Intel® Dynamic Application Loader (Intel® DAL) Developer Guide

Developer Guide

  • 10/27/2020
  • Public Content
Contents

Applet Encryption

Intel® Dynamic Application Loader (Intel® DAL) provides OEMs with the ability to encrypt the applet's bytecode in order to protect any intellectual property (IP) that the applet may contain, e.g., DRM algorithms and parameters.
Supported from API level 8, currently only on platforms running Intel® Trusted Execution Engine (Intel® TXE) 3.0 firmware. 

Provisioning

The OEM generates an RSA key pair with modulus size 2048/3072/4096 bits, known as the OEM Master Key (OMK). The private key component is provisioned by the OEM during manufacturing using the TEE Management library; the OEM’s manufacturing facility is assumed to be a trusted environment, and the
TEE_ProvisionOemMasterKey
 command is enabled only if the platform is in pre-End Of Manufacturing (pre-EOM) state. The OMK is used to encrypt the symmetric applet encryption key. If the
TEE_ProvisionOemMasterKey
 command is invoked more than once, the key is overwritten.

Encryption Key Setup

The OEM generates a symmetric 256-bit encryption key, the Intel DAL Encryption Key (DEK), that is used to encrypt the applet bytecode. In order to provide OEMs with the ability to encrypt different applets with different keys, multiple DEKs are supported. The maximum number of keys is five; each key has a key identifier (ID) between one and five. 
 
The TEE Management library is used to set the DEK, which was encrypted by the OMK, in Intel DAL firmware. The encrypt-then-sign approach is utilized to ensure that the OMK is used only to decrypt authentic and valid payloads. The
TEE_SetTAEncryptionKey
 command sends Intel DAL the DEK encrypted by the OMK public component using standard RSA encryption and then signed by the Security Domain. The signature creates a dependency on Security Domain (SD) installation on the platform; therefore a Security Domain must be installed
before
the encryption key is set up.
To mitigate possible replay attacks when a valid but older Encryption Key setup payload is used, an initial counter value is provisioned with the OMK. Each encryption key setup command contains a counter that is processed as follows:
if (command.counter < current counter)
     reject command
else if (command.counter > current counter)
     current counter = command.counter
     process command
The maximum supported number of successful DEK setup invocations is five per boot.  

Encrypted Trusted Application Generation

The applet’s Admin Command Package (ACP) contains a byte property,
ta_encrypted
, that indicates that the package contains JEFF bytecode that is encrypted, and specifies the DEK that was used to encrypt it:
  • 0: Default value. Means that the JEFF bytecode is not encrypted.
  • 1-5: The ID of the DEK with which the JEFF bytecode is encrypted.
Following is the flow for generating an encrypted applet:
  1. The Pack Tool generates the applet ACP with the
    ta_encrypted
     property set to
    0
      (not encrypted).
  2. The Pack Tool signs on the ACP with the Intel debug key.
  3. The OEM does the following:
    1. Encrypts the bytecode in place using the DEK key and IV.
    2. Appends the MAC and IV to the ACP.
    3. Assigns the value of the
      ta_encrypted
       property to the key ID of the DEK.
    4. Calculates the hash of the new applet and replaces the hash in the ACP.
    5. Signs the ACP in the same way as a regular ACP (with the OEM DAL signing key).
For debugging purposes, the Pack Tool may be used to create an encrypted applet with a debug DEK. See the Pack Tool pack command arguments for more details. 

Product and Performance Information

1

Intel's compilers may or may not optimize to the same degree for non-Intel microprocessors for optimizations that are not unique to Intel microprocessors. These optimizations include SSE2, SSE3, and SSSE3 instruction sets and other optimizations. Intel does not guarantee the availability, functionality, or effectiveness of any optimization on microprocessors not manufactured by Intel. Microprocessor-dependent optimizations in this product are intended for use with Intel microprocessors. Certain optimizations not specific to Intel microarchitecture are reserverd for Intel microprocessors. Please refer to the applicable product User and Reference Guides for more information regarding the specific instruction sets covered by this notice.

Notice revision #20110804