Only allow FW to access the SPI master

tillitis / tillitis-key1

Board designs, FPGA verilog, firmware for TKey, the flexible and open USB security key 🔑

https://www.tillitis.se

382 stars 24 forks source link

Only allow FW to access the SPI master #234

Open dehanj opened 2 weeks ago

dehanj commented 2 weeks ago

One possible solution to protect flash and distinguish between what app can reach a certain part of the flash, is to only allow fw to access the SPI flash. In that way the app may use functions through the fw to access it, where the fw can decide what areas the app may access.

This issue only concerns implementing a lock around the SPI master, so only fw can access it.

secworks commented 1 week ago

A test implementation of this functionality can be found in https://github.com/tillitis/tillitis-key1/pull/243