TrustZone Technology for Microcontrollers

Armv8-M architecture extends TrustZone technology to Cortex-M based systems, enabling robust levels of protection at all cost points. TrustZone for Armv8-M has the same high-level features as TrustZone on applications processors, with the key benefit that context switching between secure and non-secure worlds is done in hardware for faster transitions and greater power efficiency. There is no need for any secure monitor software.

 

TrustZone for Armv8-M is an ideal technology to use with the Platform Security Architecture (PSA) as it provides hardware isolation between the normal code and the trusted code base. It also provides a mechanism to provide trusted hardware that might include hardware-backed secure storage, Random Number Generators (RNG) and a source of secure time.

 

Embedded software developers enhance their productivity by developing TrustZone systems using C language, while maintain the existing programmer’s model for the Non-secure side. Debug operations are also supported with sensitivity to access the secure versus the non-secure states.

 

TrustZone for Cortex-M is used to protect firmware, peripheral and I/O, as well as to provide isolation for secure boot, trusted update and root of trust implementations without compromising the deterministic real-time response expected for embedded solutions.

A System-Wide Approach to Software Security

Arm TrustZone technology provides system-wide hardware isolation for trusted software. Used on billions of application processors to protect high-value code and data, it creates an isolated secure world to provide confidentiality and integrity to the system, protecting almost any asset from specific attacks.

 

The concept of hardware-separated secure and non-secure worlds is at the heart of the TrustZone approach. The Non-secure software is blocked from accessing Secure resources directly, and this isolation extends beyond the processor to encompass memory, software, bus transactions, interrupts and peripherals within a system-on-chip (SoC). Both Cortex-A and Cortex-M processor families offer the same security concepts, but with a different form of implementation.

Talk with an Expert

Looking for advice on how to implement embedded security? Talk with an Arm expert. 

Contact Us
Related Products and Services
Cortex-M33

Cortex-M33

The Cortex-M33 is optimized for cost and power-sensitive microcontroller and mixed-signal applications, especially those that require efficient security or digital signal control.

Cortex-M23

Cortex-M23

Cortex-M23 is the smallest and lowest-power microcontroller with TrustZone security, making it the ideal processor for applications where software isolation and software security are required.

Cortex-M35p

Cortex-M35P

Cortex-M35P is the first Armv8-M processor with tamper-resistance built in to bring physical security within reach of any IoT product.

TrustZone Resources

Everything you need to know to make the right decision for your project. Includes technical documentation, industry insights, and where to go for expert advice. 

 

Whitepapers:

Webinar:

Community: