Introduction to SD Specification 9.0
Public Webinar

September 2022

©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

1

Disclaimers and Trademarks
Forward-Looking Statements
During our webinar today we will be making forward-looking statements. Any statement that refers to
expectations, projections or other characterizations of future events or circumstances is a forward-looking
statement, including those relating to industry trends, standardization plans and any SD Association’s relatedplans. Actual results may differ materially from those expressed in these forward-looking statements due tovarious factors. We undertake no obligation to realize these forward-looking statements, which speak only as ofthe date hereof.

Trademarks
SD and related marks and logos are trademarks of SD-3C LLC. © 2019-2022 SD-3C LLC. All Rights Reserved.

PCI Express® is a registered trademark of PCI-SIG®.
NVM Express™ and NVMe™ are trademarks of NVM Express, Inc.

©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

2

Agenda☐ Introduction - Yosi Pinto, Chairman and Technical Committee Chair☐ Boot Functions - Tadashi Ono, UHS TG Co-Chair / Panasonic Connect Co., Ltd☐ TCG and RPMB Functions - Yoni Shternhell, Advanced Security Chair / SanDisk LLC©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

3

Introduction to SD Spec. 9.0

Introduction
Yosi Pinto, Chairman and Technical Committee
Chair, SD Association
Senior Technologist at Technology & Strategy Divisionin Western Digital (formerly SanDisk) and Chairman of
the Board and the Technical Committee chair at the SD
Association.

©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

SD Card Specifications Evolution☐ SD Association was formed in 2000
☐ Develop and promote removable memory cards – SD and microSD☐ ~780 members

2020

2022
Boot/TCG/RPMB(SD Ver.9.00)

2018/19

SD Express w/PCIe4x2~4GB/s (SD Ver.8.00)
SD Express & microSD Express(PCIe®3/NVMe™) 985MB/s, SDUC
(SD Ver.7.00/7.10)

2017

2011

2005

2000

2006

2009/10UHS-II mode
312MB/sUHS-I mode
104MB/s, SDXC

(SD Ver.4.00)

UHS-III mode
624MB/sCommand Queue
Low Voltage(SD Ver.6.00)

2004
microSD Introduced SDHC Introduced (SD Ver.3.00/3.01)
High Speed mode (SD Ver.1.20)(SD Ver.2.00)
of 25MB/s(SD Ver.1.10)

SD Card Introduced

To join: https://www.sdcard.org/join/>6 Billon SD & microSD cards sold by
2021*. SD is the de-facto worldwide
removable memory card standard* Source: Estimation using news published by SanDisk in 2015 (“2 Billion microSD cards sold by 2015”) + TrendForce’s report from 2019 (“total of ~3 billion cards sold within 2016-2019”) and report from Futuresource of total of ~1M sold between 2020-2021©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

5

Background☐ SD Express opens new opportunities and use cases for SD andmicroSD memory cards. Some of the potential usage:– Chromebooks (as its system memory or memory expansion), drones,
surveillance cameras, dash cameras, gaming consoles, virtual reality (VR)headsets/glasses, small IoT modules and more

☐ The Right-to-Repair legislation in EU and other areas – demands
new serviceability requirements. Storage is one of the targetedcomponents.
☐ SD cards may replace embedded devices in small systems (i.e. IoT,
Drones) and SD Express enhanced this opportunity for devices thatneeds higher speed memory. Such usage of SD as semi-embedded
memory may allow:– Reduced memory components– Easy memory upgrade and improved serviceability options©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

6

SD9.0 – What does it include?
☐ Part 1 v9.0 (SD9.0) adds new features to the SD standard:– Boot• Fast Boot and Secure Boot features give cards the ability to serve as a device’s boot code memory byusing a simple and easy fast boot code uploading process, along with secured methods of providing bootcode updates– TCG Storage• A secured storage method defined by the Trusted Computing Group adding a self-encrypted drive
capability– Replay Protected Memory Block (RPMB)• Offers a secured hidden memory accessible only through a secured authentication process and provides
a secured write-protect mechanism, secured boot code update and replay protection security
mechanism☐ SD9.0 features provide enhanced features that may open new opportunities for
SD cards usually tightly bound to a specific host product as:– Semi-embedded devices replacing the soldered embedded memory (IoT, Chromebooks, etc.)– As a secured memory for OEM applications (i.e. Gaming, Automotive, VR, etc.)©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

