Replay Protected Memory Block

A Replay Protected Memory Block (RPMB) is provided as a means for a system to store data to the specific memory area in an authenticated and replay protected manner and can only be read and written via successfully authenticated read and write accesses. The data may be overwritten by the host but can never be erased.

Use in computing systems
Since RPMB is tamper-resistant, it can be used as a storage medium for a variety of data-critical purposes on an embedded system:


 * A place to write "permanent" and/or "pre-programmed" data on a system without any programmable ROM storage, or if the data is too large for it.
 * Along with encryption and hardware fuses, it can also be used to build a trusted storage solution for a trusted execution environment
 * Anti-rollback protection for versioned data (keys, encrypted files, software, etc).
 * Storage for a Trusted Application

Some operating systems, such as Linux may provide a generic driver for accessing an RPMB device attached to an eMMC. However, in other cases the access to RPMB is controlled through a proprietary driver; this may require use of a Trusted Application instead of a normal application to access the data.

Logical unit addressing
The UFS specification allocates a "Well-Known LUN" identifier of 44h for the RPMB device. This can be represented as:
 * UFS LUN:  =
 * 64-bit SCSI LUN:  =

Memory layout
An RPMB device supplies the following memory sections: &ast; This is the minimum defined by the specification, the actual block size depends on the flash vendor's implementation.