Exploring TrustZone on low-end hardware

You can find my project proposal link with a more detailed explanation of the project and a rough timeline here

Trustzone is ARM's secure execution environment, it provides "hardware enforced" isolation to embedded computers. Trustzone has been adopted as the security option for embedded applications that deal with sensitive information.

Hardware

The availability, cost and widespread adoption has made the RaspberryPI the go-to platform for rapid development or prototyping on low-end hardware. We will first try using the RPI 3B+ but other board options are available.

OP-TEE is a trusted execution environment (TEE) and is built on top of Trustzone. A port of OP-TEE to Raspberry PI 3B+ was first done by Sequitur Labs and instructions are here.

External Resources

  • Performance Evaluation of OP-TEE on Raspberry PI3 paper
  • Building an application for OP-TEE - here