Главная
Study mode:
on
1
Intro
2
The Internet of Things is Here
3
How Do We Store Things Securely?
4
SoC Security Features
5
What is OP-TEE?
6
Outline
7
OP-TEE New Platform Bring-up
8
Background
9
RNG Driver Plan
10
Crypto RNG API
11
Basic Driver Implementation
12
Configuration
13
HW Crypto Accelerators
14
crypto hash.ops
15
Peek into alloc
16
What is drvcrypt?
17
drvcrypt flow
18
Initialization and Registration
19
HW Alloc Implementation
20
HW Context Struct
21
Accessing OP-TEE From Linux
22
Trusted Application
23
What is a TEE Operation?
24
What are TEE Objects?
25
Minimal TA Interface II
26
Minimal AES code
27
Minimal Example Caveats
28
Building a Secure Storage System
29
Storage Application Flow
30
Slot Ops
31
Opening a Slot
32
Remaining TA Pieces
33
Linux Userspace Access Library
34
Linux kernel Integration
35
struct cipher alg
36
OpenSSL Integration
37
PKCS#11
38
Summary
Description:
Explore the use of OP-TEE as a cryptography engine in this comprehensive conference talk. Delve into the challenges of secure storage in the Internet of Things era and learn about SoC security features. Discover the fundamentals of OP-TEE, including new platform bring-up, RNG driver implementation, and hardware crypto accelerators. Examine the process of accessing OP-TEE from Linux, understanding Trusted Applications, and implementing minimal AES code. Gain insights into building a secure storage system, including storage application flow and slot operations. Investigate Linux userspace access libraries, kernel integration, and OpenSSL integration. Conclude with a summary of key takeaways for implementing OP-TEE as a robust cryptography solution.

Using OP-TEE as a Cryptography Engine

Linux Foundation
Add to list