Demystifying the Secure Enclave Processor
LytVKz
LytVKz
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
SEP Memory Protection Bootstrap<br />
• Ping acknowledgement of<br />
BootTZ0<br />
• Exit out of initial message<br />
loop.<br />
• Checks whe<strong>the</strong>r TZ0 and TZ1<br />
have been locked by reading<br />
<strong>the</strong> registers at<br />
0x2_0000_09xx (shared<br />
between SEP and AP).<br />
▫ If not, spin.<br />
• Map TZ0 region to physical<br />
address 0x8000_0000. Page<br />
tables in ROM already mapped<br />
that PA to VA 0x1018_0000.<br />
Stage 2<br />
Stage 3<br />
Acknowledge Ping<br />
Acknowledge<br />
BootTZ0<br />
Map in TZ0<br />
Setup Memory<br />
Encryption<br />
Begin Stage 3<br />
Configure TZ0 and<br />
TZ1<br />
Send Ping<br />
Send BootTZ0<br />
Send Ping<br />
iBoot<br />
Kernel