Development of TEE and Secure Monitor Code
There are a wide variety of possible software architectures for the secure world, and the implementation of these is almost totally dependent on the application the user is targeting.
A simple implementation may be focused on protecting a single asset which was implemented in a protected factory environment, such as authentication of a single secret. This requires a simple solution comprising of a lightweight secure kernel and integration of the monitor for switching between normal and secure domains.
Alternatively the system architect may be looking for a robust and long term solution where trusted applications are appended over the lifetime of the device, for example in a mobile handset or tablet. In this case the designer may opt for a Trusted Execution Environment which mimics many of the dynamic functions of a traditional OS, including sandboxing of applications, while remaining small enough to be certified.
Due to the inherent complexity of implementing a full Secure OS, and the potential need to certify its capabilities and performance, Arm recommends investigating commercial TEE solutions from Trusted OS suppliers that are members of GlobalPlatform. However if partners require a simpler solution, or are investigating building their own TEE, then we recommend they start by reviewing example code for the Secure Monitor.
Armv6* & Armv7-A** example code available here or via Arm.com >> Support >> FAQ and Knowledge Articles
Armv8-A*** example code available here
Note: You will be required to accept the EULA before downloading.
An extensive list of documentation for review when designing or investigating a Trusted Execution Environment is available here
TEE & TrustZone Commitments
Arm is committed to open ecosystems, and believes that innovation happens best when you set engineers around the world free to design the future. As part of their commitment to openness when Arm formed Trustonic, a TEE vendor, in partnership with Gemalto and Giesecke & Devrient, Arm agreed to a set of open commitments with the European Union and MOFCOM (China Ministry of Commerce) to ensure an open environment. To ensure that useful “TrustZone Information” is provided to all TEE providers on an equitable basis Arm maintains a list of companies developing TEEs. You can use the “Inform Arm…” form below to be added to this list.
Inform Arm that you are a TEE developer
Details of licensing terms and contacts under EU commitments
Details of licensing terms and contacts under MOFCOM (China) commitments
The commitments given to both the European Commission and MOFCOM are broadly as follows:
- Arm will continue to enable the open development of secure systems by supporting TrustZone Secure Monitor Code for Armv6 and Armv7-A architectures;
- Arm will continue to enable the open development of future secure systems by supporting TrustZone Secure Monitor Code for Armv8-A architecture;
- Arm will continue to ensure all ecosystem partners have fair access to any future versions of the Secure Monitor Code example;
- Arm will continue to make available all information required to develop a Trusted Execution Environment under fair, reasonable and non-discriminatory licensing terms; and
- Arm will continue to ensure than all IP created supports the ecosystem equally.
Find information on the ruling from the European Commission here
TEE & TrustZone Contact Information
As an interested party if you have any concerns that Arm may accidently be in breach of these commitments, or otherwise, you have the opportunity to report such breaches here. A member of Arm will then contact you to understand your concern, and resolve the matter within 15 business days. Your notification will also be provided to the Monitoring Trustee who will overview the resolution and, if not resolved after eight working days, will also propose their own proposal to resolve the matter.
Alternatively, if you have any general queries related to the Commitments you may contact Arm on the same email address above or one of the Monitoring Trustees on the details provided below:
European Commission
Grant Thornton is approved by the Commission to monitor Arm’s compliance to commitments.
Mr. Mark Byers
Grant Thornton UK LLP, 30 Finsbury Square, London EC2P 2YU
Tel: +44 2073835100
Email: Arm.EC.Monitoring.Trustee@uk.gt.com
China MOFCOM
Grant Thornton is approved by MOFCOM to monitor Arm’s compliance to commitments.
Dongdong Liu
Grant Thornton
10th Floor, Scitech Place
22 Jianguomenwai Avenue
Chaoyang District
Beijing 100004, China
Email: dongdong.liu@cn.gt.com
* Armv6 processors with TrustZone technology is limited to Arm1176JZ(F)-S
**Armv7-A processors include Cortex-A5, Cortex-A7, Cortex-A8, Cortex-A9, Cortex-A12, and Cortex-A15
***Armv8 processors include Cortex-A53 and Cortex-A57