ARMmbed
/
mbed-os
mirror of https://github.com/ARMmbed/mbed-os.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
mbed-os/components/TARGET_PSA/spm/doc
History
Oren Cohen dd73fa689c PSA SPM 
* Intorduce PSA-SPM to mbed-os
* Add SPM tests (for PSA targets)
* Add PSA PRoT internal storage Secure implementation
* Integrate SPM into the boot proccess
* PSA manifest data generator
* Introduce PSA targets skeleton to mbed-os
* Add artifact delivery to the tools
 		2018-11-27 09:16:35 +02:00
..
png PSA SPM 2018-11-27 09:16:35 +02:00
INTRO.md PSA SPM 2018-11-27 09:16:35 +02:00
README.md PSA SPM 2018-11-27 09:16:35 +02:00

README.md

Mbed Secure Partition Manager (SPM)

The Platform Security Architecture (PSA) firmware framework specifications contain a logic component called the Secure Partition Manager (SPM). PSA defines a Secure Processing Environment (SPE) for:

  • Sensitive data, such as keys, credentials and firmware.
  • The code that manages it.
  • Its trusted hardware resources.

The PSA SPM interfaces decouple components, allowing reuse of components in other device platform and helps to reduce an integration effort.

Mbed SPM is an implementation of PSA SPM, which:

  • Secures low cost IoT devices, where a full Trusted Execution Environment (TEE) would not be appropriate.
  • Protects sensitive assets (keys, credentials and firmware) by separating these from the application firmware and hardware.
  • Is architecture agnostic and can be implemented on different Arm Cortex®-M architectures, offering variable level of protection, based on platform resources.

diagram

Further reading