# Vault 7: Projects

This publication series is about specific projects related to the Vault 7 main publication.

### Cherry Blossom

# CherryBlossom -- System Req Spec (CDRL-10)

8 August, 2012

- 1
- 2
…
- 8
- 9
- 10
- 11
- 12

SECRET//20350112
Cherry Bomb Program Cherry Blossom System Requirements Specification Document
4.2 (U) Flytrap Requirements
4.2.1 (S) PoP / LP Selection
(S) Flytraps shall read a flag in the mission (downloaded from Cherry Tree) which specifies
either to use or not use the beacon addresses embedded in the Flytrap’s firmware image. This
flag shall persist across Flytrap power cycles. If this flag is set, the Flytrap shall not use the
firmware embedded beacon address.
(S) If the firmware embedded beacon address is disabled or fails, the Flytrap shall cycle through
the beacon addresses contained in the downloaded mission. The highest priority (first in the list)
beacon address shall always be the first used, followed by subsequent addresses in the list in
order until a successful beacon occurs. All Flytrap beacon attempts shall follow this protocol.
4.2.2 (U) New Device support
(U) Support shall be provided for up to three new Flytrap devices, depending on level of effort
and subject to selection by the sponsor.
(S) A study shall be performed addressing the use of Wiviz technology in Cherry Blossom
operations; specifically how undocumented ioctl calls could increase the number of packets that
could be examined. The result of the study shall be a description of how Wiviz could be used
and the level of effort required to incorporate Wiviz into Cherry Blossom.
4.2.3 (U) User Interface for Building Flytrap Firmware Images
(U) At the sponsor’s option, the development of a user interface which provides access to the
Flytrap image formation process shall be substituted for one new device support. The estimated
labor for this task is estimated to be approximately equivalent to a single new device support;
thus if the sponsor chooses this option, two new Flytrap devices shall be supported.
4.3 (U) Roundhouse (Sunflower) Requirements
4.3.1 (U) Deliver RH package with verified application execution
support
(U) A verified RH SDK that includes official support for mission deliverable application
execution shall be built, tested and delivered.
(U) Flytrap operations based the Roundhouse contractor’s recommended volatile and persistent
memory locations for application and file storage shall be verified and tested.
SECRET//20350112
10

- 1
- 2
…
- 8
- 9
- 10
- 11
- 12