topic Re: Securing peripherals in TrustZone in i.MX Processors

Securing peripherals in TrustZone

kanimozhi_t — Mon, 02 Aug 2021 10:10:55 GMT

Hi,

Our objective is to secure the I/O and peripherals (USB, serial port, etc.,) with TrustZone. We've already enabled the OP-TEE on our i.MX 6UL EVK and verified that the test cases pass.

Now I need help with the following:

1. How the port restriction can be done with the help of TrustZone?

2. Can it be done during run-time? (i.e., can the security state of an I/O or a peripheral be changed dynamically?)

Thanks in advance.

Re: Securing peripherals in TrustZone

Juan-Rodarte — Tue, 10 Aug 2021 20:39:55 GMT

Information about TrustZone and OP-TEE can be found in the OP-TEE documentation. I share the link.

https://optee.readthedocs.io/en/latest/

Best regards,
Diego.

Re: Securing peripherals in TrustZone

kanimozhi_t — Wed, 15 Sep 2021 08:34:05 GMT

Thank you for sharing the document, BTW can you point us to some of the resources on securing the peripherals?

Re: Securing peripherals in TrustZone

Juan-Rodarte — Fri, 17 Sep 2021 17:03:07 GMT

You could check the cryptography implementation section.