Skip to content

Commit edf6c2a

Browse files
committed
docs: add more abbreviations, notes on processors and Boot Guard
Signed-off-by: Daniel Maslowski <[email protected]>
1 parent 3407dd9 commit edf6c2a

File tree

1 file changed

+21
-1
lines changed

1 file changed

+21
-1
lines changed

docs/platforms.md

Lines changed: 21 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,12 +37,19 @@ The following diagram is based on knowledge from various sources, including the
3737
Security researchers have analyzed the ME and divided hardware variants into 3
3838
generations[^4] thus far, each with their own multiple firmware versions,
3939
including security patch releases[^5][^6].
40-
One core aspect in security research has been Boot Guard[^7][^8].
40+
One core aspect in security research has been Boot Guard[^7][^8], which had
41+
been introduced with Haswell, Intel's 4th generation Core series platforms[^10],
42+
and discussed in the coreboot community[^11].
4143

4244
Note that the ME generations roughly correspond with the overall platform, in
4345
that ranges of Intel platforms are expected to carry a certain ME hardware
4446
generation and specific platforms a certain firmware version range.
4547

48+
## Processor names
49+
50+
Intel publicly documents how to interpret procesor names[^12] and what their
51+
suffixes mean[^13].
52+
4653
## Abbreviations
4754

4855
| abbr. | expansion |
@@ -52,6 +59,7 @@ generation and specific platforms a certain firmware version range.
5259
| CSME | Converged Security and Manageability Engine |
5360
| DAL | Dynamic Application Loader |
5461
| FIT | Firmware Interface Table |
62+
| FPT | Firmware Partition Table |
5563
| HAP | High-Assurance Platform |
5664
| {I,M,P}CH | {I/O,Memory,Platform} Controller Hub[^9] |
5765
| IFD | Intel Flash Descriptor |
@@ -60,6 +68,14 @@ generation and specific platforms a certain firmware version range.
6068
| TXE | Trusted Execution Engine |
6169
| TXT | Trusted Execution Technology |
6270

71+
### Ambiguities
72+
73+
There are colliding acronyms, even within this domain.
74+
The following abbreviations have a second meaning:
75+
76+
- FIT: _Flash Image Tool_ (sometimes also called _FITC_)
77+
- FPT: _Flash Programming Tool_
78+
6379
[^1]: <https://www.amplicon-usa.com/actions/viewDoc.cfm?doc=iAMT-white-paper.pdf>
6480
[^2]: <https://edc.intel.com/content/www/us/en/design/ipla/software-development-platforms/client/platforms/alder-lake-desktop/12th-generation-intel-core-processors-datasheet-volume-1-of-2/010/boot-guard-technology/>
6581
[^3]: <https://i.blackhat.com/USA-19/Wednesday/us-19-Hasarfaty-Behind-The-Scenes-Of-Intel-Security-And-Manageability-Engine.pdf>
@@ -69,3 +85,7 @@ generation and specific platforms a certain firmware version range.
6985
[^7]: <https://prohoster.info/en/blog/administrirovanie/doverennaya-zagruzka-shryodingera-intel-boot-guard>
7086
[^8]: <https://github.com/flothrone/bootguard>
7187
[^9]: <https://en.wikipedia.org/wiki/Intel_Hub_Architecture>
88+
[^10]: <https://web.archive.org/web/20201129154607/https://www.intel.com/content/dam/www/public/us/en/documents/product-briefs/4th-gen-core-family-mobile-brief.pdf>
89+
[^11]: <https://web.archive.org/web/20230322090345/https://patrick.georgi.family/2015/02/17/intel-boot-guard/>
90+
[^12]: <https://www.intel.com/content/www/us/en/processors/processor-numbers.html>
91+
[^13]: <https://www.intel.com/content/www/us/en/support/articles/000058567/processors/intel-core-processors.html>

0 commit comments

Comments
 (0)