search

ying-css / infineon-kits-cls

Infineon kits for CyberSecurity Labelling Scheme
1 stars 0 forks source link

How to securely store sensitive security parameters #1

Open Dejavu610 opened 11 months ago

Dejavu610 commented 11 months ago

Dear author: I have a question about CLS Provison5.4-1: Hard-coded critical security parameters in device software source code shall not be used. It seems like sensitive security parameters such as (e.g., passwords, tokens, secret keys, etc.) must be stored in trustzones such as TEE，SE and so on. For some devices, the hardware requirements are relatively high. Are there any best practices for secure storage that are not dependent on hardware?

ying-css commented 11 months ago

Hi @KongLynn, I don't think so. using hardware(e.g. secure element) for secure storage is the most secure way. Thanks.