Incubator Teaclave Trustzone Sdk Versions Save

This is the second Apache Incubator release of Teaclave TrustZone SDK. Teaclave TrustZone SDK provides abilities to build safe TrustZone applications in Rust. The SDK is based on the OP-TEE project which follows GlobalPlatform TEE specifications and provides ergonomic APIs. In addition, it enables the capability to write TrustZone applications with Rust's standard library and many third-party libraries (i.e., crates). Teaclave TrustZone SDK is a sub-project of Apache Teaclave (incubating).

During this period, we are working closely with the OP-TEE community to integrate TA examples written in Rust into the upstream repository. You can try and play with the examples written in Rust with Teaclave TrustZone SDK since the OP-TEE 3.15.0 release.

More specifically, in this release we have the following updates:

Features

• Add support for tee-supplicant loadable plugins and examples
• Add TEE Socket APIs and examples

Enhancements

Integration into OP-TEE

• Add the -rs suffix to examples and update test scripts (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/34)
• Update to OP-TEE 3.14.0 (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/35)
• Update to OP-TEE 3.16.0 (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/59)

Building

• Upgrade building docker to Ubuntu 20.04 (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/33)
• Update Rust toolchain to nightly-2021-09-20 and std to 1.56.1 (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/53)
• Add setup.sh to setup rust environment and initialize submodules (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/40, https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/63)

CI

• Switch to GitHub Actions (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/33)
• Add expect script for OP-TEE CI and fix CI errors (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/45, https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/50)

Bug fixes

• Fix ldelf error of arm32 ta (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/38)
• fix error when making the plugin example second time (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/42)
• Correct toolchain PATH env (https://github.com/apache/incubator-teaclave-trustzone-sdk/pull/44)

Docs

• Add debugging OP-TEE TA doc: Debugging OP-TEE TA
• Add documentation of Rust examples: Overview of OP-TEE Rust Examples
• Polish the getting started documentation

This is the first Apache Incubator release of Teaclave TrustZone SDK. Teaclave TrustZone SDK provides abilities to build safe TrustZone applications in Rust. The SDK is based on the OP-TEE project which follows GlobalPlatform TEE specifications and provides ergonomic APIs. In addition, it enables capability to write TrustZone applications with Rust's standard library and many third-party libraries (i.e., crates). Teaclave TrustZone SDK is a sub-project of Apache Teaclave (incubating).

This version implements the following Rust APIs in GlobalPlatform TEE specifications:

TEE Client API (optee-teec)

• Context
• Error
• Operation
• Parameter
• Session
• UUID

TEE Internal Core API (optee-utee)

• Arithmetical
• Crypto Operation
• Error
• Object
• Parameter
• Time
• Trace

We also provides procedure macros to automatically generate bindings interfaces of TA:

• #[ta_create], #[ta_destroy], #[ta_open_session], #[ta_close_session], #[ta_invoke_command]

This version includes rewrites of all examples from OP-TEE repository. In addition, we include more examples using serde for serialization and deserialization.

This version is compatible with OP-TEE 3.13.0.