blocks|key|3118227|text|据我所知，所有现成的OMAP处理器都是GP设备，即禁用了TrustZone功能(或者它们是生产设备中的处理器，比如现成的手机，您没有获得密钥)。其他SoC厂商的情况也类似。除了ARM的有限出版物(它只涵盖通用的ARM功能，而不是特定于芯片的功能，如内存管理细节，引导和加载可信代码)，所有关于TrustZone功能的文档都属于保密协议。这是一种遗憾，因为它排除了对这些安全功能的独立分析或开源软件的影响。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3118228|我担心，如果你想为TrustZone设备编程，你必须联系TI的代表或他们的竞争对手，让他们相信你的应用程序是他们想要发生的事情，并获得HS设备，为你的开发板签名代码的密钥，以及文档，如果没有这些文档，你将非常困难。|3118229|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

As far as I know, all the OMAP processors you can get off-the-shelf are GP devices, i.e. with the TrustZone functions disabled (or else they're processors in production devices such as off-the-shelf mobile phones, for which you don't get the keys). The situation is similar with other SoC manufacturers. Apart from ARM's limited publications (which only cover the common ARM features anyway, and not the chip-specific features such as memory management details, booting and loading trusted code), all documentation about TrustZone features comes under NDA. This is a pity because it precludes independent analysis of these security features or leverage by open-source software.

I'm afraid that if you want to program for a TrustZone device, you'll have to contact a representative of TI or one of their competitors, convince them that your application is something they want to happen, and obtain HS devices, the keys to sign code for your development boards, and the documentation without which you'll have a very hard time.

blocks|key|4733604|text|到今天为止，OP-TEE可以在相当多的设备上运行(参见OP-TEE+platforms+supported)，其中有几个是现成的开发板。举几个例子，HiKey，Raspberry+Pi3，ARM+Juno+Board，飞思卡尔i.MX6变种等等。你可以选择其中的一个，或者你可以简单地使用QEMU，也就是very+well+supported+in+OP-TEE。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4733605|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/OP-TEE/optee_os#3-platforms-supported|1|http://www.globalplatform.org/TEEevent/media_center_blog_jbech.asp^0|R|Q|0|48|T|1|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]|$A|R|B|S|1|T]]|C|$]]|$1|D|3|-4|5|6|7|U|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]|L|$5|G|H|I|C|$J|M]]]]

As of today OP-TEE runs on quite a few devices (see <a href="https://github.com/OP-TEE/optee_os#3-platforms-supported" rel="nofollow noreferrer">OP-TEE platforms supported</a>) and several of them are development boards readily available. To name a few HiKey, Raspberry Pi3, ARM Juno Board, Freescale i.MX6 variants etc. Either you could pick up one of those or you could simply try it all using QEMU which is <a href="http://www.globalplatform.org/TEEevent/media_center_blog_jbech.asp" rel="nofollow noreferrer">very well supported in OP-TEE</a>.

blocks|key|3118297|text|你可以获得45天试用版的ARM快速模型。RaspberyPI也应该支持TrustZone。www.openvirtualization.org拥有ARM+TrustZone的完全开源实现。ARM正在从其专有的TrustZone+API转向globalplatform+API。GlobalPlatform还定义了用于进程间通信等的API。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3118298|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

You can get 45 days trial version for ARM fastmodels. RaspberyPI is supposed to support TrustZone too. www.openvirtualization.org has full open source implementation of ARM TrustZone. ARM is moving away from its proprietary TrustZone APIs to globalplatform API. GlobalPlatform also defines the APIs for Inter process communication etc.

blocks|key|3118387|text|目前有一些精选的主板允许使用TrustZone进行开发。就通用板而言，FriendlyARM板是一个良好的开端(http://www.friendlyarm.net)。此外，任何配备Cortex+A15处理器的主板都必须具有可用的TrustZone，因为虚拟化扩展只能在普通环境中使用。可能仍然会有一个问题，即制造商是否有自己的代码在安全的世界中运行，但您可以随时尝试。Arndale是一个很好的开发板，但不幸的是，三星已经在安全的世界中运行了代码，所以当你获得访问权限时，你已经在正常的世界中运行了。因此，如果您需要安全的全球访问，请寻找非三星的Cortex+A15处理器。那是你最好的选择。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3118388|同样值得注意的是，TI在技术上并没有禁用TrustZone。相反，在将执行切换到U-boot之前，boot+to代码会将处理器转换到正常状态。因此，它实际上是使用TrustZone来迁移到正常世界，但并没有提供一种机制来迁移回安全世界。为了证明这一点，只需尝试读取SCR，您将得到一个未定义的异常，这通常是在正常情况下发生的。但是，如果您执行SMC调用，它将按预期执行(即，它切换到安全世界，但随后只是切换回正常世界)，因此看起来什么都没有发生。|3118389|entityMap|0|LINK|mutability|MUTABLE|url|http://www.friendlyarm.net/^0|1K|Q|0|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]]|C|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|C|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]]]

There are a few select boards at this time that do allow development with TrustZone. As far as general purpose board, the FriendlyARM board is a good start (<a href="http://www.friendlyarm.net" rel="nofollow">http://www.friendlyarm.net</a>). Also, any board with a Cortex A15 processor must have TrustZone available due to the fact that the virtualization extensions can only be utilized from the Normal world. There may still be a question of whether or not the manufacturer has their own code running in the Secure world, but you can always try. The Arndale is a good development board, but unfortunately Samsung already has code running in the Secure world, so by the time you get access, you're running in the Normal world. So if you need Secure world access, look for non-Samsung, Cortex A15 processors. That'd be your best bet.

