Securely modifying access to a debug port
In some aspects, the techniques described herein relate to a device including: a debug port; a trusted execution environment (TEE), the TEE storing a public key; and a controller, the controller configured to: receive a command to access the debug port, the command including a signature generated using a private key corresponding to the public key; provide the command to the TEE, wherein the TEE validates the command by validating the signature using the public key to obtain a validation result; and modify access to the debug port based on the validation result.
1. A device comprising:
a debug port;
a trusted execution environment (TEE), the TEE storing a public key; and
a controller, the controller configured to:
receive a command to access the debug port, the command including a signature generated using a private key corresponding to the public key;
provide the command to the TEE, wherein the TEE validates the command by validating the signature using the public key to obtain a validation result; and
modify access to the debug port based on the validation result.
2. The device of claim 1 , wherein validating the command further includes validating one of a monotonic counter or nonce value included in the command.
3. The device of claim 1 , wherein the public key and the private key comprise an Elliptic Curve Digital Signature Algorithm (ECDSA) key pair.
4. The device of claim 1 , wherein the public key is written to the TEE during manufacturing of the device.
5. The device of claim 1 , wherein the command to access a debug port comprises one of a command to enable a debug port or a command to disable a debug port.
6. The device of claim 5 , wherein the command further includes a set of access permissions for accessing the debug port.
7. The device of claim 6 , wherein the TEE further includes a register and modifying access to the debug port comprises updating the register based on the command.
8. The device of claim 7 , wherein updating a register based on the command comprises updating bits of the register based on the set of access permissions.
9. The device of claim 1 , wherein the controller is further configured to replace the public key with a new public key included in a digital certificate signed using the private key.
10. A method comprising:
receiving, by a controller of a computing device, a command to access a debug port, the command including a signature generated using a private key;
validating, via a trusted execution environment (TEE), the command by validating the signature using a public key stored in the TEE to obtain a validation result; and
modifying, by the controller, access to the debug port based on the validation result.
11. The method of claim 10 , wherein validating the command further includes validating one of a monotonic counter or nonce value included in the command.
12. The method of claim 10 , wherein the public key and the private key comprise an Elliptic Curve Digital Signature Algorithm (ECDSA) key pair.
13. The method of claim 10 , wherein the public key is written to the TEE during manufacturing of the computing device.
14. The method of claim 10 , wherein the command to access a debug port comprises one of a command to enable a debug port or a command to disable a debug port.
15. The method of claim 14 , wherein the command further includes a set of access permissions for accessing the debug port.
16. The method of claim 15 , wherein modifying access to the debug port comprises updating a register based on the command.
17. The method of claim 16 , wherein updating a register based on the command comprises updating bits of the register based on the set of access permissions.
18. The method of claim 10 , further comprising replacing the public key with a new public key included in a digital certificate signed using the private key.
19. A non-transitory computer-readable storage medium for tangibly storing computer program instructions capable of being executed by a computer processor, the computer program instructions defining steps of:
receiving, by a controller of a computing device, a command to access a debug port, the command including a signature generated using a private key;
validating, via a trusted execution environment (TEE), the command by validating the signature using a public key stored in the TEE to obtain a validation result; and
modifying, by the controller, access to the debug port based on the validation result.
20. The non-transitory computer-readable storage medium of claim 19 , wherein the command further includes a set of access permissions for accessing the debug port and modifying access to the debug port comprises updating a register based on the command, wherein bits of the register are updated based on the set of access permissions.