Skip to main content

Introduction

RP022​

RP022 extends the open source OP-TEE ecosystem with features needed for the RISC-V ISA. OP-TEE is a GlobalPlatform-conformant trusted execution environment and an umbrella project containing the secure-world core, trusted applications, tests, documentation, and supporting components.

The upstream OP-TEE project already provides basic support for RV64 systems. RP022 builds on that foundation with targeted OpenSBI integration, stronger RISC-V continuous integration and validation, hardware-assisted cryptography, control-flow integrity, trusted-application context management, and finer-grained memory permissions.

The work is intended to meet RISC-V ecosystem needs while remaining close to the design and implementation direction of the OP-TEE community and the RISE Security Software Working Group. Changes are intended for upstream review, with tests and documentation developed alongside the implementation.

RISCstar will deliver all requests for comments and code patches for the milestones to the RISE SWG and OP-TEE community via mailing lists or pull requests for review by RISE and other interested parties. It is expected some milestone features will take several submissions to the upstream before the milestone is feature complete.

The initial target platform is the qemu-system-riscv64 virtual machine. The project assumes a working boot chain, Linux kernel, OpenSBI, RISC-V-enabled QEMU, an LLVM toolchain with the required extensions, and the latest MPXY stack across OP-TEE, U-Boot, and Linux.

The project is organized into the following milestones:

  • Milestone 1: OpenSBI RPMI SYSIRQ delivery and Yield ECALL support
  • Milestone 2: Compiler, runtime-test, and security-feature documentation support
  • Milestone 3: ASLR and stack-canary validation
  • Milestone 4: RISC-V hardware cryptographic acceleration
  • Milestone 5: RISC-V landing-pad planning
  • Milestone 6: Landing pads in OP-TEE core and trusted applications
  • Milestone 7: Trusted-application floating-point and vector context management
  • Milestone 8: Data permissions in OP-TEE core

Each milestone page records the planned scope, its requirements, and its expected technical deliverables.