@@ -37,12 +37,19 @@ The following diagram is based on knowledge from various sources, including the
3737Security researchers have analyzed the ME and divided hardware variants into 3
3838generations[ ^ 4 ] thus far, each with their own multiple firmware versions,
3939including security patch releases[ ^ 5 ] [ ^ 6 ] .
40- One core aspect in security research has been Boot Guard[ ^ 7 ] [ ^ 8 ] .
40+ One core aspect in security research has been Boot Guard[ ^ 7 ] [ ^ 8 ] , which had
41+ been introduced with Haswell, Intel's 4th generation Core series platforms[ ^ 10 ] ,
42+ and discussed in the coreboot community[ ^ 11 ] .
4143
4244Note that the ME generations roughly correspond with the overall platform, in
4345that ranges of Intel platforms are expected to carry a certain ME hardware
4446generation and specific platforms a certain firmware version range.
4547
48+ ## Processor names
49+
50+ Intel publicly documents how to interpret procesor names[ ^ 12 ] and what their
51+ suffixes mean[ ^ 13 ] .
52+
4653## Abbreviations
4754
4855| abbr. | expansion |
@@ -52,6 +59,7 @@ generation and specific platforms a certain firmware version range.
5259| CSME | Converged Security and Manageability Engine |
5360| DAL | Dynamic Application Loader |
5461| FIT | Firmware Interface Table |
62+ | FPT | Firmware Partition Table |
5563| HAP | High-Assurance Platform |
5664| {I,M,P}CH | {I/O,Memory,Platform} Controller Hub[ ^ 9 ] |
5765| IFD | Intel Flash Descriptor |
@@ -60,6 +68,14 @@ generation and specific platforms a certain firmware version range.
6068| TXE | Trusted Execution Engine |
6169| TXT | Trusted Execution Technology |
6270
71+ ### Ambiguities
72+
73+ There are colliding acronyms, even within this domain.
74+ The following abbreviations have a second meaning:
75+
76+ - FIT: _ Flash Image Tool_ (sometimes also called _ FITC_ )
77+ - FPT: _ Flash Programming Tool_
78+
6379[ ^ 1 ] : < https://www.amplicon-usa.com/actions/viewDoc.cfm?doc=iAMT-white-paper.pdf >
6480[ ^ 2 ] : < https://edc.intel.com/content/www/us/en/design/ipla/software-development-platforms/client/platforms/alder-lake-desktop/12th-generation-intel-core-processors-datasheet-volume-1-of-2/010/boot-guard-technology/ >
6581[ ^ 3 ] : < https://i.blackhat.com/USA-19/Wednesday/us-19-Hasarfaty-Behind-The-Scenes-Of-Intel-Security-And-Manageability-Engine.pdf >
@@ -69,3 +85,7 @@ generation and specific platforms a certain firmware version range.
6985[ ^ 7 ] : < https://prohoster.info/en/blog/administrirovanie/doverennaya-zagruzka-shryodingera-intel-boot-guard >
7086[ ^ 8 ] : < https://github.com/flothrone/bootguard >
7187[ ^ 9 ] : < https://en.wikipedia.org/wiki/Intel_Hub_Architecture >
88+ [ ^ 10 ] : < https://web.archive.org/web/20201129154607/https://www.intel.com/content/dam/www/public/us/en/documents/product-briefs/4th-gen-core-family-mobile-brief.pdf >
89+ [ ^ 11 ] : < https://web.archive.org/web/20230322090345/https://patrick.georgi.family/2015/02/17/intel-boot-guard/ >
90+ [ ^ 12 ] : < https://www.intel.com/content/www/us/en/processors/processor-numbers.html >
91+ [ ^ 13 ] : < https://www.intel.com/content/www/us/en/support/articles/000058567/processors/intel-core-processors.html >
0 commit comments