7

SD Cards as Semi-Embedded Solutions☐ Embedded memory vs Removable memory in current and future market
Present
Mobile Computing and Automotive
Embedded
memo
eMMC/UFS

SSD
or
HD

-

-

-

Fast embedded mem for OS withenhanced security functions(boot, TCG, RPMB)
Slow removable for off-line
storage
Optional fast Removable for App
running and real-time rec/view(real mem expansion)
No easy serviceability ofembedded mem

SSD
or
HD

Semiembedded-

Same, but with enhanced serviceability
for embedded mem-

Solution based on SD card may
provide the same features [including
Boot, Self Encrypted Drive(using
TCG) and RPPB security] with
reduced size and fewer components

Or
Semiembedded

Embedded
memo
eMMC/UFS

FutureFuture small/low cost Mobile
Computing or for better Serviceability

eMMC/UFS on
card, M.2 or new
removable FF

Other Small Devices
Mobile/Gaming/Drones/IoT©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

8

SD Cards as OEM Cards Tightly Bound to Specific Hosts☐ Chromebooks, Gaming products, VR goggles, Automotive Infotainment Cards(i.e. Maps or Apps), IoT… to name a few☐ May enjoy cards supplied by the product manufacturers or its contractors
dedicated to being run on specific hosts
Mobile Computing
EmbeddedmemorySSD orHD

The main storage device (SSD or HD)
may be replaced with SD Express insmall low/cost systems

EmbeddedmemorySSDorHD©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

Other Small Devices
Gaming/IR/Auto etc.

EmbeddedmemoryBound

May support Self Encrypted Drive (w/TCG) and RPMB
security tighten to the embedded device if required9SD9.0 Specification☐ SD9.0 Specification was introduced with:– SD Specification Part 1 V9.0
– Extended Security Addendum
Application Specifications
Part 4 Audio

Part 8 Video

Other Applications

Part 2 File System
Part 1 Physical Layer v9.0
Part 3 Security

UHS-II Addendum
Low Voltage Interface Addendum
Mechanical Addenda
eSD Addendum (Embedded)
Extended Security Addendum V1.0

©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

Part A1
Advanced
Security SD
Extension

Part E1 SDIO10

SD 9.0 : New Infrastructure☐ Two New Security Commands:– SECURE_READ – ACMD53– SECURE_WRITE – ACMD54☐ Behave like Multiple Block RD/WR☐ Allow a host to communicate with thecard as pass-through command forvarious security protocols including TCG☐ Have the following structure:

CMD3

CMD0

CMD15

card identification
mode
from all states indata-transfer-mode

data transfer
mode

CMD13, CMD55
no state transition
in data-transfer-mode

CMD7Stand-by State(stby)

CMD4,9,10,3"operation
complete"

Disconnect
State (dis)CMD7"operation
complete"

Sending-data
State (data)

CMD12, or"operation
complete"

CMD6,17,18,19,30,48,56(r),58
ACMD13,22,51,53

Transfer
State (tran)

CMD16,23,32,33
ACMD6,23,42
CMD12,22 (SDUC only)

CMD24,25,26,27,42,49,56(w),59
ACMD54

CMD20,28,29,38,39

Receive-data
State (rcv)
CMD7
CMD7

Programming
State (prg)

CMD12 or"transfer end"

SELECT_CARD_PARTITION (see next page)©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

11

SD 9.0 : New Infrastructure (cont.)☐ Three memory units were added:– Two Boot partitions

Protected Area
User Area Partition
User Area• Supporting the Boot function• CMD39 (New) is used to switch between
the two partitions– One RPMB hidden unit
• A hidden memory area accessible in asecured manner

RD/WR access by either
SD or PCIe/NVMe data
read/write commands

File System
MBR

BootParBoot 1Boot
titionPartition 0 Partition 1
RPMB Unit / Target
CSD register
SCR register
Extension register©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

Read access by either
SD or PCIe/NVMe commands
Write access by either SD or
PCIe/NVMe after RPMB
authentication
RD/WR access by either SD or
PCIe/NVMe RPMB
authentication process

12

Introduction to SD Spec. 9.0

Boot Functions
Tadashi Ono, UHS TG Co-Chair, SD Association
Supervisor at Advanced Research Lab. in PanasonicConnect Co., Ltd., and co-chair of the UHS TG for the SD
Association.

