日常常用缩写含义,留文以备忘:
ATF (Arm Trust Firmware)
OTP (One Time Program)
FRP (Factory Reset Protection)
VB2.0 (Verified Boot 2.0)
POWP (Power on write-protection)
RPMB (replay protected memory block) : RPMB(Replay Protected Memory Block)
MAC(Message Authentication Code)是一个256位(32字节)密码,它嵌入在RPMB数据帧中,并与消息数据本身一起发送
FEC (Forward Error Correction)
GPP: General Purpose Partitions
UDA: User Data Area
MBR(Master Boot Record)和 GPT(GUID Partition Table)
DSA(Digital Signature Algorithm) -- ECDSA(Elliptic Curve DSA)
MVNO (Mobile Virtual Network Operator )
AVB(Android Verified Boot)
F2FS (Flash-Friendly File System)
DTS(Device TreeSource) DTS文件经过DTC(DeviceTree Compiler)编译后就变为DTB(DeviceTree Blob) https://source.android.google.cn/devices/architecture/dto
Device Tree Blob Overlay (dtbo.img走的是MTK secure boot的sign/verify。 )
SHA1(Secure Hash Algorithm 安全哈希算法)
MD(Message Digest 信息摘要)5
MIME 多用途互联网邮件扩展(Multipurpose Internet Mail Extensions)
AMSS:(Advanced Mobile Subscriber Software)先进移动用户软件,由Dual-Mode Subscriber Software(DMSS)升级而来
BREW(Binary Runtime Environment For Wireless)
AEE(application execution environment)
REX(Run Time Executive)
pgpt: Store the Primary Guid Partition Table.
SOP: Standard Operating Procedure
SLA: Serial Link Authentication
EFS: Embedded File System
SFS: Secure File System
FDE:Full-Disk Encryption 全盘加密
FBE:File-Based Encryption基于文件的加密
AES: Advanced Encryption Standard
AVB(Android Verified Boot): Android 8.0:引入支持Treble的Verified Boot,称为AVB(Android Verified Boot)或者Verified Boot 2.0,对分区尾部的数据格式进行格式化,并增加版本回滚保护的功能。
LSM(Linux Security Module)的五种实现:
AppArmor:应用盔甲,AppArmor is installed by default in Ubuntu
SELinux:Security Enhanced Linux,基于inode,Android当前使用的就是这种
DAC(Discretionary Access Control,自主访问控制,Linux传统权限)-> MAC(Mandatory Access Control,selinux)
SMACK:Simple Mandatory Access Control Kernel,基于inode
Tomoyo:日本女人名“智代”,日本人实现的代码,基于path
Yama:来自梵文,中文名为“阎罗”,只处理ptrace和文件链接
(ECM,授权控制信息)entitlement control message
(EMM,授权管理信息)entitlement management message
(FTS)Fast Trusted Storage
Qualcomm Secure Execution Environment/Qualcomm® TrustedExecution Environment (QSEE/Qualcomm TEE)
QMI : Qcom Message Interface
TLV : Type-Length-Value
QMUX : QMI Multiplexing Protocol
CA(Client App)
TA (Trusted Application)
GP GlobalPlatform(全球最主要的智能卡多应用管理规范的组织,简称为GP)
SMC (安全监视器调用)
(CONFIG_MMC_SDHCI)Secure Digital Host Controller Interface support
(CONFIG_MMC_SDHCI_PLTFM)SDHCI support on the platform-specific bus
The MultiMediaCard (MMC)/ Secure Digital (SD)/ Secure Digital Input Output (SDIO) host driver implements a standard Linux driver interface to the ultra MMC/SD host controller (microSDHC)
STD(Suspend to Disk),关机时需要将内存数据写入nand
VFS(Virtual file system)
(CPPF) content protection point function
(HDCP) High-bandwidth digital content protection
(DRM) digital rights management
