Skip to content

Commit

Permalink
Dev/fdamato/update pl0 readme (#1576)
Browse files Browse the repository at this point in the history
README to include updated number of PL0 contexts
  • Loading branch information
fdamato authored Jun 18, 2024
1 parent 1bf0978 commit 15361ef
Showing 1 changed file with 7 additions and 2 deletions.
9 changes: 7 additions & 2 deletions runtime/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -819,13 +819,18 @@ by repeatedly calling the aforementioned DPE commands with certain flags set.
To prevent this, we establish active context limits for each PAUSER
privilege level:

* PL0 - 8 active contexts
* PL0 - 16 active contexts
* PL1 - 16 active contexts

If a DPE command were to activate a new context such that the total number of
active contexts in a privilege level is above its active context limit, the
InvokeDpe command should fail.

At boot Caliptra Runtime FW consumes part of the PL0 active contexts (initially 16) to DeriveContext for:
- RTFW Journey (RTFJ) Measurement (1)
- Mailbox Valid Pauser digest (MBVP) (1)
- ROM Stashed Measurements (max 8)

Further, it is not allowed for PL1 to call DeriveContext with the intent to change locality to PL0's locality; this would increase the number
of active contexts in PL0's locality, and hence allow PL1 to DOS PL0.

Expand Down Expand Up @@ -967,4 +972,4 @@ The DPE `GET_CERTIFICATE_CHAIN` command shall return the following certificates:
| | VendorInfo | Locality of the caller (analog for PAUSER)

\*MultiTcbInfo contains one TcbInfo for each TCI Node in the path from the
current TCI Node to the root. Max of 24.
current TCI Node to the root. Max of 32.

0 comments on commit 15361ef

Please sign in to comment.