j-schacht / xilinx_zcu102_trustzone_demo Goto Github PK

View Code? Open in Web Editor NEW

Tutorial and base project: TEE on AMD Zynq UltraScale+ using Arm TrustZone

License: GNU General Public License v3.0

Batchfile 0.01% Tcl 4.13% Verilog 7.85% VHDL 22.31% C++ 0.83% SystemVerilog 3.23% C 54.66% HTML 0.18% V 0.51% Pascal 0.01% JavaScript 0.15% Shell 0.06% Python 0.01% BitBake 0.04% CMake 0.69% Ruby 0.01% Makefile 4.56% TypeScript 0.01% Assembly 0.77%

xilinx_zcu102_trustzone_demo's Introduction

Trusted Execution Environment on AMD Zynq MPSoC using Arm TrustZone

This project demonstrates how a Trusted Execution Environment (TEE) can be set up on an AMD Zynq UltraScale+ MPSoC device:

Using ZCU102 Evaluation Kit with Zynq UltraScale+ ZU9EG (similar workflow can be used for other Zynq MPSoC devices)
Using PetaLinux Tools & Vitis Embedded (version 2023.2)
Linux as Rich Execution Environment (REE)
OP-TEE OS as Trusted Execution Environment (TEE)
TEE isolation based on Arm TrustZone technology
Secure Boot with RSA authentication and AES encryption (including Linux kernel)

Repository Structure

Path	Description
./trustzone_demo/	PetaLinux project to build the linux kernel and OP-TEE, and create the boot image
./write_bbram/	Vitis Embedded workspace to build a boot image for writing the AES device key to BBRAM
./doc_zcu102_tee_setup.pdf	Documentation providing background information and a step-by-step guide

How to setup the project

Use Ubuntu 22.04 (recommended) or Debian 12.
Install PetaLinux Tools 2023.2 to ~/petalinux/2023.2, as described in the Documentation.
Install Vitis Embedded 2023.1 and 2023.2, as described in the Documentation.
Clone this repository to ~/petalinux.

Rename the directory:

mv ~/petalinux/xilinx_zcu102_trustzone_demo/ ~/petalinux/projects/

Generate keys, write BBRAM, build Linux and OP-TEE, and generate the boot image as described in the Documentation.
Boot the system and test.
Start developing your own Trusted Applications!