• State Accepted Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 5 replies
  • Subscribers 352 subscribers
  • Views 9082 views
  • Users 0 members are here
2025 survey

We are running a survey to help us improve the experience for all of our members. If you see the survey appear, please take the time to tell us about your experience if you can.

Options
Related
How was your experience today?
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Trust Zone and Virtual Machines / KVM

Sreekumar

Is it possible to for a Virtual Machine to switch the processor to the secure state ?

I have a Linux virtual machine hosted by KVM hypervisor . I plan to run the  WPA2 authentication and other crypto functions in the secure world.  Is this possible in ARMv8A processor ?  So the question boils down to can KVM virtualize the trustzone ? 

Parents
  • 0 in reply to Sreekumar

    The SW running in the VM cannot get out unless the hypervisor provides the possibility  (hypervisor call). You cannot have a TZ in a VM unless you emulate a CPU.

    Edit: As I understand ArmV8.4 (*beurk* I prefer ARMv8.4) allows to have a secure VM. Then you only need a communication channel between the NS-VM and the S-VM. (Sounds mindboggling).

Reply
  • 0 in reply to Sreekumar

    The SW running in the VM cannot get out unless the hypervisor provides the possibility  (hypervisor call). You cannot have a TZ in a VM unless you emulate a CPU.

    Edit: As I understand ArmV8.4 (*beurk* I prefer ARMv8.4) allows to have a secure VM. Then you only need a communication channel between the NS-VM and the S-VM. (Sounds mindboggling).

Children
No data