TrustZone security extension
E72124
TrustZone security extension is ARM's hardware-based security technology that creates isolated execution environments to protect sensitive code and data on system-on-chip devices.
Observed surface forms (4)
| Surface form | Occurrences |
|---|---|
| ARM Secure Monitor | 1 |
| ARM TrustZone | 1 |
| Android StrongBox Keymaster | 1 |
| TrustZone security extensions | 1 |
Statements (51)
| Predicate | Object |
|---|---|
| instanceOf |
ARM architecture extension
ⓘ
hardware-based security technology ⓘ |
| alsoKnownAs |
TrustZone security extension
ⓘ
surface form:
ARM TrustZone
|
| appliesTo |
ARM-based processors
ⓘ
system-on-chip devices ⓘ |
| basedOn | ARM processor privilege and security states ⓘ |
| componentOf | ARM security architecture ⓘ |
| controls |
access to memory
ⓘ
access to peripherals ⓘ access to system resources ⓘ |
| developer |
Arm Ltd.
ⓘ
surface form:
Arm Limited
|
| enforces |
secure and non-secure address spaces
ⓘ
security boundaries between software components ⓘ |
| introducedIn | ARMv6 architecture family ⓘ |
| introduces |
normal world
ⓘ
secure world ⓘ |
| provides |
hardware-enforced isolation
ⓘ
isolated execution environment ⓘ |
| purpose |
enable secure services on general-purpose systems
ⓘ
protect sensitive code ⓘ protect sensitive data ⓘ support trusted execution ⓘ |
| relatedTo |
TrustZone security extension
self-linksurface differs
ⓘ
surface form:
ARM Secure Monitor
GlobalPlatform ⓘ
surface form:
GlobalPlatform TEE specifications
Trusted Execution Environment ⓘ |
| requires |
hardware support in CPU
ⓘ
software support in firmware ⓘ software support in operating system ⓘ support in memory controller ⓘ support in system interconnect ⓘ |
| securityProperty |
hardware isolation between secure and non-secure worlds
ⓘ
reduced trusted computing base for secure applications ⓘ resistance to software attacks from normal world ⓘ |
| supportedIn |
ARMv7-A architecture
ⓘ
ARMv8-A ⓘ
surface form:
ARMv8-A architecture
ARMv9-A ⓘ
surface form:
ARMv9-A architecture
|
| supports |
device attestation
ⓘ
digital rights management ⓘ secure boot ⓘ secure key storage ⓘ secure payment applications ⓘ trusted execution environment ⓘ |
| usedBy |
Android device security architectures
ⓘ
Qualcomm Secure Execution Environment ⓘ Samsung Knox ⓘ |
| usedIn |
Internet of Things devices
ⓘ
automotive systems ⓘ embedded systems ⓘ mobile devices ⓘ networking equipment ⓘ set-top boxes ⓘ |
Referenced by (5)
Full triples — surface form annotated when it differs from this entity's canonical label.
this entity surface form:
ARM TrustZone
this entity surface form:
ARM Secure Monitor
this entity surface form:
TrustZone security extensions
subject surface form:
Titan M
this entity surface form:
Android StrongBox Keymaster