ARM TrustZone 开发 [英] ARM TrustZone development

问题描述

我想知道是否有人有关于可以使用 ARM TrustZone 的开发板的任何信息?我有 BeagleBoard XM，它使用 TI 的 OMAP3530 和支持信任区的 Cortex-A8 处理器，但 TI 确认他们已禁用板上的功能，因为它是通用设备.

I am wondering if anyone have any information on development boards where you can utilize ARM TrustZone? I have the BeagleBoard XM which uses TI's OMAP3530 with Cortex-A8 processor that supports trust zone, however TI confirmed that they have disabled the function on the board as it is a general purpose device.

进一步研究让我找到了使用 OMAP4430 的熊猫板，但 TI 没有回应，互联网上的信息也很少.您如何学习如何使用信任区?

Further research got me to the panda board which uses OMAP4430 but there is no response from TI and very little information on the internet. How do you learn how to use trust zone?

最好的问候吉古先生

推荐答案

据我所知，所有现成的 OMAP 处理器都是 GP 设备，即禁用 TrustZone 功能(否则它们生产设备中的处理器，例如现成的移动电话，您没有获得密钥).这种情况与其他 SoC 制造商类似.除了 ARM 有限的出版物(无论如何只涵盖常见的 ARM 功能，而不是芯片特定的功能，如内存管理细节、启动和加载可信代码)，所有关于 TrustZone 功能的文档都属于保密协议.这是一个遗憾，因为它排除了对这些安全功能的独立分析或开源软件的利用.

As far as I know, all the OMAP processors you can get off-the-shelf are GP devices, i.e. with the TrustZone functions disabled (or else they're processors in production devices such as off-the-shelf mobile phones, for which you don't get the keys). The situation is similar with other SoC manufacturers. Apart from ARM's limited publications (which only cover the common ARM features anyway, and not the chip-specific features such as memory management details, booting and loading trusted code), all documentation about TrustZone features comes under NDA. This is a pity because it precludes independent analysis of these security features or leverage by open-source software.

恐怕如果您想为 TrustZone 设备编程，您必须联系 TI 的代表或其竞争对手之一，说服他们您的应用程序是他们想要发生的事情，并获得 HS 设备、为您的开发板签署代码的钥匙，以及如果没有这些文档，您将很难过.

I'm afraid that if you want to program for a TrustZone device, you'll have to contact a representative of TI or one of their competitors, convince them that your application is something they want to happen, and obtain HS devices, the keys to sign code for your development boards, and the documentation without which you'll have a very hard time.

这篇关于ARM TrustZone 开发的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！