The AMD Platform Security Processor ( PSP ), officially known as AMD Secure Technology , is a trusted execution environment subsystem incorporated since about 2013 into AMD microprocessors. According to an AMD developer's guide, the subsystem is "responsible for creating, monitoring and maintaining the security environment" and "its functions include managing the boot process, initializing various security related mechanisms, and monitoring the system for any suspicious activity or events and implementing an appropriate response". Critics worry it can be used as a backdoor and is a security concern. AMD has denied requests to open source the code that runs on the PSP.
7-633: The PSP itself represents an ARM core ( ARM Cortex-A5 ) with the TrustZone extension which is inserted into the main CPU die as a coprocessor . The PSP contains on-chip firmware which is responsible for verifying the SPI ROM and loading off-chip firmware from it. In 2019, a Berlin-based security group discovered the off-chip firmware in ordinary UEFI image files (the code that boots up the operating system), which meant that it could be easily analyzed. By using
14-496: A few hand-written Python -based tools, they found that the off-chip firmware from the SPI ROM contained an application resembling an entire micro operating system. Investigation of a Lenovo ThinkPad A285 notebook's motherboard flash chip (stores UEFI firmware) revealed that the PSP core itself (as a device) is run before the main CPU and that its firmware bootstrapping process starts just before basic UEFI gets loaded. They discovered that
21-452: A random number generator for the RDRAND instruction and provides TPM services. The PSP is an integral part of the boot process, without which the x86 cores would never be activated. In September 2017, Google security researcher Cfir Cohen reported a vulnerability to AMD of a PSP subsystem that could allow an attacker access to passwords, certificates, and other sensitive information; a patch
28-478: A technical standpoint was upheld by independent security experts who reviewed the disclosures, although the high risks claimed by CTS Labs were dismissed, leading to claims that the flaws were published for the purpose of stock manipulation . ARM core This is a list of central processing units based on the ARM family of instruction sets designed by ARM Ltd. and third parties, sorted by version of
35-500: The ARM instruction set, release and name. In 2005, ARM provided a summary of the numerous vendors who implement ARM cores in their design. Keil also provides a somewhat newer summary of vendors of ARM based processors. ARM further provides a chart displaying an overview of the ARM processor lineup with performance and functionality versus capabilities for the more recent ARM core families. opt MPU with 32+32 regions These cores implement
42-405: The firmware is run inside in the same system's memory space that user's applications do with unrestricted access to it (including MMIO ) raising concerns over data safety. Because PSP is the chip that decides whenever the x86 cores will run or not, it is used to implement hardware downcoring, specific cores on the system can be made permanently inaccessible during manufacturing. The PSP also provides
49-508: Was rumored to become available to vendors in December 2017. In March 2018, an Israeli IT security company reported a handful of allegedly serious flaws related to the PSP in AMD's Zen architecture CPUs ( EPYC , Ryzen , Ryzen Pro, and Ryzen Mobile) that could allow malware to run and gain access to sensitive information. AMD announced firmware updates to handle these flaws. Their validity from
#649350