Networking Device Attestation and CoRIM-based Reference Measurement Sharing

BlueField-3 Measurements

The measurement specification for all the indexes listed in the table below is: 0x01 (DMTF).

The CoRIM files include the same measurement block definition encoded in base64 format, as outlined below. If the table indicates "Yes" under the "Part of CoRIM" column, the index is included in the CoRIM file; otherwise, it is excluded.

Version 1.0.0

Index

Measurement

Value

Description

What is measured?

Part of CoRIM

1

DMTFSpecMeasurementValueType

0x83

Raw bitstream, FW Config

Interpret as Semver2.0 ((https://semver.org/).
Byte 3: Major Version
Byte 2-1: Minor Version
Byte 0: is patch

Yes: All CoMID

DMTFSpecMeasurementValueSize

4

4-byte unsigned Integer, little endian

2


DMTFSpecMeasurementValueType

0x01

Hash, mutable FW

Hash of PSC Firmware


Yes: SoC CoMID

DMTFSpecMeasurementValueSize

64

SHA2-512 hash

3

DMTFSpecMeasurementValueType

0x01

Hash, mutable FW

Hash of NIC Firmware

Yes: NIC CoMID

DMTFSpecMeasurementValueSize

64

SHA2-512 hash

4

DMTFSpecMeasurementValueType

0x01

Hash, mutable FW

Hash of ARM Firmware

Yes: SoC CoMID

DMTFSpecMeasurementValueSize

64

SHA2-512 hash

5

DMTFSpecMeasurementValueType

0x02

Hash, HW configuration

Hash of instance-based NIC rollback counters

No

DMTFSpecMeasurementValueSize

64

SHA2-512 hash

6

DMTFSpecMeasurementValueType

0x02

Hash, HW configuration

Hash of instance-based ARM rollback counters

No

DMTFSpecMeasurementValueSize

64

SHA2-512 hash

7


DMTFSpecMeasurementValueType

0x02

Hash, HW configuration

Hash of instance-based NIC security configuration

No

DMTFSpecMeasurementValueSize

64

SHA2-512 hash

8


DMTFSpecMeasurementValueType

0x02

Hash, HW configuration

Hash of instance-based ARM security configuration

No

DMTFSpecMeasurementValueSize

64

SHA2-512 hash

9

DMTFSpecMeasurementValueType

0x02

Hash, HW configuration

Hash of instance-based PSC first mutable code security configuration

No

DMTFSpecMeasurementValueSize

64

SHA2-512 hash

10

DMTFSpecMeasurementValueType

0x02

Hash, HW configuration

Hash of instance-based PSC runtime firmware security configuration

No

DMTFSpecMeasurementValueSize

64

SHA2-512 hash

11

DMTFSpecMeasurementValueType

0x81

Raw bitstream, Device Identifier

Device Identifier (DID, VID, SVID, SID) as defined by PCISIG and a vendor defined byte.
Byte 1:2 - Vendor ID
Byte 3:4 - Device ID
Byte 5:6 - Subsystem Vendor ID
Byte 7:8 - Subsystem ID
Byte 9 - Vendor defined byte

All multi-byte fields are little endian (uint16_t)

Zero padded

Yes (also in CoMID tag-id);
All CoMIDs


DMTFSpecMeasurementValueSize

50

Raw bitstream



Last updated: