riscv-non-isa/riscv-security-model

Description of measurement

Closed this issue · 4 comments

steven-bellock commented

The description of a measurement is too narrow.

riscv-security-model/specification/src/chapter2.adoc

Lines 744 to 745 in 8625adf

A measurement is a cryptographic fingerprint, such as a running hash of memory
contents and launch state.
In particular a measurement is a reading of some past/present/future state of a system. Multiple states may be folded into a single measurement value, through, for example, a running hash, but a measurement could equally be a one-bit fuse value.

rsahita commented

perhaps we use the TCG terminology [1] for Integrity Measurement: A value representing a platform characteristic that affects the integrity of a platform.

and add examples, such as a cryptographic hash, fuse values etc.

[1] TCG glossary

  • 👍1
NicholasWoodIMG commented

Thanks,

I think Ravi's suggestion makes sense. Do you agree @steven-bellock.

I will prepare a PR.

steven-bellock commented

Yes, that sounds good.