Trusted Firmware M, Secure Partitioning – Compartmentalization in IoT
summary
Trusted Firmware M implements isolation on microcontrollers using TrustZone for Armv8-M and memory-region protection, with a working open-source Secure Partition Manager that provides isolated threads and notifications of non-secure context changes. It supports two concrete models: the low-footprint library model (synchronous function calls) and the IPC-based thread model (static allocation, message passing). The implementation handles secure interrupts by stacking secure context, offers per-nonsecure-client secure stacks, and is available as a reference in TF‑M.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 0:40Challenges
- 2:05Level of Security
- 5:03Interaction scenarios
- 6:34Simple use case
- 8:41Nonsecure execution
- 14:36Programming models
- 16:59Interaction implementation
- 21:20Nonsecure processing environment
- 23:24Example
- 26:50Solution
- 34:02Summary
related talks
23mTrusted Firmware M – what’s cooking?
57mTrusted Firmware M : Core and Partition Manager
41mTrusted Firmware M: Introduction
51mTrusted Firmware M : Secure Storage
26mKeynote: Trusted Firmware – Build Security Collaboratively
01h 03mTrusted Firmware M : Trusted Boot
08mSecure Debug IoT on v8-M Cortex-M33
27mMay the Trust be with You: Empowering TrustZone-M with Multiple Trusted Environments