Software Supply Chain Security with Trusted Execution Environment Provisioning (T...
summary
An open-source TEEP reference implementation and Doxygen docs live on GitHub and run either in Docker + QEMU or on real Intel, ARM TrustZone and RISC‑V boards; it uses SUIT and RATS for lifecycle management, sends RATS evidence to a vendor-owned verifier before installing Trusted Components (trusted applications and personalization data), and signs/encrypts payloads with CBOR/COSE with CDDL. Example builds include a hello TA on TrustZone/SGX/RISC‑V. CBOR packets shrink an example JSON ~260 bytes to ~36 bytes, and IETF drafts are near stable.
AI-written summary · about
chapters (14)
- 0:00TEE provisioning intro
- 1:47IETF standards for TEE
- 3:13TEE provisioning overview
- 5:18Supply chain security with TEE
- 7:54SUIT and COSE formats
- 9:43Remote attestation process
- 11:38TEE provisioning steps
- 14:46TEE on different hardware
- 17:17Why IETF standardization matters
- 19:54Real-world TEE use cases
- 22:47IETF drafts status
- 23:50CBOR conversion challenges
- 29:21SUIT binary format
- 30:26Q&A
related talks
41mPanel: A New Root Of Trust: Changing Computing With TEE
21mTEEP (Trusted Execution Environment Provisioning) on RISC-V
15mProposal of porting Trusted Execution Environment Provisioning (TEEP) Protocol...
37mIt's All About Trust: Why Confidential Computing Matters
18mIoT Security's Toughest Challenges: Root of Trust, TEEs, & Firmware Updates
41mOP-TEE - Using TrustZone to Protect Our Own Secrets
48mOP-TEE: Using the ARM Trust-Zone to Control Tamper Resistant Processors
40mDoing the Safety Dance: Will Trusted Execution Environments Protect Us?