{"action":"created","issue":{"url":"https://api.github.com/repos/OP-TEE/optee_os/issues/396","labels_url":"https://api.github.com/repos/OP-TEE/optee_os/issues/396/labels{/name}","comments_url":"https://api.github.com/repos/OP-TEE/optee_os/issues/396/comments","events_url":"https://api.github.com/repos/OP-TEE/optee_os/issues/396/events","html_url":"https://github.com/OP-TEE/optee_os/pull/396","id":94937757,"number":396,"title":"Request for comments: Signed ta","user":{"login":"jenswi-linaro","id":6150306,"avatar_url":"https://avatars.githubusercontent.com/u/6150306?v=3","gravatar_id":"","url":"https://api.github.com/users/jenswi-linaro","html_url":"https://github.com/jenswi-linaro","followers_url":"https://api.github.com/users/jenswi-linaro/followers","following_url":"https://api.github.com/users/jenswi-linaro/following{/other_user}","gists_url":"https://api.github.com/users/jenswi-linaro/gists{/gist_id}","starred_url":"https://api.github.com/users/jenswi-linaro/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jenswi-linaro/subscriptions","organizations_url":"https://api.github.com/users/jenswi-linaro/orgs","repos_url":"https://api.github.com/users/jenswi-linaro/repos","events_url":"https://api.github.com/users/jenswi-linaro/events{/privacy}","received_events_url":"https://api.github.com/users/jenswi-linaro/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-07-14T12:41:34Z","updated_at":"2015-08-25T05:27:04Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/OP-TEE/optee_os/pulls/396","html_url":"https://github.com/OP-TEE/optee_os/pull/396","diff_url":"https://github.com/OP-TEE/optee_os/pull/396.diff","patch_url":"https://github.com/OP-TEE/optee_os/pull/396.patch"},"body":"This is a PR with the result of the signed TA investigation, it's not intended to be merged as it looks today but rather to be used to decide which direction we should take on this. This PR replaces #302. \r\n\r\nTo test this please use https://github.com/jenswi-linaro/optee_test/tree/signed_ta for optee_test\r\n\r\nThe first patch is the old \"TA as ELF\" which includes the first proposal for signing TAs.\r\nThe second patch replaces the sign header with the complete ELF copied into an ASN.1 structure as defined by RFC4108.\r\n\r\nThere's some rough edges in these patches, but it should be good enough to decide if we should continue in this track or look for other options. "},"comment":{"url":"https://api.github.com/repos/OP-TEE/optee_os/issues/comments/134480406","html_url":"https://github.com/OP-TEE/optee_os/pull/396#issuecomment-134480406","issue_url":"https://api.github.com/repos/OP-TEE/optee_os/issues/396","id":134480406,"user":{"login":"jenswi-linaro","id":6150306,"avatar_url":"https://avatars.githubusercontent.com/u/6150306?v=3","gravatar_id":"","url":"https://api.github.com/users/jenswi-linaro","html_url":"https://github.com/jenswi-linaro","followers_url":"https://api.github.com/users/jenswi-linaro/followers","following_url":"https://api.github.com/users/jenswi-linaro/following{/other_user}","gists_url":"https://api.github.com/users/jenswi-linaro/gists{/gist_id}","starred_url":"https://api.github.com/users/jenswi-linaro/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jenswi-linaro/subscriptions","organizations_url":"https://api.github.com/users/jenswi-linaro/orgs","repos_url":"https://api.github.com/users/jenswi-linaro/repos","events_url":"https://api.github.com/users/jenswi-linaro/events{/privacy}","received_events_url":"https://api.github.com/users/jenswi-linaro/received_events","type":"User","site_admin":false},"created_at":"2015-08-25T05:27:04Z","updated_at":"2015-08-25T05:27:04Z","body":"Yes, all the .debug_* sections are good candidates. In principle it should be enough to only keep what's in the program headers.\r\n\r\nNote that even TA binary is larger it shouldn't use significantly more secure memory once it's loaded.\r\n\r\n/Jens"}}