ARMv8-M安全扩展：开发工具需求规格

需积分: 9 174 浏览量更新于2024-07-17 收藏 224KB PDF 举报

ARMv8-M Security Extensions: Requirements on Development Tools (ECM0359818) 是一份技术规格文档，针对ARMv8-M架构的安全扩展特性，着重于开发工具的要求。这份文档详细描述了如何设计和实现安全代码的过程，以确保遵循ARMv8-M架构中的安全增强功能，包括ACLE（Access Control for Exception Level Extension）、IBIC（Instruction Boundary Integrity Control）和MSE（Memory Safety Extensions）等。文档强调了在开发工具链（如编译器、链接器）中集成这些新特性的必要性，要求工具链必须支持ARMv8-M的安全特性，以确保生成的代码具备高度安全性。开发人员需要使用特定的ARMv8-M安全扩展工具链，以充分利用这些技术，如ACLE来控制不同权限级别间的代码访问，IBIC用于保护指令边界，防止非法访问，而MSE则提供内存安全保护，防止缓冲区溢出和数据泄漏。该文档的1.0版本发布日期为2015年10月23日，适用于所有使用ARMv8-M的设备和开发环境。对于最新的规格更新或发现文档中的错误，读者应访问ARM信息中心（http://infocenter.arm.com/），并查找"Developer Guides and Articles"下的"Software Development"部分。如果持有文档已经超过一年，应确保查阅最新版本以获取最准确的信息。若发现文档中的问题，用户需通过电子邮件 arm.dot@arm.com 报告缺陷。这份文档属于非保密性质，但其内容受版权和其他相关权利保护，任何对文档内信息的实践或实施都需要遵循相应的授权条款。 ECM0359818 ARMv8-M Security Extensions: Requirements on Development Tools 提供了开发人员在构建符合ARMv8-M安全标准的应用程序时所需遵循的关键指南，确保了软件的可靠性和安全性。开发者在使用此规范时，必须注意工具链的兼容性，以实现高效、安全的代码开发流程。

Document Number: ARM-ECM-0359818 Non-Confidential

Version: 1.0 Page 6 of 30

processor to separate secure and non-secure memory regions, similar to the SAU.

MPU

Memory Protection Unit. Controls the permissions that privileged and unprivileged

execution modes have, memory region by memory region.

NSC region

Non-Secure Callable memory region. Secure memory that is callable by code

executing in non-secure state.

SG Secure Gateway Instruction. Switches to secure state.

TT Test Target Instruction. Used to inspect MPU, SAU, and IDAU configurations.

Entry function A function in secure memory that can be called from secure and non-secure state.

Non-secure function call A function call in secure memory that switches to non-secure state.

Secure gateway Occurrence of an SG instruction in a NSC region.

Secure gateway veneer A code sequence that provides a secure gateway to an entry function.

LSB Least Significant Bit.

A32 Instruction set previously known as ARM

T32 Instruction set previously known as Thumb

2 SCOPE

2.1 Scope

ARMv8-M Security Extensions is in some contexts known as Cortex

-M Security Extensions and is referred to as

CMSE throughout this document.

This document states the requirements that development tools must satisfy in order to develop software in C that

uses the feature defined by CMSE. This document describes a machine-level standard that can be mapped

directly by functions written in C and assembly language.

This document also describes the support for the new

TT instruction introduced in ARMv8-M. This instruction is

not part of CMSE, but is closely related.

Some of the requirements defined by this document will be included in future [ACLE] and [BSABI] documents.

2.2 Conventions

This document consists of informative text and requirements.

0 Requirements are numbered in the left margin and highlighted as shown here.

A permanent unique reference consists of the document number, document version, and requirement number.

3 OVERVIEW OF CMSE

3.1 Introduction

CMSE is an optional part of the ARMv8-M baseline and mainline architecture defined by [ARMV8M]. CMSE is

designed to combine code from multiple vendors without requiring trust between them. CMSE gives vendors the

ability to protect their software assets (code and data) by restricting access to the memory where their software

assets reside, except for a set of explicitly exported entry points that are defined by the vendor. This supports the

creation of a trusted software stack that provides features such as secure remote firmware updates, while

剩余29页未读，继续阅读

boazheng

粉丝: 3619
资源: 10

ARMv8-M安全扩展：开发工具需求规格

arm+linux开发平台软件需求规格说明书.pdf

arm+linux开发平台软件需求规格说明书.docx

accessibility-developer-tools-extension

ECM.rar_ecm_ecm gui_ecm.gui_emc

ECM.rar_ecm_ecm种类和针脚_ecm算法_哈弗ECM丢失

Packt.Alfresco.Share_.Mar_.2012.pdf

ECM.rar_ecm_ecu

ecm.rar_ecm_evolving clustering

VECM.rar_ecm模型_vecm_模型修正_误差修正_误差修正模型

ECM0495013A_gic_stream_protocol.pdf

最新资源