©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

Agenda☐ Introduction☐ Application Examples☐ Boot Functions– Function 1: Boot Partitions– Function 2: Fast Boot
– Function 3: Boot Partition Protection by RPMB

☐ Summary© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

14

Introduction☐ One of new features of SD9.0 is “Boot”, which can minimize the size of nonvolatile memory in the host for storing its primary bootloader.
– It is especially useful for IoT or mobile equipment.

☐ The following functions are newly introduced from SD9.0.
1. Boot Partitions
2. Fast Boot
3. Boot Partition Protection by RPMB

☐ These functions are available over not only SD bus but also PCIe bus for SD
Express card.
– Note: Fast Boot is introduced for SD bus only.
© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

15

Application Examples☐ Security Camera– Requirement for merging storage for bothboot code and video data to reduce cost.
– Easy to update the boot code even in poor
radio communication environment.

Boot Code☐ Drone– Beneficial to simplify storage and shrink its
overall weight and housing.
– Easily revive the boot code by replacing SD
card even in a crash.

© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

Boot Code16

Function 1: Boot Partitions
Protected Area

☐ SD Card supporting Boot has

User Area Partition
User Area– 1 User Area Partition, and– 2 Boot Partitions (Boot Partition 0/1).

[SD] Target partitionis selected byPartition ID in CMD39☐ These partitions are accessible byboth SD bus and PCIe bus– For SD bus, host issues CMD39 with theselected Partition ID as its argument.
– For PCIe bus, host designates BPID in
BPRSEL register (read) or Firmware
Commit Command (write) whenaccessing to Boot Partitions.

© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

Partition ID = F0h

Partition ID = 00h

File System
MBR

Partition ID = 01h

Boot
Boot
Partition 0 Partition 1
RPMB Unit / Target

BPID = 0b

CSD register
SCR register
Extension register

BPID = 1b[PCIe] BPID isdesignated by registeror command17

Function 2: Fast Boot − Background☐ Host requires boot code transmission immediately after power up withminimum operations.
☐ Just after power up, maximum speed of the SD bus is 3.1MB/s as a default.
– In order to establish the communication in any combinations between host and card.

☐ However, it is too slow for boot code transmission today.
☐ Therefore, the Fast Boot function is introduced to enable transmitting bootcode up to 104MB/s (SDR104 bus) in SD card.
Note again: Fast Boot is supported only through SD bus.
© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

18

Function 2: Fast Boot − Implementation to the SD Card
☐ Signal voltage shall be 1.8V in SDR104 bus.
– Default signal voltage of SD card is 3.3V.

☐ In order that host detects appropriate signal sampling points, tuning process is required.
– Unlike UHS-I, tuning blocks are automatically transmitted from card to host without CMD19 to simplify
the sequence.

☐ The following two processing modes are introduced to the Fast Boot.
– Card that supports Boot shall implement both modes.
– Host can choose either of them for performing Fast Boot.

Mode

Trigger by the Host

Note

CV-modeDriving CMD line Low

Standing for “CMD line Voltage”

CA-modeIssuing CMD0 with a special argument

Standing for “CMD0 Argument”© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

19

Function 2: Fast Boot − CV-mode(2)

CV-mode

VDD
CMD

(1)
min 74 clocks

DAT[3:0]

SDR104 bus (up to 104MB/s)

Bus
Speed
Mode
Switching
Tuning
Block

(3)

(4)

TuningBlock

Boot CodeTuning Blocks x 40

(1) Host starts CV-mode Fast Boot by driving CMD line low for at least 74 clocks.
(2) Bus speed mode switches to SDR104 (signal voltage to 1.8V etc.) to realize 104MB/s
code transmission.
(3) Card repeats sending 40 tuning blocks for the tuning process by the host.
(4) After completing the tuning blocks transmission, card sends a boot code.
© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

20

Function 2: Fast Boot − CA-mode(1)

CA-modeSDR104 bus (up to 104MB/s)

(2)

VDD
CMD
DAT[3:0]

LVS
Identification

CMD0/w arge.g.) arg. = FCFCFCFCh(SDR104)

Tuning
Block

(3)

(4)

TuningBlock

Boot CodeTuning Blocks x 40

(1) Host executes LVS identification to initialize card by 1.8V signaling.
(2) Host starts CA-mode Fast Boot by issuing CMD0 with an argument indicating bus mode.
•

Argument “FCFCFCFCh” means SDR104 bus.

