Abstract:To ensure secure and trustworthy execution of applications in potentially insecure environments, vendors frequently embed trusted execution environments (TEE) into their systems. Applications executed in this safe, isolated space are protected from adversaries, including a malicious operating system. TEEs are usually build by integrating protection mechanisms directly into the processor or by using dedicated external secure elements. However, both of these approaches only cover a narrow threat model resulting in limited security guarantees. Enclaves nested into the application processor typically provide weak isolation between the secure and non-secure domain, especially when considering side-channel attacks. Although external secure elements do provide strong isolation, the slow communication interface to the application processor is exposed to adversaries and restricts the use cases. Independently of the used approach, TEEs often lack the possibility to establish secure communication to peripherals, and most operating systems executed inside TEEs do not provide state-of-the-art defense strategies, making them vulnerable to various attacks. We argue that TEEs, such as Intel SGX or ARM TrustZone, implemented on the main application processor, are insecure, especially when considering side-channel attacks. In this paper, we demonstrate how a heterogeneous multicore architecture can be utilized to realize a secure TEE design. We directly embed a secure processor into our HECTOR-V architecture to provide strong isolation between the secure and non-secure domain. The tight coupling of the TEE and the application processor enables HECTOR-V to provide mechanisms for establishing secure communication channels between different devices. We further introduce RISC-V Secure Co-Processor (RVSCP), a security-hardened processor tailored for TEEs. To secure applications executed inside the TEE, RVSCP provides hardware enforced control-flow integrity and rigorously restricts I/O accesses to certain execution states. RVSCP reduces the trusted computing base to a minimum by providing operating system services directly in hardware.

HPME: A High-Performance Hardware Memory Encryption Engine Based on RISC-V TEE

MIPE: a Practical Memory Integrity Protection Method in a Trusted Execution Environment.

Dtee: A Declarative Approach to Secure IoT Applications Using TrustZone

Low-Latency PAE: Permutation-Based Address Encryption Hardware Engine for IoT Real-Time Memory Protection

A Reconfigurable Permutation Based Address Encryption Architecture for Memory Security

DITES: A Lightweight and Flexible Dual-Core Isolated Trusted Execution SoC Based on RISC-V

Design and Implementation of Low-Power IoT RISC-V Processor with Hybrid Encryption Accelerator

HECTOR-V: A Heterogeneous CPU Architecture for a Secure RISC-V Execution Environment

An Enclave-based TEE for SE-in-SoC in RISC-V Industry

Efficient Sealable Protection Keys for RISC-V

A Trusted Execution Environment RISC-V System-on-Chip Compatible with Transport Layer Security 1.3

Impact of Memory Hierarchy on Memory Encryption Performance

Bypassing Isolated Execution on RISC-V using Side-Channel-Assisted Fault-Injection and Its Countermeasure

Low-latency DAE: A Configurable Lightweight Hybrid Data and Address Encryption Engine for IoT Real-time NVM Protection

MicroTEE: Designing TEE OS Based on the Microkernel Architecture

A cycle-level recovery method for embedded processor against HT tamper

In-Memory Computing Architecture for Efficient Hardware Security

Enabling Privacy-Preserving, Compute- and Data-Intensive Computing using Heterogeneous Trusted Execution Environment

Cryptographic Key Generation and In Situ Encryption in One‐Transistor‐One‐Resistor Memristors for Hardware Security

Efficient Privacy-Preserving Machine Learning with Lightweight Trusted Hardware

Security Memory System for Mobile Device or Computer Against Memory Attacks