search

nmfta-repo / nmfta-hvcs-xfc

Extreme Fast Charging (XFC) Cybersecurity Threats, Use Cases and Requirements For Medium and Heavy Duty Electric Vehicles
Creative Commons Attribution 4.0 International
3 stars 2 forks source link

Correct requirement SSCO-06 #2

Closed HVCSFriend closed 5 years ago

HVCSFriend commented 5 years ago

Feedback per XFC Workgroup member:

The numbering in requirement SSCO-06 is incorrect. Currently it reads:

"2. The Device SHALL verify that the firmware came from the Vendor by verifying its cryptographic signature against a trusted issuer. In case the firmware storage medium is external to the processor that is executing it (e.g. external flash chip)

  1. The Device bootloader SHALL verify that the firmware signature is valid every time before running it, and not run it if it is invalid"

Instead, it should read:

"2. The Device SHALL verify that the firmware came from the Vendor by verifying its cryptographic signature against a trusted issuer.

  1. In case the firmware storage medium is external to the processor that is executing it (e.g. external flash chip), the Device bootloader SHALL verify that the firmware signature is valid every time before running it, and not run it if it is invalid"