Portable Implementation of GlobalPlatform API for TEE
summary
Implemented a portable GP TEE library for RISC‑V Keystone and Intel SGX using the Keystone runtime/EDL and selectable crypto backends (mbedTLS or wolfSSL), supporting AES, Ed25519 and SHA‑256 and mapping 29 GP categories. Performance is measured on SiFive Unleashed and an Intel machine, converting cycle counters to microseconds with 100 measurements per API; most crypto APIs show similar latency, but secure storage on Keystone is much slower and highly variable (large stddev, likely SD‑card I/O and PMP/EDL overhead). Next steps add provisioning and more GP APIs.
AI-written summary · about
chapters (11)
- 0:00Intro
- 0:58Contents
- 3:20Does RISC-V have TEE?
- 4:14What is Keystone?
- 5:56How to write a critical program for a TEE?
- 8:08What is GP TEE Internal API?
- 9:34What we did on RISC-V
- 11:16Separate GP TEE Internal API
- 13:12Implementation of CPU dependent API
- 17:08Performance Results(2)
- 18:52What is next?
related talks
15mProposal of porting Trusted Execution Environment Provisioning (TEEP) Protocol...
16mTrusted RV: Trusted Execution Environment, Secure Coprocessor, and their Program...
52mBuild secure key management services in OP-TEE
09mDemo: Facilitating Trusted Application Migration to RISC-V
15mSecured Routines: Language-based Construction of Trusted Execution Environments
29mShield Your Devices: The Strength of Open-Source Software and Hardware
27msecGear: openEuler native confidential computing framework
39mKernel TEE subsystem evolution