444
Conf idential
TrustZone is a Framework
You can not
Put your current operating system on a TrustZone capable processor
and find it is miraculously “SECURE”
Add TrustZone software to an operating system and have magical
security
Change to an ARM1176JZ-S™ processor, add TrustZone software,
make no other hardware changes, and expect the system to be secure
You must consider the whole package
You must consider what protection profile you need
Software vs hardware attacks
On-SoC vs Off-SoC secret storage
