Commit 09ee44ad authored by Valerie Aurora (Bow Shock)'s avatar Valerie Aurora (Bow Shock)
Browse files

Improve wording of mitigations mappings

parent acb293ef
Loading
Loading
Loading
Loading
+2 −2
Original line number Diff line number Diff line
@@ -1039,7 +1039,7 @@ The manufacturer shall document that the risk of microarchitectural side channel

Mitigations satisfy technical requirements only under when they mitigate the relevant risks appropriately. Risk factors are used to determine this. The below table shows which mitigations are appropriate to which use cases or security profiles based on the risk factors determined in the risk assessment.

| Mitigation | Applies if risk factors satisfy  |
| Mitigation | Satisfies TR if risk factors are |
|------------|----------------------------------|
| None       | All risk factors are 0           |
| SSCA       | CUSR = 0 & SWMD = 0              |
@@ -1053,7 +1053,7 @@ FIXME change the above mapping to be based on a combination of likelihood and im

FIXME add MMAC being okay with CUSR 3 and low impact

| Mitigation | Security profiles it applies to            |
| Mitigation | Satisfies TR for these security profiles   |
|------------|--------------------------------------------|
| None       | LR                                         |
| SSCA       | IoT-\*, OT-\*                              |