tree e6c203285c74766377ba0c7c68d2258eb4eb62fc
parent 9d6a81766b197299794b6e15499ad6f3de4e0914
author Manish V Badarkhe <Manish.Badarkhe@arm.com> 1680526259 +0100
committer Manish V Badarkhe <Manish.Badarkhe@arm.com> 1681908892 +0100

docs(threat-model): add a notes related to the Measured Boot

TF-A currently does not have any TPM2 driver for extending
measurements into a discrete TPM chip. In TPM-based attestation
scheme, measurements are just stored into a TCG-compatible event
log buffer in secure memory.

In light of the fact that Event Log measurements are taken by BL1 and
BL2, we need to trust these components to store genuine measurements,
and the Generic Threat Model always mitigates against attacks on these
components, therefore, there is no explicit document for the Measured
Boot threat model at this time is needed.

Change-Id: I41b037b2f5956d327b53cd834345e5aefdcfb5ef
Signed-off-by: Manish V Badarkhe <Manish.Badarkhe@arm.com>