Design and Implementation of High Performance Cryptographic Service Framework Based on TrustZone

Due to its favorable isolation and security features, TrustZone technology has been widely used in mobile payment, cloud computing, Internet of Things, etc. However, the cryptographic algorithm provided by the trusted execution environment such as Open-TEE and OP-TEE is inadequate, which brings inconvenience to the development of trusted applications. In addition, the system mainly uses the software algorithms to provide cryptographic services and does not make full use of hardware cryptographic resources, which results in the low efficiency of cryptographic service. To Figure out these two issues, aiming at features of domestic Phytium processors, this paper establishes a unified cryptographic service framework in the TrustZone platform to build a more rich and complete cryptographic algorithm library. Meanwhile, it makes full use of the hardware cryptographic resources of the processor platform to improve the performance of cryptographic service. Test result shows that the proposed framework can bring significant convenience to the development of trusted applications. Meanwhile, compared with the original cryptographic service performance, the cryptographic service provided by the new framework can achieve significant performance improvement.