Note that the expected quarter when a feature will be completed based on very rough estimates of the effort involved and therefore can change. Items beyond CQ3'21 will be planned in detail and confirmed at the start of the quarter depending on progress made in previous quarter and available bandwidth. If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Trusted Servies mailing lists - trusted-services@lists.trustedfirmware.org **Supported Features** - PSA Crypto Service - PSA Internal Trusted Storage (ITS) Service - PSA Protected Storage (PS) Service - Example Application/Tests in Normal World using PSA Crypto and PSA Internal Trusted Storage Services - Enable Crypto HW Integration (HUK, Key derivation) in PSA Crypto Service - Enable Storage HW Integration (nwd eMMC RPMB) - leverage op-tee support - FIP based booting - FF-A Direct Messaging **CQ3'21 (In Development)** - PSA Attestation Service Continued - Test against PSA Funcation API Compliance Test Suite **CQ4'21 ** - Platform Security Firmware Update Service - Meta-arm yocto support - Storage Backend Integration Enhancements - Run, pass PSA Func. API Compliance Test Suite **CQ1'22 ** - First Trusted Service Release Tag - aarch32 support in Trusted Services - Boot Flow Enhancements **OP-TEE **(Enhancement as reference Trusted Operating System used along with Trusted Services) **** Supported Features (Upstreaming in progress) - Secure Partition Loading, FF-A Message Routing, SPMC **CQ3'21 (In Development)** - SPMC Upstreaming Continued - StMM SPMC Implementation **CQ4'21 (In Development)** - SPMC Upstreaming Continued - StMM SPMC Implementation Continued **CQ1'22 ** - aarch32 support - OP-TEE as monitor + SPMD

Note that the expected quarter when a feature will be completed based on very rough estimates of the effort involved and therefore can change. Items beyond CQ2'24 will be planned in detail and confirmed at the start of the quarter depending on progress made in previous quarter and available bandwidth. If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Trusted Services mailing lists - trusted-services@lists.trustedfirmware.org **Supported Features** - PSA Crypto Service - PSA Internal Trusted Storage (ITS) Service - PSA Protected Storage (PS) Service - PSA Attestation Service - Block Storage Service - Platform Security Firmware Update Service - Example Application/Tests in Normal World using PSA Crypto and PSA Internal Trusted Storage Services - Enable Crypto HW Integration (HUK, Key derivation) in PSA Crypto Service - Enable Storage HW Integration (nwd eMMC RPMB) - leverage op-tee support - FIP based booting - FF-A Direct Messaging - Pass PSA Functional API Compliance Test Suite - meta-arm yocto enhancements - Cloud Migration to CI - Mbed TLS 3.4.0 Integration **CQ4'23** - smm gateway - Authorised variables - Authentication and Access Control enhancements - S-EL0 RPM | Storage Backend Integration **CQ1'24 ** - mbedTLS 3.5 Integration - Authentication and Access Control enhancements - Platform Security Firmware Update Service enhancements **CQ2'24 ** - Yocto recipe updates to support v1.0.0 release - Storage Backend Integration Enhancements - Authentication and Access Control of Trusted Services - Contd. - SP logging prototype **Future ** - FF-A manifest/tooling - YP Updates : Enable TS on FVP Platform - Shim layer for legacy GP TAs to access Trusted Services - Storage Backend Integration Enhancements - Contd - GP Trusted Application/FF-A Secure Partition Cooperation demo (sharing storage backend) - Open CI

Note that the expected quarter when a feature will be completed based on very rough estimates of the effort involved and therefore can change. Items beyond CQ3'212'24 will be planned in detail and confirmed at the start of the quarter depending on progress made in previous quarter and available bandwidth. If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Trusted Services mailing lists - trusted-services@lists.trustedfirmware.org **Supported Features** - PSA Crypto Service - PSA Internal Trusted Storage (ITS) Service - PSA Protected Storage (PS) Service - PSA Attestation Service - Block Storage Service - Platform Security Firmware Update Service - Example Application/Tests in Normal World using PSA Crypto and PSA Internal Trusted Storage Services - Enable Crypto HW Integration (HUK, Key derivation) in PSA Crypto Service - Enable Storage HW Integration (nwd eMMC RPMB) - leverage op-tee support - FIP based booting - FF-A Direct Messaging **CQ3'21 (In Development)** - PSA Attestation Service Continued - Test against PSA Funcation API Compliance Test Suite **CQ4'21 ** - Platform Security Firmware Update Service - Meta-arm yocto support - Storage Backend Integration Enhancements - Pass PSA Functional API Compliance Test Suite - Run, pass PSA Func. API Compliance Test Suite **CQ1'22 ** - meta-arm yocto enhancements - Cloud Migration to CI - First Trusted Service Release Tag - Mbed TLS 3.4.0 Integration **CQ4'23** - smm gateway - Authorised variables - aarch32 support in Trusted Services - Boot Flow Enhancements- Authentication and Access Control enhancements - S-EL0 RPM | Storage Backend Integration **OP-TEE **(Enhancement as reference Trusted Operating System used along with Trusted Services) ******CQ1'24 ** Supported Features (Upstreaming in progress)- mbedTLS 3.5 Integration - Authentication and Access Control enhancements - - Platform Secure Partition Loading, FF-A Message Routing, SPMCity Firmware Update Service enhancements **CQ2'24 ** **CQ3'21 (In Development)**- Yocto recipe updates to support v1.0.0 release - SPMC Upstreaming Continued- Storage Backend Integration Enhancements - StMM SPMC Implementation- Authentication and Access Control of Trusted Services - Contd. - SP logging prototype **Future ** **CQ4'21 (In Development)**- FF-A manifest/tooling - YP Updates : Enable TS on FVP Platform - SPMC Upstreaming Continued- Shim layer for legacy GP TAs to access Trusted Services - StMM SPMC Implementation Continued **CQ1'22 **orage Backend Integration Enhancements - Contd - GP Trusted Application/FF-A Secure Partition Cooperation demo (sharing storage backend) - aarch32 support - OP-TEE as monitor + SPMD - Open CI