OP-TEE: Using the ARM Trust-Zone to Control Tamper Resistant Processors
summary
Describes integrating external tamper-resistant processors (NXP SE05X EdgeLock secure element and AMD/Xilinx Versal ACAP Security Library) with OP-TEE on ARM TrustZone. Explains two approaches: using a Linux trampoline to reach the SE05X over I2C, and using secure monitor calls to another exception level for the Versal ACAP, and shows how TEE trusted applications, Normal World apps (e.g. OpenSSL), and OP-TEE’s crypto library and GP-compliant secure storage can control those secure cores.
AI-written summary · about
related talks
41mOP-TEE - Using TrustZone to Protect Our Own Secrets
40mOP-TEE: When Linux Loses Control
11mOP-TEE open-source security for the mass-market
41mPanel: A New Root Of Trust: Changing Computing With TEE
27mvTZ: Virtualizing ARM TrustZone
40mWhat should I know about secure boot and TEEs?
39mSoftware Supply Chain Security with Trusted Execution Environment Provisioning (T...
08mSecure Debug IoT on v8-M Cortex-M33