saymrwulf/xous-core
1
0
Fork 0
mirror of https://github.com/saymrwulf/xous-core.git synced 2026-11-15 08:30:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

zerorize backup registers & fix aoram range in zeroize

Browse source 
backup registers are a high priority target on zeroizing
because it would contain the ephemeral unlock secret, e.g.
PIN code.
This commit is contained in:
bunnie 2025-12-05 00:59:59 +08:00
parent 3293578d3e
commit 1dbb65cc97
No known key found for this signature in database
1 changed files with 16 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
libs/bao1x-hal/src/sigcheck.rs
View file

@ -397,6 +397,22 @@ pub fn die_no_std() -> ! {
core::arch::asm! (
// TODO: any SCE other security-sensitive registers to be zeorized?
// - bureg zeroize - this is priority because it has the ephemeral key
"li x1, 0x40065000",
"li x2, 0x40065020",
"30:",
"sw x0, 0(x1)",
"addi x1, x1, 4",
"bne x1, x2, 30b",
// - AORAM_MEM zeroize - also priority because it can have ephemeral secrets
"li x1, 0x50300000",
"li x2, 0x50304000",
"16:",
"sw x0, 0(x1)",
"addi x1, x1, 4",
"bne x1, x2, 16b",
// key regions
"li x1, 0x40020000",
"li x2, 0x40022700",
@ -434,14 +450,6 @@ pub fn die_no_std() -> ! {
"addi x1, x1, 4",
"bne x1, x2, 13b",
// - AO_MEM zeroize
"li x1, 0x40060000",
"li x2, 0x40070000",
"16:",
"sw x0, 0(x1)",
"addi x1, x1, 4",
"bne x1, x2, 16b",
// zeroize main RAM
"li x1, 0x61000000",
"li x2, 0x61200000",