Lightning Talk: A Trusted OS for RISC-V ? OP-TEE is a Candidate
summary
Claims a working port of OP-TEE on RISC-V that boots via U-Boot, loads openSBI, runs OP-TEE in S-mode and Linux in the rich world, and executes a trusted application performing a cryptographic operation. Port adds SBI-based kernel driver switches, implements a openSBI security monitor extension to create/destroy enclaves, and requires three privilege levels, PMP and an MMU. Compatibility tests with multiple TAs show good results and upstream patches are in progress; a sample TA crypto call succeeded.
AI-written summary · about
chapters (5)
related talks
40mOP-TEE: When Linux Loses Control
17mEnhancing OP-TEE for RISC-V: Leveraging IOPMP and Enabling RTOS Integration
09mDemo: Facilitating Trusted Application Migration to RISC-V
11mOP-TEE open-source security for the mass-market
39mHands-on OP-TEE with Andes RISC-V
34mA Journey To the Secure World of OPTEE From the Non-secure World of Linux
26mSecurity WG Lightning talks
41mOP-TEE - Using TrustZone to Protect Our Own Secrets