Note that the expected quarter when a feature will be completed based on very rough estimates of the effort involved and therefore can change. Items beyond CQ1'22 will be planned in detail and confirmed at the start of the quarter depending on progress made in previous quarter and available bandwidth. If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Trusted Servies mailing lists - trusted-services@lists.trustedfirmware.org **Supported Features** - PSA Crypto Service - PSA Internal Trusted Storage (ITS) Service - PSA Protected Storage (PS) Service - PSA Attestation Service - Example Application/Tests in Normal World using PSA Crypto and PSA Internal Trusted Storage Services - Enable Crypto HW Integration (HUK, Key derivation) in PSA Crypto Service - Enable Storage HW Integration (nwd eMMC RPMB) - leverage op-tee support - FIP based booting - FF-A Direct Messaging - Test against PSA Funcation API Compliance Test Suite - smm-gateway SP **CQ1'22 (In Development)** - Authentication and Access Control of Trusted Services - Contd. - Meta-arm yocto enhancements - Mbed TLS3.1 Integration. **CQ2'22 ** - Platform Security Firmware Update Service - Authentication and Access Control of Trusted Services - Contd. - GP Trusted Application/FF-A Secure Partition Coexistence demo (using separate storage backend) - First Trusted Service Release Tag **CQ3'22 ** - GP Trusted Application/FF-A Secure Partition Cooperation demo (sharing storage backend) - Storage Backend Integration Enhancements - smm-gateway SP - Authenticated variables support - Shim layer for legacy GP TAs to access Trusted Services **OP-TEE **(Enhancement as reference Trusted Operating System used along with Trusted Services) **** Supported Features (Upstreaming in progress) - Secure Partition Loading, FF-A Message Routing, SPMC **CQ4'21 ** - SPMC Upstreaming Essential Features **CQ1'22 (In Development)** - SPMC Upstreaming Continued **CQ2'22 ** - SPMC Upstreaming Continued

Note that the expected quarter when a feature will be completed based on very rough estimates of the effort involved and therefore can change. Items beyond CQ2'24 will be planned in detail and confirmed at the start of the quarter depending on progress made in previous quarter and available bandwidth. If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Trusted Services mailing lists - trusted-services@lists.trustedfirmware.org **Supported Features** - PSA Crypto Service - PSA Internal Trusted Storage (ITS) Service - PSA Protected Storage (PS) Service - PSA Attestation Service - Block Storage Service - Platform Security Firmware Update Service - Example Application/Tests in Normal World using PSA Crypto and PSA Internal Trusted Storage Services - Enable Crypto HW Integration (HUK, Key derivation) in PSA Crypto Service - Enable Storage HW Integration (nwd eMMC RPMB) - leverage op-tee support - FIP based booting - FF-A Direct Messaging - Pass PSA Functional API Compliance Test Suite - meta-arm yocto enhancements - Cloud Migration to CI - Mbed TLS 3.4.0 Integration **CQ4'23** - smm gateway - Authorised variables - Authentication and Access Control enhancements - S-EL0 RPM | Storage Backend Integration **CQ1'24 ** - mbedTLS 3.5 Integration - Authentication and Access Control enhancements - Platform Security Firmware Update Service enhancements **CQ2'24 ** - Yocto recipe updates to support v1.0.0 release - Storage Backend Integration Enhancements - Authentication and Access Control of Trusted Services - Contd. - SP logging prototype **Future ** - FF-A manifest/tooling - YP Updates : Enable TS on FVP Platform - Shim layer for legacy GP TAs to access Trusted Services - Storage Backend Integration Enhancements - Contd - GP Trusted Application/FF-A Secure Partition Cooperation demo (sharing storage backend) - Open CI

Note that the expected quarter when a feature will be completed based on very rough estimates of the effort involved and therefore can change. Items beyond CQ1'222'24 will be planned in detail and confirmed at the start of the quarter depending on progress made in previous quarter and available bandwidth. If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Trusted Services mailing lists - trusted-services@lists.trustedfirmware.org **Supported Features** - PSA Crypto Service - PSA Internal Trusted Storage (ITS) Service - PSA Protected Storage (PS) Service - PSA Attestation Service - Block Storage Service - Platform Security Firmware Update Service - Example Application/Tests in Normal World using PSA Crypto and PSA Internal Trusted Storage Services - Enable Crypto HW Integration (HUK, Key derivation) in PSA Crypto Service - Enable Storage HW Integration (nwd eMMC RPMB) - leverage op-tee support - FIP based booting - FF-A Direct Messaging - Test against- Pass PSA Funcational API Compliance Test Suite - smm-gateway SP **CQ1'22 (In Development)** - meta-arm yocto enhancements - Cloud Migration to CI - Authentic - Mbed TLS 3.4.0 Integration and Access Control of Trusted Services - Contd. **CQ4'23** - smm gateway - Authorised variables - Meta-arm yocto enhancements - Mbed TLS3.1 Integration. **CQ2'22 **- Authentication and Access Control enhancements - Platform Security Firmware Update Service - Authentic- S-EL0 RPM | Storage Backend Integration and Access Control of Trusted Services - Contd. **CQ1'24 ** - mbedTLS 3.5 Integration - GP Trusted Appl- Authentication/FF-A Secure Partition Coexistence demo (using separate storage backend) and Access Control enhancements - First Trusted Service Release Tag **CQ3'22 **- Platform Security Firmware Update Service enhancements - GP Trusted Application/FF-A Secure Partition Cooperation demo (sharing storage backend) **CQ2'24 ** - Yocto recipe updates to support v1.0.0 release - Storage Backend Integration Enhancements - smm-gateway SP - Authenticated variables support - Shim layer for legacy GP TAs to access Trusted Services **OP-TEE **(Enhancement as reference Trusted Operating System used along with Trusted Services) **** Supported Features (Upstreaming in progress)Authentication and Access Control of Trusted Services - Contd. - Secure Partition Loading, FF-A Message Routing, SPMC- SP logging prototype **Future ** **CQ4'21 **- FF-A manifest/tooling - YP Updates : Enable TS on FVP Platform - SPMC Upstreaming Essential Features **CQ1'22 (In Development)**him layer for legacy GP TAs to access Trusted Services - Storage Backend Integration Enhancements - Contd - GP Trusted Application/FF-A Secure Partition Cooperation demo (sharing storage backend) - SPMC Upstreaming Continued- Open CI **CQ2'22 ** - SPMC Upstreaming Continued