectMetadata

Key Cert Hash

FileSystem(orproxy)

Policydatabase

HUKderivedkey

WriteOperation(Simplified)

WriteRequest EncryptContent WritetoScratchDataBlock

UpdateScratchMetadataBlock

UpdateScratchMetadataheader(IV,SwapCount,

EraseActiveMetadata

EraseActivedatablock Done

MetaBlockAuthentication

Key Cert Hash

FileSystem(orproxy)

Policydatabase

HUKderivedkey

WriteOperation(..NotSimplified)

ObjectData Encrypt

ScratchDataBlock

ObjectData

ScratchMetaBlock

SwapCounter

LBlockMetaLBlockMeta

ObjectMetaObjectMetaObjectMeta

ActiveMetaBlock

SwapCounter

LBlockMetaLBlockMeta

ObjectMetaObjectMetaObjectMeta

ActiveDataBlock

ObjectData

ObjectDataIncrementSwapCounterGenerate/Store

MACforMetadata

EraseActiveMetablock

EraseActiveDataBlock

SwapActive/scrathblocks

tfm_sst_get_handle(uint16_tasset_uuid,uint32_t*hdl);

tfm_sst_create(uint16_tasset_uuid);

tfm_sst_get_attributes(uint32_tasset_handle,structtfm_sst_attribs_t*attrib_struct);

tfm_sst_read(uint32_tasset_handle,structtfm_sst_buf_t*data);

tfm_sst_write(uint32_tasset_handle,structtfm_sst_buf_t*data);

tfm_sst_delete(uint32_tasset_handle);

ReferenceUse-case

Non-securepartition

Applicationfirmware

IPStack

OSkernel

CryptoSecurepartitionSecurefunction

Securefunction

Trustedpartition

Trustedfunction

Isolationboundary

SecureProcessingEnvironmentNon-secure

ProcessingEnvironment

SSTSecurepartition

TLSKey/Cert

•  Rollbackprotection,re-doIVscheme

•  Keydiversification,passwordbasedaccess,keyhiding•  Securityproperties(keytype,restrictions)•  Lifecyclemanagement

•  Evolutionofuserauthentication•  Handlingvariousstoragedevicetopologies•  CompiletimeFlashLayoutgeneration

•  ToolingWorkOngoingforotherservices(Crypto,AuditLogging)

HowtogetinvolvedTF-AandTF-Mmastercodebases•  https://git.trustedfirmware.org/

TF-MTeam@ConnectHKG18•  AbhishekPandit

•  AshutoshSingh

•  TamasBan

•  MiklosBalint

Getintouch•  ComeroundLITEhackingroombetween3-4pmWednesday

•  Scheduleameetingviahkg18.pathable.com

Moreinfoondeveloper.arm.com

ThankYou!Danke!Merci!谢谢!ありがとう!Gracias!Kiitos!감사합니다धन्यवाद

SecureStorageOutlook(OpenDiscussion)

•  Rollbackprotection•  InternalFlashbaseddesign(tostorerollbackcountersecurely)?

•  OTP/E-FuseBasedDesign(tostorerollbackcountersecurely)?

•  Canitbetiedtofirmwareupdate?

•  Couldwepartitionintorollbackprotectedandnonrollbackprotected?

•  Keydiversification,passwordbasedaccess,keyhiding•  KeydiversificationperClient?

•  Token(password)basedkeyderivation?

•  ErasurePolicy?

•  Lifecyclemanagement•  SecureTimebasedlifecyclemanagement?

•  Usagecountbasedlifecyclemanagement?

•  Evolutionofuserauthentication•  CurrentlypartitionIDbased

•  Doesitneedtobemoresophisticated?(challengeresponsebased?)

•  Handlingvariousstoragedevicetopologies•  Dedicatedflashdeviceforsecurestorage?

•  Multi-headedflashdevice?

•  Usingsameflashfornon-secureandsecurestorage?

•  UsingNSPEfilesystem?

•  CompileTimeFlashLayout•  Deterministicstoragerequirement

•  Generatetheflash-layout(i.e.whatisstoredwhere)atcompiletime

•  Reducedcodesize/complexityattheruntime

•  Tooling•  Toolingtosupporteasydefinitionofpolicytable

•  Provision’ablePolicyDatabase(currentlycompiled-in)

tf-m secure storageconnect.linaro.org.s3.amazonaws.com/hkg18/... · connected devices have secrets!...

Documents

hkg18-110 net mdev: fast-path userspace i/o françois...

dov and nut codes secrets to success - iowa secrets...

voice.ai gateway product description ver. 2...6.9 azure key...

hkg18-219: threat modeling for iot - amazon web...

experience opnfv on arm - amazon web...

the secrets of a scoundrel€¦ · the secrets of a...

hkg18-124 android verified boot 2.0 and u-boot

hkg18-104 securing arm servers - amazon web...

keys to success important lessons you can borrow from...

lng tech lead, odp project bill...

5 keys to investing successsums of money by applying five...

hkg2018-411: openamp...

hkg18-415: tsn and linux

hkg18-407: hypervisors and iot (iot secret...

hkg18-220: state of big data on aarch64 - apache...

the black keys - piano · pdf file3 chapter the secrets of...

hkg18-007896-03 ec 4190536...verification report

hkg18-402: secure key services in...

29 pro cycling secrets for roadies secrets - road bike...

hkg18-220: state of big data on aarch64 - apache bigtop