Package1 TSEC Firmware - Revision history

Hexkyz: Redirected page to TSEC

2017-08-11T18:12:54Z

Redirected page to TSEC

Shuffle2: /* Authenticated Mode Entry/Exit */

2017-08-11T18:01:10Z

Authenticated Mode Entry/Exit

← Older revision		Revision as of 22:01, 11 August 2017
Line 45:		Line 45:
	=== Authenticated Mode Entry/Exit ===		=== Authenticated Mode Entry/Exit ===

	Entry to Authenticated Mode always sets $pc to the address supplied in $cauth (ie the base of the signature-checked region). This takes effect when trying to branch to any address within the range covered by $cauth.		Entry to Authenticated Mode always sets $pc to the address supplied in $cauth (ie the base of the signature-checked region). This takes effect when trying to branch to any address within the range covered by $cauth. Entry to Authenticated Mode (also called "Secure Mode") computes a MAC over the $cauth region and compares it to $c6 in order to perform the signature check.

	Exit from Authenticated Mode must poke a special register (this seems to be I[0x10300] = 0) before leaving authenticated code pages. Failure to do this would result in the Falcon core halting.		Exit from Authenticated Mode must poke a special register (this seems to be I[0x10300] = 0) before leaving authenticated code pages. Failure to do this would result in the Falcon core halting.

Shuffle2: /* Additional Notes on Crypto Extensions */

2017-08-11T17:57:35Z

Additional Notes on Crypto Extensions

← Older revision		Revision as of 21:57, 11 August 2017
Line 38:		Line 38:

	For example, if override type=0b000, then the "length" argument to <code>xdst</code> is instead treated as the index of the target $cX register.		For example, if override type=0b000, then the "length" argument to <code>xdst</code> is instead treated as the index of the target $cX register.

			=== Register ACLs ===

			Falcon tracks permission metadata about each crypto reg. Permissions include read/write ability per execution mode, as well as ability to use the reg for encrypt/decrypt, among other permissions. Permissions are propagated when registers are referenced by instructions (e.g. moving a value from read-protected $cX to $cY will result in $cY also being read-protected).

			=== Authenticated Mode Entry/Exit ===

			Entry to Authenticated Mode always sets $pc to the address supplied in $cauth (ie the base of the signature-checked region). This takes effect when trying to branch to any address within the range covered by $cauth.

			Exit from Authenticated Mode must poke a special register (this seems to be I[0x10300] = 0) before leaving authenticated code pages. Failure to do this would result in the Falcon core halting.

	== Annotated Assembly ==		== Annotated Assembly ==

Shuffle2: Created page with "TSEC is a nvidia falcon processor with crypto extensions. Firmware can be disassembled with [http://envytools.readthedocs.io/en/latest/ envytools'] [https://github.com/envyto..."

2017-08-11T17:42:03Z

Created page with "TSEC is a nvidia falcon processor with crypto extensions. Firmware can be disassembled with [http://envytools.readthedocs.io/en/latest/ envytools'] [https://github.com/envyto..."

Show changes