This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

TrustZone service API

最近,开始研究ARM TrustZone技术。

我已经在ARM官网上下载到普通世界中客户端API:TrustZone Software API Specification 3.0。

下载地址:https://silver.arm.com/browse/BX011

规范第7页结构图1中secure world部分里service API如图所示。

一直没找到安全世界中的TrustZone service API标准规范,请问从哪里可以下载到呢?

谢谢!


Parents
  • Hi,

    Sorry for the reply in English, but I hope I can answer your question here =)

    The TrustZone API provided by ARM is just an interface specification for an interface from a "Normal world" application running in the main operating system to access security services in a "Secure world". Wangyong is correct - this API has since been donated to the GlobalPlatform standards body, and is now called the "TEE Client API Specification".*

    Neither the TrustZone API nor the TEE Client API place any constraints on what the security environment is - so there is no single "Secure services API" - that API depends on what security environment you are interfacing with; it will be vendor specific unless that vendor is using a standard API. GlobalPlatform has another API which the security environment developers might use - TEE Internal Core API Specification - but it is not mandatory that they do so.

    Hope that helps,
    Pete

    * TEE = Trusted Execution Environment

Reply
  • Hi,

    Sorry for the reply in English, but I hope I can answer your question here =)

    The TrustZone API provided by ARM is just an interface specification for an interface from a "Normal world" application running in the main operating system to access security services in a "Secure world". Wangyong is correct - this API has since been donated to the GlobalPlatform standards body, and is now called the "TEE Client API Specification".*

    Neither the TrustZone API nor the TEE Client API place any constraints on what the security environment is - so there is no single "Secure services API" - that API depends on what security environment you are interfacing with; it will be vendor specific unless that vendor is using a standard API. GlobalPlatform has another API which the security environment developers might use - TEE Internal Core API Specification - but it is not mandatory that they do so.

    Hope that helps,
    Pete

    * TEE = Trusted Execution Environment

Children