STM32 MPU OP-TEE overview

1. What's OP-TEE[edit source]

Zoom out to OpenSTLinux distribution

OP-TEE is an open source SW component hosted by [Firmware] organisation. It allows the development and integration of services and applications running on Cortex-A trusted execution environment (also called secure context), that is isolated from Cortex-A non-secure context running the Linux® -based OS.

Description extracted from the OP-TEE site[1]:

"OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. OP-TEE implements TEE Internal Core API v1.1.x which is the API exposed to Trusted Applications and the TEE Client API v1.0, which is the API describing how to communicate with a TEE. Those APIs are defined in the GlobalPlatform API specifications."
Warning white.png Warning
In STM32MP software deliveries, OP-TEE allow to implement trusted service and is also used a resource manager for resources that a under secure world control as per STM32MP chip design. Platform can configure OP-TEE to only act as resource manager or to act as both a resource manager and a trusted service provider. Refer to How to configure OP-TEE article for configuring information.

OP-TEE is delivered under a BSD style license and can run secure (trusted) applications, named TAs, without restriction on their licensing model.

For more details about OP-TEE open source project and internal architecture, please refer to OP-TEE overview (name to change)

The OP-TEE project is maintained by the Linaro Security Working Group.

  • OP-TEE official site[1]
  • OP-TEE source repositories [2][3][4]
  • OP-TEE documentation[5]

GlobalPlatform Device TEE specifications (TEE Client API, TEE Internal Core API and few more) are available from the GlobalPlatform site[6].

2. OP-TEE roles in OSTL[edit source]

3. OP-TEE profiles[edit source]

  1. ↑ 1.0 1.1 https://op-tee.org
  2. ↑ https://github.com/OP-TEE/optee_os
  3. ↑ https://github.com/OP-TEE/optee_client
  4. ↑ https://github.com/OP-TEE/optee_test
  5. ↑ https://optee.readthedocs.io/
  6. ↑ https://globalplatform.org/

Open portable trusted execution environment

Cortex®

Linux® is a registered trademark of Linus Torvalds.

Operating system

Trusted execution environment

Arm® is a registered trademark of Arm Limited (or its subsidiaries) in the US and/or elsewhere. Arm logo.png

TrustZone®
Arm® and TrustZone® are registered trademarks of Arm Limited (or its subsidiaries) in the US and/or elsewhere.

Application programming interface

Retrieved from "https://wiki.st.com/stm32mpu/index.php?title=STM32_MPU_OP-TEE_overview&oldid=101096"
No categories assignedEdit