Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Member review updates #35

Merged
merged 5 commits into from
Mar 2, 2024
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions src/server_soc_requirements.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -1266,6 +1266,24 @@ data centers and enterprises.
[%header, cols="5,25"]
|===
| ID# ^| Requirement
| SEC_005 a| The Server SoC MUST comply with the requirements and guidelines
detailed in Reference Model, Ecosystem Security Objectives, and
the Cryptography sections of the RISC-V Security Model cite:[SEC].
ved-rivos marked this conversation as resolved.
Show resolved Hide resolved
The Server SoC is classified as a complex security system for the
purposes of SR_ROT_001 and SR_ATT_002.

| SEC_006 a| The Server SoC MUST support the Generic System Without Supervisor
Domains use case detailed in the RISC-V Security Model. The
building blocks used to implement this use case MUST comply with
the requirements specified in the RISC-V Security Building Blocks
section of the RISC-V Security Model specification.
ved-rivos marked this conversation as resolved.
Show resolved Hide resolved

| SEC_007 a| The Server SoC MAY support the Confidential Computing on RISC-V
(CoVE) use detailed in the RISC-V Security Model. The building
blocks used to implement this use case MUST comply with the
requirements specified in the RISC-V Security Building Blocks
section of the RISC-V Security Model specification.

| SEC_010 | The PCIe root ports within the SoC SHOULD support PCIe Integrity and
Data Encryption (IDE) capability.
2+| _The IDE extension adds optional capabilities to perform hardware encryption
Expand Down
Loading