TEEP (Trusted Execution Environment Provisioning) Implementation on RISC-V

" summary

Explains implementing the IETF TEEP protocol for remote installation/update/deletion of Trusted Applications (TAs) inside TEEs, showing a port from OP-TEE on Arm TrustZone to Keystone on RISC‑V. Describes the three TEEP components (TEEP Broker in the normal OS, TEEP Agent inside the TEE, and remote Trusted Application Manager), PKI-based certificate and code‑signing management, and RISC‑V specific work to keep the in‑TEE feature set small while adding Keystone runtime support for HTTP/HTTPS and a CBOR parser to enable TEEP functionality.

AI-written summary · about

" related talks

• 21mTEEP (Trusted Execution Environment Provisioning) on RISC-VAkira Tsukamoto, Kuniyasu Suzaki · RISC-V Global Forum 2020
• 15mProposal of porting Trusted Execution Environment Provisioning (TEEP) Protocol...Akira Tsukamoto · Linux Plumbers Conference 2023
• 39mSoftware Supply Chain Security with Trusted Execution Environment Provisioning (T...Akira Tsukamoto · SupplyChainSecurityCon @ Open Source Summit Japan 2023
• 16mTrusted RV: Trusted Execution Environment, Secure Coprocessor, and their Program...Kuniyasu Suzaki · RISC-V Forum: Security 2021
• 09mDemo: Facilitating Trusted Application Migration to RISC-VXiaoxia Cui · RISC-V Summit 2022
• 49mA More Open Trust ProtocolChristian Brindley · Embedded Linux Conference + OpenIoT Summit Europe 2016
• 41mOP-TEE - Using TrustZone to Protect Our Own SecretsMarc Kleine-Budde · Open Source Summit Europe + Embedded Linux Conference Europe 2017
• 40mWhat should I know about secure boot and TEEs?Marta Rybczynska · foss-north 2022