[Security] FSP TRR support

intel / FSP

Intel(R) Firmware Support Package (FSP)

Other

295 stars 127 forks source link

[Security] FSP TRR support #23

Closed zaolin closed 4 years ago

zaolin commented 5 years ago

Hey guys, @nate-desimone,

Does the FSP support TRR on DDR4 memory for rambleed attack mitigation https://rambleed.com/ ?

If so which UPD option enables it?

BR, Philipp

c0d3z3r0 commented 5 years ago

@nate-desimone ping!

nate-desimone commented 4 years ago

Hey @zaolin, @c0d3z3r0

Ultimately the rambleed attack relies on being able to induce bit flips using the rowhammer technique. Therefore, our hardware protection against rowhammer is effective against rambleed as well. The UPD is FspmUpd->FspmConfig.RhSolution. The default value for the UPD is to enable the hardware based protection. This feature is available in Coffee Lake and newer.

Hope that helps.

nate-desimone commented 4 years ago

Any objections to closing this one?