(3) Card repeats sending 40 tuning blocks for the tuning process by the host.
(4) After completing the tuning blocks transmission, card sends a boot code.
© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

Same asCV mode21

Function 3: Boot Partition Protection by RPMB
☐ Once boot code is written, Boot Partition Protection should be enabled for its
security. At this time, Boot Partitions are locked after power up or reset.

☐ After unlocking by RPMB authentication, write and erase operations for the Boot
Partitions become possible.
☐ Read operation for them is always allowed.

Enabling Boot Partition Protection

Boot Partition Protection EnabledPower upor reset

Boot Partitions Locked
Read

RPMB authentication
Boot Partitions Unlocked
Read© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

Write / Erase22Summary☐ Boot functions are defined for unifying the storage for boot code and user data.
– It is expected for host to store both kinds of data in one SD card.

☐ Fast Boot provides high-speed and immediate boot code transmission after power up.
– Two sequences are introduced on SD bus with minimum host operations.
– Tuning process is modified in order to make issuing commands unnecessary.

☐ Boot Partition Protection is also available for providing security of boot code.

© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

23

Introduction to SD Spec. 9.0

TCG and RPMB Functions
Yoni Shternhell, Advanced Security Chair, SD
Association
Technologist at Memory Technology Division inWestern Digital (formerly SanDisk) and Application WG
chair and the Advanced Security WG chair at the SD
Association.

© SD Association, All Rights Reserved. SD, microSD and related logos and marks are trademarks of SD-3C LLC.

TCG Storage Security in SD Cards☐ TCG Storage WG develops standards for secure computing, including client, datacentersand enterprise storage, mobile devices, gaming and more
☐ TCG Storage WG Opal family includes Opal, Opalite, Ruby and Pyrite SSCs
☐ TCG Storage protocol can be used over NVMe and other command layer protocols☐ TCG interactions with other protocols are defined in the Storage Interface Interaction
Specification (SIIS) (soon to be approved document)☐ The new TCG functionality in SD Cards:– Support of Ruby SSC – which is in practice an OPAL 2.01 with the more flexible requirements– Enables a Self Encrypted Drive capability– Use the newly defined commands SECURE_READ (ACMD53) and SECURE_WRITE (ACMD54) tocorrespond to IF-RECV and IF-SEND– Enables the TCG MBR Shadowing capability☐ TCG is supported by any SD card through the SD interface or PCIe/NVMe interface (in SD
Express cards). It is not supported in SD-UHS-II cards©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

25

TCG Self-Encrypting Drive (SED)( as defined by TCG Standard)☐ A SED is a Storage Device that integrates encryption of user data at rest
☐ All user data written to the Storage Device is encrypted by specialized
hardware implemented inside the Storage Device Controller☐ The user data is decrypted as it is read
☐ The encryption and decryption are performed using a Media Encryption Key(MEK) generated internally inside the SSD or the SD Card
☐ TCG Opal Family specs defines a management interface for a host applicationto activate, provision, and manage encryption of user data
☐ It also provides a mechanism by which an Authentication Credential can be set
by a host application that manages the TCG functionality in the drive, in orderto enable control of access to the user data.
©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

26

How Does the Crypto Work?
( as defined by TCG Standard)☐ When an Authentication Credential (PIN) has been set and the device is locked, it is no longer
possible to access the user data
☐ Once the correct Authentication Credential has been supplied to the Storage Device by the host,and the Storage Device is unlocked, data can be read from and written to the device once again(Media Enc. Key)(Key Enc. Key)©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

(Key Derivation
Function)27

Master Boot Record (MBR) Shadowing☐ MBR Shadowing
provides a way to bootfrom a drive that is
encrypted and locked☐ Contains an ISV’s preboot authentication(PBA) code, and this“shadow” is loaded andexecuted by the host PC
at power-on☐ The PBA code iscompletely independentof the system’s main OS
and the BIOS☐

Notebook / PC

Initial Power-up☐ When the system first requests for
data, the drive returns the pre-bootcode (MBR shadow).

