Penglai Enclave:RISC-V chip and system security solutions
Expandable TEE system with hardware and software co-isolation
"Penglai" is an extensible TEE system based on RISC-V. Unlike existing systems, Penglai extends existing RISC-V hardware primitives to support scalability of isolated environments through hardware-software collaboration. In order to achieve the generality of software trust base, the Penglai architecture has designed a layer of "security primitive" interface in the security monitor and the specific hardware primitive. The management logic of trusted environment instances will be implemented on this generic interface, without caring about specific hardware isolation and protection mechanisms. Specifically, the current Penglai system implementation is based on a new RISC-V instruction set extension: the s-mode Physical Memory Protection (sPMP) mechanism, which allows scalable physical memory protection in the TEE OS or Secure monitor.In addition to the sPMP hardware extension, Penglai also supports Enclave protection via the existing physical memory isolation mechanism.
Software and hardware full stack definable
TEE protection granularity is configurable
Software and hardware co-optimization
TEE NSSDK/TEE_TA SDK: Provides development packages related to interaction between secure applications (Enclave) and non-secure applications, interaction between secure applications, etc.
Support mainstream encryption and decryption, signature verification and hash algorithms (including SM2/SM3/SM4).
TEE Security Enhanced SSL/TLS Protocol.
Support PSA, GP two styles of API.
On December 31, 2019, IPADS and TrustKernel announced the official open source of "Penglai": a trusted execution environment for the RISC-V platform. If you have concerns, ideas, code or any other questions, please feel free to contact us or submit your proposal. We welcome every developer to explore the world of security with us. The following is specific open source information:
Copyright © 2013-2021 TrustKernel Team, Shanghai Pingbo Info Tech
Co., Ltd., All Rights Reserved |