TEEP (Trusted Execution Environment Provisioning) on RISC-V
summary
Implements IETF TEEP on RISC-V by porting an ARM Cortex‑A prototype to QEMU rv64gc (SV39) under a Keystone secure monitor, using about 30 GlobalPlatform APIs as a compatibility wrapper. Replaces JSON with CBOR and JOSE/COSE libraries, uses mbedTLS and qcbor, and relies on RISC‑V PMP for memory isolation. Builds a TEEP stack with TEEP Broker, TEEP Agent and TAM, installs and executes an unchanged hello TA on Keystone enclaves; remote attestation and TA metadata work remain in progress.
AI-written summary · about
chapters (9)
- 0:00Intro
- 0:58Introduction of TEE
- 2:55Keystone project on RISC-V
- 4:41Use cases of Trusted Applications
- 8:32Simplified TEEP Overview
- 10:31TEEP coverage among drafts
- 13:02Initial prototype of TEEP on ARM Coretex-A
- 15:22Current TEEP implementation on RISC-V
- 19:57Summary
related talks
15mProposal of porting Trusted Execution Environment Provisioning (TEEP) Protocol...
16mTrusted RV: Trusted Execution Environment, Secure Coprocessor, and their Program...
39mSoftware Supply Chain Security with Trusted Execution Environment Provisioning (T...
09mDemo: Facilitating Trusted Application Migration to RISC-V
46mTPM in TEE
50mForking QEMU to emulate and secure the Tillitis TKey
10mLightning Talk: A Trusted OS for RISC-V ? OP-TEE is a Candidate
41mPanel: A New Root Of Trust: Changing Computing With TEE