Trusted Firmware M : Core and Partition Manager
summary
Trusted Firmware M ships a prototype reference for PSA Level 1 on Cortex‑M33 that implements a TF‑M core plus a Partition Manager, secure bootloader and secure storage; it enforces a non-reentrant secure environment so only one secure request runs at a time, models secure partitions as stateless libraries (not threads), and uses TrustZone‑M features plus the secure MPU for isolation. Ports exist for MPS2 FVP and Cortex‑M33/M23 targets and demos with FreeRTOS/Zephyr; higher isolation levels, IRQ handling and preemption remain work in progress.
AI-written summary · about
chapters (10)
- 0:00Introduction to TF-M
- 1:35PSA and TF-M overview
- 8:57TrustZone for Armv8-M basics
- 18:55TF-M core and partition manager
- 25:23Memory layout and isolation
- 32:49PSA isolation levels
- 35:48Current TF-M features and plans
- 39:52Target platforms and support
- 47:33Static configuration and reboot
- 56:45Q&A
related talks
39mTrusted Firmware M, Secure Partitioning – Compartmentalization in IoT
23mTrusted Firmware M – what’s cooking?
39mTrusted Firmware M, Secure Partitioning – Compartmentalization in IoT
26mKeynote: Trusted Firmware – Build Security Collaboratively
41mTrusted Firmware Project update
08mSecure Debug IoT on v8-M Cortex-M33
27mZephyr and Trusted Execution Environments
43mDevice Security in IoT