github
/
arm-trusted-firmware
mirror of https://github.com/ARM-software/arm-trusted-firmware.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Browse Source

docs(threat_model): cover the 'timing' side channel threat 

Incorporate a timing side-channel attack into the TF-A generic
threat model. There is no software mitigation measures in TF-A
against this specific type of attack.

Signed-off-by: Manish V Badarkhe <Manish.Badarkhe@arm.com>
Change-Id: I10e53f8ed85a6da32de4fa6a210805f950018102
pull/2000/merge
Manish V Badarkhe 8 months ago
parent
57249e7758
commit
6db0c1d865
1 changed files with 56 additions and 0 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 56
      docs/threat_model/firmware_threat_model/threat_model.rst

56
docs/threat_model/firmware_threat_model/threat_model.rst
View File

@ -623,6 +623,62 @@ General Threats for All Firmware Images
| | UART interface(s). |
+------------------------+-----------------------------------------------------+
+------------------------+-----------------------------------------------------+
| ID | 16 |
+========================+=====================================================+
| Threat | | **An attacker could analyse the timing behaviour |
| | of implemented methods in the system to infer |
| | sensitive information.** |
| | |
| | | A timing side-channel attack is a type of attack |
| | that exploits variations in the time it takes a |
| | system to perform different operations. This |
| | form of attack focuses on analyzing the time- |
| | related information leakage that occurs during |
| | the execution of cryptographic algorithms or |
| | other security-sensitive processes. By observing |
| | these timing differences, an attacker can gain |
| | insights into the internal workings of a system |
| | and potentially extract sensitive information. |
| | Sensitive information that, when revealed even |
| | partially, could heighten the susceptibility to |
| | traditional attacks like brute-force attacks. |
+------------------------+-----------------------------------------------------+
| Diagram Elements | DF2 |
+------------------------+-----------------------------------------------------+
| Affected TF-A | BL1, BL2, BL31 |
| Components | |
+------------------------+-----------------------------------------------------+
| Assets | Sensitive Data |
+------------------------+-----------------------------------------------------+
| Threat Agent | AppDebug |
+------------------------+-----------------------------------------------------+
| Threat Type | Information Disclosure |
+------------------------+------------------+----------------+-----------------+
| Application | Server | IoT | Mobile |
+------------------------+------------------+----------------+-----------------+
| Impact | Critical (5) | Critical (5) | Critical (5) |
+------------------------+------------------+----------------+-----------------+
| Likelihood | Critical (5) | Critical (5) | Critical (5) |
+------------------------+------------------+----------------+-----------------+
| Total Risk Rating | Critical (25) | Critical (25) | Critical (25) |
+------------------------+------------------+----------------+-----------------+
| Mitigations | | Ensure that the execution time of critical |
| | operations is constant and independent of |
| | secret data. This prevents attackers from |
| | exploiting timing differences to infer |
| | information about sensitive data. |
| | |
| | | Introduce random delays/timing jitter or dummy |
| | operations to make the timing behavior of program|
| | execution less predictable. This can disrupt the |
| | correlation between the execution time and |
| | sensitive data. |
| | |
+------------------------+-----------------------------------------------------+
| Mitigations | | Not implemented |
| implemented? | |
+------------------------+-----------------------------------------------------+
.. _Boot Firmware Threats:

Write Preview
Loading…
Cancel
Save