Commits · 13e0802ab73d34dc0224b6cea20382f180922f2e · STAN4CRA / EN 304 626 Operating Systems · GitLab

Sep 30, 2025
- Beginnings of capabilities concept · 13e0802a
  Valerie Aurora (Bow Shock) authored Sep 30, 2025
  
  13e0802a
- Improve wording of mitigations mappings · 09ee44ad
  Valerie Aurora (Bow Shock) authored Sep 30, 2025
  
  09ee44ad
- Relocate memory safety mitigations into a new annex · acb293ef
  Kees Cook authored Sep 30, 2025
  acb293ef
- Rewrite RF-SUPP · 22dbc938
  Aeva Black authored Sep 30, 2025
  
  22dbc938
- Replace redundant and wrong risk transfer info with correct · 9052e866
  Valerie Aurora (Bow Shock) authored Sep 30, 2025
  
  View commits for tag V0.0.1-2025-09-30 V0.0.1-2025-09-30
  
  9052e866
- Add more attack surface examples · 192989b0
  Kees Cook authored Sep 29, 2025
  
  192989b0
- Add more classes of microarchitectural side channels · 534b3c5e
  Kees Cook authored Sep 29, 2025
  
  534b3c5e
- Define "Principle of Least Privilege" · 2c2766a3
  Kees Cook authored Sep 29, 2025
  
  2c2766a3
- Expand Threat Actor description · 1a0213bb
  Kees Cook authored Sep 29, 2025
  1a0213bb
- replace "we don't accept pull requests" with "we don't accept merge requests" · 80284ac1
  Jordan Maris authored Sep 30, 2025
  
  80284ac1
- Update TR-TEST and map TR-MINI to CRA · faf6d23f
  Valerie Aurora (Bow Shock) authored Sep 30, 2025
  
  faf6d23f
Sep 29, 2025
- Rewrite risk factors in terms of foreseeable use · d8642e06
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  d8642e06
- Add support period risk factor · 350cdfa7
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  350cdfa7
- Fix up subject of shall statements, clarify spec execution req · 9c6d339f
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  9c6d339f
- Val's threat analysis notes · 55290337
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  55290337
- Some corrections to memory access control section · fa04cc2d
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  fa04cc2d
- Make risk transfer only allowed if the TR says so · 79e2ecad
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  79e2ecad
- De-number risk factors while they are changing a lot · 41331d96
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  41331d96
- Replace "the internet" with "a public network" · 2beda2ab
  Valerie Aurora (Bow Shock) authored Sep 29, 2025
  
  2beda2ab
Sep 28, 2025
- Rewrite risk factors without "shall", add/refine risk factors · b3cb0641
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  b3cb0641
- Split "justify yourself" TR into documentaiton and scanning · 50c5f1ec
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  50c5f1ec
- Remove redundant parts of mitigation descriptions · e69b9e04
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  e69b9e04
- Update general description for mitigations · d6a8655f
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  d6a8655f
- Add/update some definitions · 06ab08c5
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  06ab08c5
- Make inheritance of memory isolation mitigations explicit · 592e2ded
  Valerie Aurora (Bow Shock) authored Sep 28, 2025
  
  592e2ded
Sep 27, 2025
- Map memory isolation requirement to CRA requirements · adffba6c
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  adffba6c
- Map memory isolation mitigations to security profiles · 375f8947
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  375f8947
- Fill out assumptions. · 90468e7d
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  90468e7d
- Fill out some threats · 4ffef1e0
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  4ffef1e0
- Add option to delete user data instead of resetting device to NUSR · a58b056a
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  a58b056a
- Rewrite memory isolation requirements and add speculative execution requirement · baf39c19
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  baf39c19
- Improve memory isolation technical requirement · f28cecea
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  f28cecea
- Remove very limited NIAP threats, BSI covers them and more · 00c67876
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  00c67876
- Fix short name of software access risk factor · 3585ced1
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  3585ced1
- Update TR description, threat description -> example threat · 418c0fc3
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  418c0fc3
- Add test/doc requirements, rearrange one requirement · fac30faf
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  fac30faf
- Add note about availability of risk transfer · 1650aca8
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  1650aca8
- Remove hostile hardware/admin, add admin quality · 0a7722ce
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  0a7722ce
- Add web browsing risk factor · a3f14242
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  a3f14242
- Small reword/formatting/notes to use cases and risk factors · a19bfe1b
  Valerie Aurora (Bow Shock) authored Sep 27, 2025
  
  a19bfe1b