search

lowRISC / opentitan

OpenTitan: Open source silicon root of trust
https://www.opentitan.org
Apache License 2.0
2.56k stars 764 forks source link

[sw] Flash secure erase and guidance #17031

Open tjaychen opened 1 year ago

tjaychen commented 1 year ago

Description

There may be a software need to implement a "secure" erase. This is an erase that is multi-pass where after the data is erased a random value is then written.

It should also be well defined when such an erase should be used, since uncontrolled usage of such a feature may degrade flash endurance.

Some examples of when we would use this is when sensitive data is wiped, such as keys, owners data during ownership transfers.

There is no hardware change request with this, but it does need to be documented somewhere as guidance.

tjaychen commented 1 year ago

this does not need to be M3, but it's also not exactly "backlog". Do we need to create a milestone representing software items that can essentially be post silicon?

johngt commented 1 year ago

@moidx / @cfrantz - I think the priority should be bumped up for this. Please correct me if I'm wrong. @luismarques - for visibility also as this will probably need to be implemented in SW / referenced.

msfschaffner commented 1 year ago

CC @cfrantz

msfschaffner commented 11 months ago

@moidx @johannheyszl @cfrantz we have several such "SW guidance" items for security that should be documented somewhere. what is the best milestone or label to collect these?

johannheyszl commented 11 months ago

cc @jadephilipoom agree it would make sense to have a dedicated label.

johannheyszl commented 10 months ago

Will be added to SW security guidance doc by @jadephilipoom