Trusted Firmware

{
  "id": "724ad196-90de-4ba8-bf21-dc114ab7fce4",
  "name": "Trusted Firmware",
  "company_handle": "arm",
  "handle": "trustedfirmware",
  "url": "https://www.intigriti.com/programs/arm/trustedfirmware/detail",
  "status": "open",
  "confidentiality_level": "public",
  "tacRequired": false,
  "twoFactorRequired": false,
  "min_bounty": {
    "value": 1000,
    "currency": "USD"
  },
  "max_bounty": {
    "value": 20000,
    "currency": "USD"
  },
  "targets": {
    "in_scope": [
      {
        "type": "other",
        "endpoint": "TrustedFirmware-A (TF-A)",
        "description": "The Trusted Firmware-A project provides a reference implementation of secure world software for Armv8-A and Armv9-A class processors.",
        "impact": "Tier 2"
      },
      {
        "type": "other",
        "endpoint": "TrustedFirmware-M (TF-M)",
        "description": "Trusted Firmware-M (TF-M) implements the Secure Processing Environment (SPE) for Armv8-M, Armv8.1-M architectures (e.g. the Cortex-M33, Cortex-M23, Cortex-M55, Cortex-M85 processors) or dual-core platforms. It is the platform security architecture reference implementation aligning with PSA Certified guidelines, enabling chips, Real Time Operating Systems and devices to become PSA Certified.",
        "impact": "Tier 2"
      },
      {
        "type": "other",
        "endpoint": "TF-PSA-Crypto",
        "description": "The TF-PSA-Crypto repository provides an implementation of the PSA Cryptography API version 1.2, with the limitation that the implementation of the PAKE extension still has minor non-compliances, such as returned error codes.",
        "impact": "Tier 2"
      },
      {
        "type": "other",
        "endpoint": "OP-TEE",
        "description": "OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.",
        "impact": "Tier 2"
      }
    ],
    "out_of_scope": []
  }
}