4 ms·
DRM components are already present in TrustZone on phones, https://source.android.com/docs/core/virtualization/whyavf https://source.android.com/docs/core/virtu
by transpute 2y ago
DRM components are already present in TrustZone on phones, https://source.android.com/docs/core/virtualization/whyavf https://source.android.com/docs/core/virtualization/whyavf
> Arm’s TrustZone.. domains are too coarse-grained: only secure and nonsecure.. aren't good enough for dynamic use cases in which resources are allocated on demand.. In addition, the APIs used outside of the Android operating system are fragmented and restrict our ability to deploy use cases at the Android scale, including fundamentals like Keymint and Gatekeeper.
Importantly for user freedom, AVF can allow user-managed VMs (e.g. Debian Linux with root) to run alongside attested VMs with "official" apps.
"Google is preparing to let you run Linux apps on Android, just like Chrome OS", https://news.ycombinator.com/item?id=41816756 https://news.ycombinator.com/item?id=41816756