nRF52840 and the Root of Trust

[Gregor Bader]

Several answers from Nordic employees state the possibility of Secure Boot and a "Root of Trust" feature:

use of ARM TrustZone on nrf52840 for secure storage/trusted region

Cybersecurity features for NRF52 chips

What is the current progress for this feature and what to expect from it? Will there be a real TrustZone implemented or do we get only HW accelerated cryptography functions?

best regards, Gregor

[Bjørn Kvaale]

Got this answer from an expert here at Nordic: "Answer to your question is “something in between”, at least in the timeframe of the next few months for when we are releasing nRF52840. We will have some example code showing how to do Root of Trust, but I will not guarantee that we will have a full RoT solution integrated with the rest of our infrastructure in this timeframe. Whether this solution will be Secure Boot as described by ARM, or something else has not been concluded. The design goal for this implementation would be to give a solution that shows the potential of what is available with the HW available on nRF52840.

There will as well be documentation describing how to implement a Root of Trust solution using the features available on the nRF52840 chip."

[Gregor Bader]

Hi Bjørn,

Thank you for this information. For "... what is available with the HW available on nRF52840", is this already fixed or still under discussion or not yet ready to be published?