Under construction…
OP-TEE is an open-source.
A secure world OS
Run at ARM secure mode
Run secure applications.Open Portable Trusted Execution Environment, or OP-TEE, is an open-source project that provides a Trusted Execution Environment (TEE) for secure computing on ARM-based processors. A TEE is a secure area within a processor that ensures the confidentiality and integrity of the code and data running inside it. OP-TEE specifically targets ARM TrustZone technology, which is a hardware-based security feature available on ARM Cortex-A processors.
The OP-TEE image is loaded by x-boot from the boot storage and is invoked within TF-A.
Key features
Trusted Applications (TAs): OP-TEE allows the development and execution of Trusted Applications, which run in the TEE. These applications benefit from a higher level of security and isolation compared to regular applications running in the Rich Execution Environment (REE).
GlobalPlatform TEE Standard: OP-TEE follows the GlobalPlatform TEE standard, providing a standardized interface for communication between the Rich Execution Environment (REE) and the Trusted Execution Environment (TEE). This standardization ensures portability and interoperability across different platforms and implementations.
TEE Core: The TEE Core is the heart of OP-TEE, responsible for managing the TEE and executing trusted applications. It enforces security boundaries and provides services such as secure storage, cryptographic operations, and secure inter-process communication.
TEE Internal APIs: OP-TEE defines internal APIs that allow developers to access various TEE functionalities, including cryptographic services, secure storage, and secure communication between trusted applications.
TEE Client APIs: For communication between the Rich Execution Environment (REE) and the TEE, OP-TEE provides client APIs. These APIs allow applications running in the REE to securely invoke services provided by Trusted Applications in the TEE.
OP-TEE is widely used in various applications, including mobile devices, Internet of Things (IoT) devices, and other systems where the secure execution of code and protection of sensitive data are critical. As an open-source project, OP-TEE encourages collaboration and contributions from the community to enhance its security features and support a broader range of ARM-based platforms.
Files
Folders | Descriptions |
optee/ | Root folder of OP-TEE |
optee_client/ | |
optee_os/ | |
x