Trustonic Limited

Lukas Hänel

Olivier Deprez

A method for protecting a cryptographic operation on a device from a side-channel attack, the device comprising a processor operable to execute a rich execution environment (REE) and a trusted execution environment (TEE), the method comprising: receiving, at the TEE, a request to perform a cryptographic operation, wherein the cryptographic operation is divisible into a plurality of chunks; issuing, by the TEE, a command to control a characteristic of a core of the processor on which the TEE is to be executed on upon subsequent invocation of the TEE; verifying, by the TEE upon subsequent invocation of the TEE, that the characteristic of the core on which the TEE is executing on corresponds to the command; and responsive to a positive verification, performing, by the TEE, the cryptographic operation on one or more chunks of the plurality of chunks.

Trusted Execution Environment side-channel protection method

A trusted execution environment migration method for a device comprising a multicore processor, the processor operable to execute a rich execution environment (REE) and a trusted execution environment (TEE), the method comprising: executing a TEE scheduler in the REE on a first core of the multicore processor; subsequent to a migration of the TEE scheduler from the first core to a second core, issuing a request, by the TEE scheduler and to a transition submodule in the TEE, to execute an operations submodule in the TEE, wherein the transition submodule is operable to manage the transition of a core of the processor between execution of the REE and execution of the operations submodule in the TEE, and wherein the transition submodule is executed on the same core as the TEE scheduler; upon execution of the operations submodule, determining if the core on which the operations submodule is executing has changed since the previous execution of the operations submodule.

Growing community of inventors

Valbonne, France

Lukas Hänel