It's also worth noting the TI did not technically disable TrustZone. Instead, the bootrom code transitions the processor into the Normal world prior to switching execution to U-boot. So it's actually using TrustZone to move to the Normal world, but then doesn't provide a mechanism for moving back to the Secure world. To prove this, just try to read the SCR and you'll get an undefined exception, which is what will typically happen from the Normal world. However, if you perform a SMC call, it will execute just as expected (i.e., it switches to the Secure world, but then just switches right back to the Normal world), so it looks like nothing happened.

blocks|key|3118355|text|关于开放虚拟化，它可以移植到arm开发板，如samsung+Exynos4xxx。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3118356|如果你使用开放虚拟化，你将可以访问所有的源代码，包括安全的操作系统。但如果您只是想开发使用trustzone的程序，我想知道是否有必要这样做。也许有标准的驱动程序或api可以让你不用担心编译自己的安全操作系统就可以做到这一点？|3118357|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

regarding openvirtualization, it can be ported to arm development board like the samsung exynos 4XXX.

you will have access to all source code including the secure os if you use openvirtualization.
but if you just want to develop programs that use the trustzone, I wonder if it is necessary. maybe there are standard driver or api that allow you to do it without worrying about compiling your own secure os?

blocks|key|3118282|text|你能做的最好的事情就是联系像Gemalto这样的人和带来Mobicore的人。请注意，他们确实会要求您签署保密协议。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3118283|其次，您可以购买ARM+DS5开发套件。它附带了很多文档，包括一些关于trustzone的文档。|3118284|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

the best thing you can do is contact parties like Gemalto and the people that brought Mobicore. Note that they will indeed ask you to sign an NDA.

Secondly, you can buy the ARM DS5 development suite. This comes with a lot of documentation including some on trustzone.

blocks|key|4733593|text|你真的应该从逆向路径看一看USB军火库：http://www.inversepath.com/usbarmory.html|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4733594|它构建在开放的硬件和开源的基础上，可以完全访问信任区(您可以熔断芯片熔丝以实现安全引导)：https://github.com/inversepath/usbarmory|4733595|他们成功地在TZ中运行了Genode，在正常世界中运行了Linux。|4733596|entityMap|0|LINK|mutability|MUTABLE|url|http://www.inversepath.com/usbarmory.html|1|https://github.com/inversepath/usbarmory^0|K|15|0|0|19|14|1|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@$A|S|B|T|1|U]]|C|$]]|$1|D|3|E|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]]|C|$]]|$1|F|3|G|5|6|7|Z|8|@]|9|@]|C|$]]|$1|H|3|-4|5|6|7|10|8|@]|9|@]|C|$]]]|I|$J|$5|K|L|M|C|$N|O]]|P|$5|K|L|M|C|$N|Q]]]]

You should really take a look at the USB armory from Inverse Path: <a href="http://www.inversepath.com/usbarmory.html" rel="nofollow">http://www.inversepath.com/usbarmory.html</a>

It's built on open hardware and open source with full access to Trustzone (you can blow in die fuse to enable secure boot): <a href="https://github.com/inversepath/usbarmory" rel="nofollow">https://github.com/inversepath/usbarmory</a>

They successfully ran Genode within TZ and Linux in the normal world.

I am wondering if anyone have any information on development boards where you can utilize ARM TrustZone? I have the BeagleBoard XM which uses TI's OMAP3530 with Cortex-A8 processor that supports trust zone, however TI confirmed that they have disabled the function on the board as it is a general purpose device.

Further research got me to the panda board which uses OMAP4430 but there is no response from TI and very little information on the internet. How do you learn how to use trust zone?

Best Regards
Mr Gigu

ARM TrustZone development

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云AI代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

功能1上新10个字符

功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符功能2描述100个字符。

功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符功能2上新100个字符。

功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符功能5描述100个字符

功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符功能5上新100个字符

功能4上新

文章&问答评论现已支持表情

全新交互，全新视觉，新增快捷键、悬浮工具栏、高亮块等功能并同时优化现有功能，全面提升创作效率和体验

社区富文本编辑器全新改版！诚邀体验～ 

精选全网热门MCP server，让你的AI更好用 🚀

💥开发者 MCP广场重磅上线！

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

我想知道是否有人有任何可以使用ARM TrustZone的开发板的信息？我有BeagleBoard XM，它使用TI的OMAP3530和支持信任区的Cortex-A8处理器，但是TI确认他们已经禁用了主板上的功能，因为它是一个通用设备。进一步的研究让我找到了使用OMAP4430的panda board，但TI没有回应，互联网上的信息也很少。如何学习如何使用信任区？向Gigu先生致以最良好的问候

问ARM TrustZone开发
EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问ARM TrustZone开发EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问ARM TrustZone开发
EN