Elementary Stream Based -- ES BasedDRM Widevine DRM、Marline DRM都属于这一种类型
Container Based --- 目前OMA DRM支持这种
(GDPR) General Data Protection Regulation
(FBE) File Based Encryption
移动国家码 MCC(the MobileCountry Code, MCC),标识移动用户所属国家代号,占3位数字;
移动网络码 MNC(the Mobile NetworkCode,MNC),由2或3位数字组成,用于识别移动用户所归属的移动通信网;
归属位置寄存器 HLR(the HomeLocation Register,HLR),标识SP; NetworkSubset(NS)NS码(又叫HLR)
移动用户识别号 MSIN(the MobileSubscriber Identification Number,MSIN)
CDT: 分区表(config_data_table[])
GUID:Globally Unique Identifier
UEFI:Unified Extensible Firmware Interface 统一可扩展固件接口
DXE:driver execution Environment
TSL:Transient System Load
GPT: GUID Partition Table
MBR: Main Boot Record
PBL: primary boot loader
SBL: Secondary boot loader
XBL: Extensible boot loader
XBL core (UEFI or LK,ABL)---XBL core,就是之前的bootloader
UEFI代码运行流程为:SEC(安全验证)--->PEI(EFI前期初始化)--->DXE(驱动执行环境)--->BDS(启动设备选择)--->UEFI Loader(操作系统加载前期)--->RT(Run Time)。
HOB: Hand-Off Block
PHIT: Phase Handoff Information Table
PEI: Pre-EFI Initialization
PEIM: PEI Module
PPI: PEIM-to-PEIM Interfaces
FV: FlashVolume
fdf:Flash description file,描述flash分区地址范围
dec:package declarationfile,定义了不同模块的GUID信息
dsc:description file,主要包含需要用到的所有inf文件
inf:单个模块的编译信息,类似makefile
efi :最终编译生成的UEFI可执行文件
EL: Exception Level
eMMC :Embeded Multi Media Card,内嵌式记忆体,内部存储 : eMMC 是 embedded MultiMediaCard
APPS PBL:Application Processor Primary Boot Loader,应用处理器初级引导程序
SBL1:Secondary Boot Loader Stage1,第二引导程序阶段一(此处写阶段一是因为早期高通芯片分为几个阶段,但现在都由sbl1实现)
TZ:TrustZone
xPUs: extensible protection unit (xPUs)
PIL: peripheral image loading (PIL)
PRM_FW:Resource Power Manager Firmware,电源资源管理固件
HLOS:High-Level Operating System,高级操作系统
Modem PBL:Modem Primary Boot Loader,调制解调器侧初级引导程序
MBA:Modem Boot Authenticator,调制解调器侧引导校验程序
SPIs: shared peripheral interrupts
HWKM: Hardware key manager (HWKM)
WES: Wireless Edge Services (WES)
ECDSA: elliptic curve digital signature algorithm (ECDSA)
ABL: Application bootloader
DXE: Driver execution environment••••••••
EDK: Enterprise development kit
GUID: Globally unique identifier
IRQ: Interrupt request
ISR: Interrupt service routine
MP: Multi processing
PMIC: Power management integrated circuit
TPL: Task priority level
SPI: Shared peripheral interrupts
UART: Universal asynchronous receiver/transmitter
HCK : Hashed Control Key
LUN : Logic Unit Number
DER:Distinguished Encoding Rules,可分辩编码规则。DER格式文件后缀通常为 “.der” 和 “.cer”,后缀名并不会影响 DER 格式文件的解析。
PEM:Privacy-Enhanced Mail,隐私增强邮件。PEM格式文件后缀通常为".pem"、“.cer”、“.crt”、“.key”,后缀名并不会影响 PEM 格式文件的解析。
SBC: security boot check
PBP: post build process
CPNI: customer propertietary network information
MBN: modem configuration binaries (MBN)
non‑volatile (NV)
EFS : (Embedded File System) partition
ELF:(Executable and Linkable Format,类似Windows平台上的exe文件格式)
DLC: Device Lock Controller