Trusted Services (TS) Roadmap

Updated 320 Days AgoPublic

Actions

Note that the expected quarter when a feature will be completed based on very rough estimates of the effort involved and therefore can change. Items beyond CQ2'24 will be planned in detail and confirmed at the start of the quarter depending on progress made in previous quarter and available bandwidth.

If you are interested in collaborating on any of the roadmap features or other features in the project, please mail Trusted Services mailing lists - trusted-services@lists.trustedfirmware.org

Supported Features

• PSA Crypto Service
• PSA Internal Trusted Storage (ITS) Service
• PSA Protected Storage (PS) Service
• PSA Attestation Service
• Block Storage Service
• Platform Security Firmware Update Service
• Example Application/Tests in Normal World using PSA Crypto and PSA Internal Trusted Storage Services
• Enable Crypto HW Integration (HUK, Key derivation) in PSA Crypto Service
• Enable Storage HW Integration (nwd eMMC RPMB) - leverage op-tee support
• FIP based booting
• FF-A Direct Messaging
• Pass PSA Functional API Compliance Test Suite
• meta-arm yocto enhancements
• Cloud Migration to CI
• Mbed TLS 3.4.0 Integration

CQ4'23

• smm gateway - Authorised variables
• Authentication and Access Control enhancements
• S-EL0 RPM | Storage Backend Integration

CQ1'24

• mbedTLS 3.5 Integration
• Authentication and Access Control enhancements
• Platform Security Firmware Update Service enhancements

CQ2'24

• Yocto recipe updates to support v1.0.0 release
• Storage Backend Integration Enhancements
• Authentication and Access Control of Trusted Services - Contd.
• SP logging prototype

Future

• FF-A manifest/tooling
• YP Updates : Enable TS on FVP Platform
• Shim layer for legacy GP TAs to access Trusted Services
• Storage Backend Integration Enhancements - Contd
• GP Trusted Application/FF-A Secure Partition Cooperation demo (sharing storage backend)
• Open CI