linuxboot / linuxboot/heads

xx20/xx30 memory scrubbing on boot

Open
#1,346 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Makefile
Stars
1.6k
Forks
211
Avg merge
4d 21h
Merged PRs (30d)
6

Description

**Is your feature request related to a problem? Please describe.**
If not introducing way longer init, memory scrubbing should be activated in coreboot. Otherwise a reboot of machine might still include some secret in memory from last booted state where no guarantee are provided that they will be overwritten.

**Describe the solution you'd like**
Memory scrubbing within 2-5 additional seconds on boot (acceptable for added feature)

**Describe alternatives you've considered**
PoC was done from tails to scrub memory on shutdown (OS related) but was dropped AFAIK.

**Additional context**
Just a reminder for testing, at least on x230 (native init might work) was reported that on librems, it was vertically exponential by qty of ram installed. This would just validate possible interest and open debate to add it or not on older platforms not relaying on FSP for ram init. Yet just an hypothesis to validate.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by investigating coreboot's native memory initialization on xx20/xx30 platforms and validate the reported librems scrubbing time against installed RAM. The issue mentions an OS-level Tails proof of concept and a target of 2–5 additional seconds on boot; done would require measured feasibility and a decided implementation scope.

Written by the indexing model from the issue text.

Assessment

Domain
operating-systems, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.