BaselineWatch
26 requirements
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

NIST platform security: roots of trust, firmware and secure enclaves IR 8320

26 requirements · published 2022-05-04
Changes in this version
All1 Introduction2 Hardware Platform Security Overview3 Platform Integrity Verification4 Software Runtime Protection Mechanisms5 Data Protection and Confidential Computing6 Remote Attestation Services7 Cloud Use Case Scenarios Leveraging Hardware-Enabled Security8 Next Steps
RefTitleText
3 Platform Integrity Verification A key concept of trusted computing is verification of the underlying platform’s integrity. Platform integrity is typically comprised of two parts: • Cryptographic measurement of software and firmware. In this report, the term measurement r
3.1
in 3
 Hardware Security Module (HSM) A hardware security module (HSM) is “a physical computing device that safeguards and manages cryptographic keys and provides cryptographic processing” [5] . Cryptographic operations such as encryption, decryption, and signature generation/v
3.2
in 3
 The Chain of Trust (CoT) The chain of trust (CoT) is a method for maintaining valid trust boundaries by applying a principle of transitive trust. Each firmware module in the system boot process is required to measure the next module before transitioning control. On
3.3
in 3
 Supply Chain Protection Organizations are increasingly at risk of supply chain compromise, whether intentional or unintentional. Managing cyber supply chain risks requires, in part, ensuring the integrity, quality, and resilience of the supply chain, its products,

4 of 26.