Skip to content

Commit

Permalink
secure_storage: Update warning about HUK platform support
Browse files Browse the repository at this point in the history
Some platforms now do support retrieval of the Hardware Unique Key and/or
Chip ID, update this warning for the same.

Signed-off-by: Andrew Davis <afd@ti.com>
Acked-by: Etienne Carriere <etienne.carriere@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
  • Loading branch information
glneo authored and jbech-linaro committed Jun 15, 2022
1 parent 69a11fd commit a4c5aac
Showing 1 changed file with 3 additions and 7 deletions.
10 changes: 3 additions & 7 deletions architecture/secure_storage.rst
Original file line number Diff line number Diff line change
Expand Up @@ -424,16 +424,12 @@ representing the state of REE FS.
Important caveats
*****************
.. warning::
Currently **no OP-TEE platform** is able to support retrieval of the
Hardware Unique Key or Chip ID required for secure operation. For all
Currently some OP-TEE platform are not able to support retrieval of the
Hardware Unique Key or Chip ID required for secure operation. For those
platforms, a constant key is used, resulting in no protection against
decryption, or Secure Storage duplication to other devices. This is because
information about how to retrieve key data from the SoC is considered
sensitive by the vendors and it is not publicly available.

In OP-TEE, there are APIs for reading keys generically from
One-Time-Programmable (OTP) memory. But there are no existing platform
implementations.
sensitive by some vendors and it is not publicly available.

To allow Secure Storage to operate securely on your platform, you must define
implementations in your platform code for:
Expand Down

0 comments on commit a4c5aac

Please sign in to comment.