RE: Does nRf52840 implements the whole Arm TrustZone CryptoCell-3xx?

Frank Audun Kvamtrø — Thu, 01 Nov 2018 13:48:37 GMT

The name TrustZone® is a registered trademark of ARM® that might mean more than one thing. In context of nRF52840 devices we only supply the crypto toolbox functionality as an IP block (e.g. HW accelerated cryptography and secure key derivation). This is not the full Trusted Execution Environment as described by ARM® TrustZone®, which is coupled to the ARMv8-M architecture. I can understand that this brand name might lead to some confusion. In the nRF52840 design we have platform security mechanisms together with features provided by the CC310 which provides HW-accelerated Secure Boot with a solid Root-of-Trust, as well as a generic HW accelerated cryptographic engine used by the application.

We do have an upcoming device that does provide Trusted Execution Environment through TrustZone®. This is a Nordic Semiconductor SIP built on the ARM® Cortex M33 architecture design, bundled with the ARM® TrustZone® CryptoCell-310 Security IP core. This is however in a product for NB-IoT (cellular IoT).

For more information about this device, please see the following links:

www.nordicsemi.com/.../Nordic-nRF91-low-power-cellular-IoT-sneak-peek-cellular-made-easy-cellular-for-everything-else
www.nordicsemi.com/.../nRF91-SiP-Series