riscv-non-isa/riscv-ap-tee

DRTM terminology confusing

Closed this issue · 0 comments

jyao1 commented

I notice that the definition for sbi_tee_guest_drtm_extend is defines as:

This intrinsic is used by a TVM component to act as an extended root of trust of measurement 
for the TVM to extend runtime measurements beyond the static measurements performed by the TSM. 

This official TCG DRTM (https://trustedcomputinggroup.org/resource/d-rtm-architecture-specification/) means that the new standalone RTM is created dynamically (DRTM), independent with SRTM.

If this "TVM component" is measured by TSM initially, this is still normal RTM model, because the RTM is still TSM, this "TVM component" is trying to build the chain-of-trust, not act as the root-of-trust.

If there is the case, I would suggest to just call it sbi_tee_guest_measurement_extend, similar to TCG TPM2_PCR_Extend.

Please let me know if there is any misunderstanding here.
And the sample fix is provided in #22.