Main System Board

Management
SoftwarePlatform
Authorities☐☐

Authentication and Unlock☐ The pre-boot code manages theauthentication process with bothinternal and external authorities.
☐ After the appropriate authentications,the management software unlocks theregular user space.

Resume Normal Boot
☐ After the drive is unlocked, themanagement software sends thesystem back to the boot process.
☐ The system’s request for the MBR now
returns the true MBR and the OS isloaded completing the boot process.

©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

Main System Board

Management
Software

SSD or SD9.0 card
User space
OS
Reserved
Pre-boot

SSD or SD9.0 card
User space
OS

Platform
Authorities

Reserved
Pre-boot

Main System Board

SSD or SD9.0 Card
User space

OS
Platform
Authorities

OS
Reserved
Pre-boot28

Replay Protected Memory Block (RPMB)☐ RPMB stores data in an authenticated hidden memory area for the purpose ofprotecting data from a replay attack or avoiding unexpected data updates☐ Enables protection for write-protect mechanism and secured boot code update☐ Can only be read and written via successfully authenticated read and write
accesses☐ The data may be overwritten by the host, but can never be erased☐ Prevents illegal data access or copy with a Security Key (SHA-256)©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

29

Replay Protected Memory Block (RPMB)(Cont.)☐ Enhanced Write Protection for RPMB Enabled Card
– Write Protect Until Power Cycle is newly defined in CSD Register– RPMB Enabled Card requires secured procedure to transit either of write protection states:• Permanent Write Protect• Write Protect Until Power Cycle– The secured procedure consists of three steps:
1) Execute RPMB authentication to access RPMB target
2) By enabling write protection control in RPMB target, the two write protection bits in CSD Register can be set3) Setting either write protection bit in CSD Register makes the transition to one of the write protection states©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

30

RPMB Usage Examples☐ Software Version Authentication to Prevent a Downgrade Attack
Software using RPMB to protect itself from a downgrade attack would check for a new, updated
version number during the upgrade procedure. If the new version number is lower than the one
already present in RPMB, the installer would reject the supposed update. Due to the nature of
RPMB, there is no way for an attacker to change the software version information stored in the
RPMB, because it requires access to the secret key.

☐ Secure Boot
Prevention of undesired, or hacked, code from running on a device starts with an assurance thatthe very first piece of code that the processor reads and executes from the storage device islegitimate. This initial code, the bootloader, is located on the SD boot partition and must be
write-protected from malware modification. Every change to the boot partition requires theenabling procedure by using RPMB authentication. The secured write-protect mechanism isprimarily used to protect the boot code or other sensitive data on the card from changes ordeletion by unauthorized applications.
©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

31

SD9.0 RPMB Payload
Without Data Transfer
SD data blk

Host

CMD
23

Res

ACMD
54

Res

RPMB
Header
256 Bytes

Card

0 padding
256 Bytes(No Data)
SD data blk
Res

ACMD
53

Host

CMD
23

Res

ACMD
54

Res

Host

CMD
23

Res

ACMD
53

Res

Host

CMD
23

Res

RPMB
Header
256 Bytes

0 padding
256 Bytes

Card

With Data Transfer
SD data blk1
RPMB
Header
256 Bytes

SD data blk2

Data
256
Bytes

SD data blk1
RPMB
Header
256 Bytes

Data
256
Bytes

Data
512 Bytes

SD data blk2
Data
512 Bytes

SD data blk3
Data
256
Bytes

0 padding
256 Bytes

Card

SD data blk3
Data
256
Bytes

0 padding
256 Bytes

Card

M=512 * Sector
Count©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

32

T10 SPC-6☐ T10 is a Technical Committee in INCITS (International Committee forInformation Technology Standards)☐ Responsible to standardize the SCSI Primary Commands - 6 (SPC-6)– One related topic it defines is the Security Protocol Code IDs for all transport☐ A new and published SPC-6 version now includes the new Security Protocol
code assigned to SD Association (E7h)☐ The new Security Protocol (E7h) fieldused for TCG/RPMB in ACMD53/54©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

33

Thank you for attending!

©SD Association. SD, microSD and related marks and logos are trademarks of SD-3C LLC. © SD-3C LLC. All Rights Reserved.

34