TrustZone——开源库—OVOS

如果没有开源库，技术至少要落后5年。有了开源库，技术落后2年吧。

http://www.openvirtualization.org/

目前应该，能够编译运行这个开源库的开发者还比较少，至少博客上没搜索到。

这个开源库东西还挺全的。支持两层bootloader，一层安全，一层普通。

建立了安全OS原型。实现了TZAPI。

提供了：安全键盘，安全支付应用，安全播放器这三个应用。

其实就算有这个开源库，我们也面临不少问题。

1如何编译

2如何仿真

3TZ原理

由于这个技术涉及BOOT，KERNEL，DRIVER，ANDROID APP。涉及领域比较多。可能需要很多努力才能掌握。

光一个SOS（SecureOS）就是一个小的linux。所以，我们可以从会写linux操作系统开始。

看看开源库提供了什么？

Open Virtualization maintains SierraVisor, a hypervisor for ARM-based systems, and SierraTEE, a Trusted Execution Environment (TEE) for ARM TrustZone hardware security extensions. 

SierraVisor Hypervisor
The SierraVisor Hypervisor allows multiple operating systems, such as Linux, BSD, Android, and other real-time operating systems to run concurrently on any TrustZone-enabled ARM11 or Coretex-A9 device. 

SierraVisor Benefits

• Accelerates time-to-market by eliminating application porting efforts
• Allows legacy operating systems to run simultaneously with other platforms
• Reduces hardware costs by consolidating functions on a single device
• Secures sensitive data with a Trusted Execution Environment (TEE) available for every guest operating system

SierraTEE Trusted Execution Environment
SierraTEE uses TrustZone security extensions to protect the secure kernel and peripherals from code running in the primary operating system. This means that even if an attacker manages to obtain full supervisor privileges to the primary operating system, the attacker cannot gain access to the secure kernel. 

SierraTEE Benefits

• Supports ARM11, Cortex-A9, and Cortex-A15 processors
• Integrates with Android, Linux, BSD and other "normal world" operating systems
• Offers a small footprint to minimize memory and system overhead
• Complies fully with GlobalPlatform TEE specifications

Sierraware , an embedded virtualization company, developed and maintains the Open Virtualization Project.