1
- ## wolfCrypt in TrustZone-M secure domain
1
+ # wolfCrypt in TrustZone-M secure domain
2
2
3
3
ARMv8-M microcontrollers support hardware-assisted domain separation for running
4
4
software. This TEE mechanism provides two separate domains (secure & non-secure),
@@ -8,7 +8,7 @@ functions from the non-secure domain (non-secure callable).
8
8
wolfBoot may optionally export the crypto functions as a non-callable APIs that
9
9
are accessible from any software staged in non-secure domain.
10
10
11
- ### Compiling wolfBoot with wolfCrypt in TrustZone-M secure domain
11
+ ## Compiling wolfBoot with wolfCrypt in TrustZone-M secure domain
12
12
13
13
When wolfBoot is compiled with the options ` TZEN=1 ` and ` WOLFCRYPT_TZ=1 ` ,
14
14
a more complete set of components of the wolfCrypt crypto library are built-in
@@ -17,7 +17,7 @@ non-secure domain through non-secure callable APIs.
17
17
18
18
This feature is used to isolate the core crypto operations from the applications.
19
19
20
- ### PKCS11 API in non-secure world
20
+ ## PKCS11 API in non-secure world
21
21
22
22
The ` WOLFCRYPT_TZ_PKCS11 ` option provides a standard PKCS11 interface,
23
23
including a storage for PKCS11 objects in a dedicated flash area in secure mode.
@@ -27,7 +27,7 @@ non-secure domain can access wolfCrypt through a standard PKCS11 interface and
27
27
use the crypto library with pre-provisioned keys that are never exposed to the
28
28
non-secure domain.
29
29
30
- ### Example using STM32L552
30
+ ## Example using STM32L552
31
31
32
32
- Copy the example configuration for STM32-L5 with support for wolfCrypt in
33
33
TrustZone-M and PKCS11 interface: ` cp config/examples/stm32l5-wolfcrypt-tz.config .config `
@@ -115,7 +115,7 @@ STM32_Programmer_CLI -c port=swd -d test-app/image_v1_signed.bin 0x08040000
115
115
- Green LED: ECDSA Sign/Verify test successful
116
116
117
117
118
- ### Example using STM32H563
118
+ ## Example using STM32H563
119
119
120
120
- Copy one of the example configurations for STM32H5 with support for TrustZone and PKCS11 to ` .config ` :
121
121
` cp config/examples/stm32h5-tz.config .config `
0 commit comments