CoVE-IO v0.2.0

CoVE-IO v0.2.0

The CoVE-IO v0.2.0 is a draft CoVE-IO specification release. The main changes compared to v0.1.0 are:

• Described and specified all TEE-IO flows: connection, disconnection, binding and unbinding flows . All of them are supported by the specified SBI.
• Completed the CoVE-IO security model.
• Aligned with the Smmtt and IOMMU RISC-V specifications.
• Clarified and fixed multiple IDE and SPDM flows and requirements.
• Switched to the RISC-V specification template and layout.

What's Changed

• fix typos and missing Oxford commas by @kbroch-rivosinc in #49
• Touch up spelling and grammar by @steven-bellock in #50
• Fix a couple of misleading terms by @sameo in #65
• specification: Assign FIDs by @sameo in #66
• Correct term and URL for reference. by @jyao1 in #92
• fix typos by @jyao1 in #93
• clarify both usage by @jyao1 in #95
• specification: Fix security model typo by @sameo in #100
• Clarify TSM in security requirement. by @jyao1 in #96
• Add clarification for device firmware adversary by @jyao1 in #98
• Fix figure Device Connection - Secured SPDM Session by @jyao1 in #99
• Clarify page size 4KB. by @jyao1 in #94
• Clarify SPDM session requirement by @jyao1 in #101
• clarify the TVM confidential DMA scope. by @jyao1 in #102
• Remove M mode component from adversary. by @jyao1 in #97
• Add description for DDA mode by @jyao1 in #64
• specification: Clarify the IOMMU requirements by @sameo in #103
• specifications: Relax the PCIe accessible RoT requirement by @sameo in #105
• specification: Consistently use the supervisor domain manager term by @sameo in #106
• specifications: Architecture overview clarification by @sameo in #104
• specification: Make IDE key ownership model clearer by @sameo in #107
• add description for key update. by @jyao1 in #109
• specifications: Explicitly call out the unbinding flows by @sameo in #110
• specification: Expand the CoVE-IO arch diagram with another TSM by @sameo in #111
• riscv-ap-tee-io: Use the RVI specification repo template by @sameo in #116
• doc-resources update by @sameo in #117
• specification: Glossary fixes by @sameo in #115
• Complete mitigation section by @jyao1 in #112
• Makefile: Use the kroki service to generate diagrams by @sameo in #118
• specification: Define the interface unbinding flows by @sameo in #113
• specification: Clean up and fix contributors section by @sameo in #120
• specification: Define the device disconnection flow by @sameo in #119
• specification: Clear all ATC cache when unbinding a TDI by @sameo in #121
• CoVE-IO v0.2.0 by @sameo in #122

New Contributors

• @kbroch-rivosinc made their first contribution in #49
• @steven-bellock made their first contribution in #50

Full Changelog: v0.1.0...v0.2.0

CoVE-IO v0.1.0

CoVE-IO v0.1.0

First complete CoVE-IO specification draft.

What's Changed

• Fix build failure by @rpsene in #2
• specification: Initial commit by @sameo in #1
• Layout and Introduction Section by @sameo in #6
• Add MSI to the charter based upon meeting feedback. by @jyao1 in #8
• Initial requirements definitions by @sameo in #7
• Add SPDM requirement by @jyao1 in #13
• Add key refresh requirement. by @jyao1 in #14
• specification: Security model by @sameo in #15
• specification: Add a generated PDF by @sameo in #17
• specification: CoVE-IO theory of operations by @sameo in #18
• Clarify TSM measurement by @jyao1 in #27
• Clarify switch programming. by @jyao1 in #26
• specification: Order sections by @sameo in #28
• specification: IDE link setup by @sameo in #25
• specification: Device interface assignment flow: TDI acceptation by @sameo in #29
• specification: Formatting fixes by @sameo in #34
• Add initial attestation section. by @jyao1 in #36
• specification: Add Ravi and Ved to the list of contributors by @sameo in #37
• specification: Rename the Device Initialization section by @sameo in #38
• Change online to remote according to feedback. by @jyao1 in #40
• specification: Device interface assignment by @sameo in #31
• Add device runtime update and reattestation. by @jyao1 in #41
• specifications: Add a device lifecycle sub section by @sameo in #42
• [specification] PDF update by @sameo in #43
• specification: Document the CoVE-IO ABI by @sameo in #44
• specification: Architecture overview by @sameo in #45
• clarify format of certificate chain and measurement by @jyao1 in #46
• specification: PDF Update by @sameo in #47

New Contributors

• @rpsene made their first contribution in #2
• @sameo made their first contribution in #1
• @jyao1 made their first contribution in #8

Full Changelog: https://github.com/riscv-non-isa/riscv-ap-tee-io/commits/v0.1.0