2128
Cryptographic hash functions are commonly used to create unique fixed-length digests used to
ensure the integrity of code and keys. A golden digest is stored on the device and compared
to the digest computed from the data to be verified. If the digests match, the data has not been
maliciously modified. If an attacker can modify the golden digest they then have the ability to
store arbitrary data that passes the verification check. Hash digests used to verify public keys and
early stage boot code should be immutable, with the strongest protection offered by hardware
immutability.
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1202 Memory and Storage Issues 1194 2472
MemberOf 1403 Comprehensive Categorization: Exposed Resource 1400 2528
Notes
Maintenance
This entry is still under development and will continue to see updates and content improvements.
Maintenance
As of CWE 4.3, CWE-1282 and CWE-1233 are being investigated for potential duplication or
overlap.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
458 Flash Memory Attacks
679 Exploitation of Improperly Configured or Implemented Memory Protections
CWE-1283: Mutable Attestation or Measurement Reporting Data
Weakness ID : 1283
Structure : Simple
Abstraction : Base
Description
The register contents used for attestation or measurement reporting data to verify boot flow are
modifiable by an adversary.
Extended Description
A System-on-Chip (SoC) implements secure boot or verified boot. During this boot flow, the SoC
often measures the code that it authenticates. The measurement is usually done by calculating
the one-way hash of the code binary and extending it to the previous hash. The hashing algorithm
should be a Secure One-Way hash function. The final hash, i.e., the value obtained after the
completion of the boot flow, serves as the measurement data used in reporting or in attestation.
The calculated hash is often stored in registers that can later be read by the party of interest to
determine tampering of the boot flow. A common weakness is that the contents in these registers
are modifiable by an adversary, thus spoofing the measurement.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
CWE Version 4.14
CWE-1283: Mutable Attestation or Measurement Reporting Data
CWE-1283: Mutable Attestation or Measurement Reporting Data