3 ms·
Isn't TrustZone inherently evil, though? Isn't its main use to let the megacorps trust that your device won't do what you want and will keep secrets from you?
by josephcsible 3y ago
Isn't TrustZone inherently evil, though? Isn't its main use to let the megacorps trust that your device won't do what you want and will keep secrets from you?
- KerrAvon 3y agoI can't tell if this is sarcasm. TrustZone is a technology for resource isolation. At an extremely high nontechnical level, it's conceptually similar to memory protection.
- josephcsible 3y agoThe problem with TrustZone is that control of it always resides with a megacorp and never with the owner of the device. It's not that it isn't security at all, but rather that it's security against the owner.
- msgilligan 3y agoThe owner can control Trustzone if the device is shipped with unfused OTP registers. On Raspberry Pi for example, you can write the hash of your own public key to locations 47-54 of the OTP memory block: https://www.raspberrypi.com/documentation/computers/raspberry-pi.html#otp-registers https://www.raspberrypi.com/documentation/computers/raspberr... Here's the QuickStart for the entire process: https://github.com/raspberrypi/usbboot/blob/master/secure-boot-example/README.md https://github.com/raspberrypi/usbboot/blob/master/secure-bo... Note that the Raspberry Pi does not have a full TrustZone implementation to protect secure mode memory, etc. But it is a widely available device with good documentation and allows developers to experiment with and learn about the basics of TrustZone architecture.
- josephcsible 3y agoOTP and e-fuses are also evil. Devices should never be forced to become e-waste over them being set "wrong". There should always be a factory reset option that clears everything.
- PennRobotics 3y agoHow do you propose patching security vulnerabilities in deployed devices?
- AnthonyMouse 3y agoWhy would that require fuses? You store the firmware in flash, which can be updated to a newer version, restored to the original version or replaced entirely with third party firmware by the device's owner if the OEM fails to patch it, e.g. because they go out of business.
- sweetjuly 3y agoWhat are you talking about? TrustZone is an ISA feature which lets you mark certain pages as "secure only". Compliant devices with SMMUs should not allow any access to these pages except when initiated by the secure world. It's not some big evil plan by Arm. It's up to vendors how they use it. Many just use it for key storage and verifying biometric data so that even a compromised kernel can't trivially steal the most sensitive data on a device. If you start building your own hardware and/or buy devices with unlocked bootloaders, you can load whatever you want in EL3 to play with TZ. This isn't a problem with TZ.
- msgilligan 3y agoThis shouldn't be downvoted. It is a legitimate question and widely held misconception that is addressed in several of the responses to parent.
- tremon 3y agoTrustZone doesn't run on a separate processor like the x86 TPM. It's more like a hypervisor-level ring fence than a coprocessor.