Trusted RV: Trusted Execution Environment, Secure Coprocessor, and their Program...
summary
A RISC-V prototype combines four 64-bit application cores and one 32-bit Secure Unit that runs Zephyr RTOS and holds device keys and certificates as a root of trust, implemented on Xilinx VC707 FPGA and in a simulator. Keystone provides enclaves and PMP isolation while a Secure Unit handles secure storage and interrupt/shared-memory comms limited to enclaves. A portable library implements the GlobalPlatform TEE internal API, TEEP-based provisioning is integrated, and two proof‑of‑concepts (machine learning protection and an IoT smart system) run successfully.
AI-written summary · about
chapters (12)
- 0:00Introduction to Trusted RV
- 1:06TE vs other isolated environments
- 2:11Four problems with TE
- 5:26Security technologies overview
- 6:32Trusted Ruby hardware design
- 8:47Security layer design choices
- 9:31Comparison with other processors
- 9:53Programming environment solution
- 12:02Management framework solution
- 13:24Remote attestation solution
- 14:49Future proof of concept
- 15:12Conclusion and takeaways
related talks
21mTEEP (Trusted Execution Environment Provisioning) on RISC-V
45mThe Future of Security is in Open Silicon
09mDemo: Facilitating Trusted Application Migration to RISC-V
27mZephyr and Trusted Execution Environments
27mZephyr and Trusted Execution Environments
17mA First Secure RISC-V Common Criteria Certified Root of Trust
39mSoftware Supply Chain Security with Trusted Execution Environment Provisioning (T...
09mThe Future of Embedded Security with RISC-V