Developing Trusted Applications for Trusted Execution Environments and vTEEs
summary
Claims that embedding a TEE inside an app via a virtual TEE removes vendor lock and lets developers run Java Card-style trusted apps without special hardware; demonstrates an open-source Java Card simulator JarSim (released 2011, Oracle Duke’s Choice award 2013) that implements the Java Card API for local debugging. Shows StrongBox limits (about 60% devices support it), a real attack path where decrypt→re-encrypt leaks plaintext, and announces a hackathon and tooling to prototype trusted apps.
AI-written summary · about
chapters (8)
- 0:00Trusted execution environments
- 3:23Concept of trusted execution environments
- 9:23Java Card as TEE
- 15:30Android and trusted execution environments
- 22:39Hardware TEE limitations
- 25:29Virtual TEEs introduced
- 30:12Developing apps with JarSim
- 36:07Lysel hackathon
related talks
41mPanel: A New Root Of Trust: Changing Computing With TEE
39mSoftware Supply Chain Security with Trusted Execution Environment Provisioning (T...
40mDoing the Safety Dance: Will Trusted Execution Environments Protect Us?
40mWhat should I know about secure boot and TEEs?
38mOne Ring -3 To Secure Them All: Computing with Hardware Enclaves
46mTPM in TEE
37mIt's All About Trust: Why Confidential Computing Matters
27mHasTEE: Programming Trusted Execution Environments with Haskell