op-tee

This repository contains the code for a fuzzing prototype for the OP-TEE system call interface using AFL.

Trusted Gateway: hardened router architecture with ARM TrustZone protected firewall, routing, and NIC modules.

Plug & Trust middleware to use secure element SE050

Tutorial and base project: TEE on AMD Zynq UltraScale+ using Arm TrustZone

A TEE solution for Raspberry Pi using OP-TEE, built on TF-A, U-Boot, and buildroot. This is our implementation to get a version of this working, and is not supported by the above projects.

Why Linux IMA can't extend TPM PCR[10] on NVIDIA Jetson AGX Orin — the fTPM is userspace/RPMB-gated (a known OP-TEE limitation, fixed in Linux 6.12). Root-cause analysis, evidence, and a TA-signed IMA-log attestation approach.

DBStore trusted service and demo of the HCE Mobile Ticketing application

Testing the security of an OP-TEE installation

Practical group work made for Secure Execution Environments @ UA - Portugal.

Post Quantum Cryptography in OP-TEE

Example of an encrypted connection via TLS with mutual authentication using X.509 certificates

Indigenous Hardware Root-of-Trust continuum: trusted boot, transparency-gated firmware updates and attested device identity for desktop, embedded and IoT.

Reference builds for meta-laavat: kas configs that build and boot QEMU and i.MX8M Mini images signed through the LAAVAT signing service.

Twenty embedded Linux projects on one bench: one Yocto layer, one cross SDK, one entry point. Source rather than images, and ./go check proves what needs no hardware in about two minutes. Board measurements are published with their provenance, including the criteria that were measured and not met.

Upstream-first Buildroot external tree for STM32MP135D, targeting the MyIR MYD-YF135-256N-256D SOM

Yocto/OpenEmbedded layer that signs build artifacts with the LAAVAT Signing Solution from inside bitbake: generic files, i.MX HAB/AHAB, Xilinx bootgen, kernel FIT with key placed in U-Boot, OP-TEE TAs and RAUC bundles. Ships the signing-tool client recipe.