Overview of integrating OP-TEE into HiKey620 AOSP
summary
Overview shows how to add OP-TEE into HiKey620 AOSP by adding local manifests that pull OP-TEE repos, running scripts to apply ordered patch scripts that enable OP-TEE build flags and kernel bits, and adding SELinux rules plus the client libraries and TA files into the rootfs so Android boots with OP-TEE. It documents building the FIP inside AOSP, JNI integration for app → TA calls, current permission/SELinux limits, and CI work to catch regressions.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 0:47Prerequisites and setup
- 2:19Enabling OP-TEE on HiKey
- 4:16Local manifests and patches
- 6:21Version selection and patching
- 8:07Main OP-TEE integration patch
- 12:21OP-TEE package configuration
- 15:36Bootloader integration
- 17:29Custom Trusted Applications
- 19:47Testing and limitations
- 22:25Calling OP-TEE from Android apps
- 25:22Common issues and fixes
- 26:45Future improvements
related talks
11mOP-TEE open-source security for the mass-market
34mA Journey To the Secure World of OPTEE From the Non-secure World of Linux
50mUsing OP-TEE as a Cryptography Engine
40mOP-TEE: When Linux Loses Control
41mOP-TEE - Using TrustZone to Protect Our Own Secrets
26mSecurity WG Lightning talks
17mEnhancing OP-TEE for RISC-V: Leveraging IOPMP and Enabling RTOS Integration
24mSecure boot, TEEs, different OSes and more