Closed jeffblank closed 9 years ago
here is the req from MDF
FPT_TST_EXT.2.1 The TSF shall verify the integrity of the bootchain up through the Application Processor OS kernel, and [selection: all executable code stored in mutable media, [assignment: list of other executable code], no other executable code], stored in mutable media prior to its execution through the use of [selection: a digital signature using a hardware-protected asymmetric key, a hardware-protected hash].
It would be excellent to see this modified and added into the PP, to replace the AEX req. numbering would likely become TST_EXT.1.1 then.
sure, leave it in for now. we'll see if the TPM crowd rears up/
Which has selection to capture how far the chain of trust goes.