Securing peripherals in TrustZone

[kanimozhi_t]

Hi,

Our objective is to secure the I/O and peripherals (USB, serial port, etc.,) with TrustZone. We've already enabled the OP-TEE on our i.MX 6UL EVK and verified that the test cases pass.

Now I need help with the following:

1. How the port restriction can be done with the help of TrustZone?

2. Can it be done during run-time? (i.e., can the security state of an I/O or a peripheral be changed dynamically?)

Thanks in advance.

[Juan-Rodarte]

Hi

Information about TrustZone and OP-TEE can be found in the OP-TEE documentation. I share the link.

https://optee.readthedocs.io/en/latest/

Best regards,
Diego.

[kanimozhi_t]

Thank you for sharing the document, BTW can you point us to some of the resources on securing the peripherals?

[Juan-Rodarte]

You could check the cryptography implementation section.