OP-TEE - Using TrustZone to Protect Our Own Secrets
TalkinGermanat Open Source Summit Europe + Embedded Linux Conference Europe 2017 · 2017-10-23..10-26·
summary
OP-TEE explains using ARM TrustZone (v7/8) to run small trusted applications separate from Linux to protect secrets like VPN keys, emulate a TPM, or guard licenses. It describes the open-source OP-TEE implementation and the standardized Linux 4.12 interface that enable protected secure storage and isolated trusted apps, while noting remaining gaps in device-specific drivers, key provisioning, and some storage and boot integration.
AI-written summary · about
chapters (12)
- 0:00TrustZone and OP-TEE intro
- 3:56TrustZone system protection
- 7:29Hardware/software integration
- 13:18OP-TEE project
- 17:18Linux user space apps
- 20:07Secure bootloader
- 23:54Secure storage challenges
- 27:27Implementation and security
- 31:47Formal verification demo
- 35:57Multi-core trusted apps
- 37:30Hardware locking
- 40:27Hypervisors and user security
related talks
11mOP-TEE open-source security for the mass-market
40mOP-TEE: When Linux Loses Control
48mOP-TEE: Using the ARM Trust-Zone to Control Tamper Resistant Processors
50mUsing OP-TEE as a Cryptography Engine
34mA Journey To the Secure World of OPTEE From the Non-secure World of Linux
24mSecure boot, TEEs, different OSes and more
27mvTZ: Virtualizing ARM TrustZone
39mSoftware Supply Chain Security with Trusted Execution Environment Provisioning (T...