Kernel TEE Subsystem - Birds of a Feather Discussion

Explore the evolution and future development of the Linux kernel's Trusted Execution Environment (TEE) subsystem in this Birds of a Feather session from the Linux Plumbers Conference. Discover how TEEs provide isolated execution environments alongside rich operating systems, leveraging hardware security features like Arm TrustZone, AMD Secure Processor, and RISC-V TEE to protect security-critical code and resources. Learn about ongoing developments including new driver support for Trusted Services TEE and Qualcomm TEE, and understand how the recently merged RPMB subsystem facilitates OP-TEE based fTPM in-kernel implementations. Examine the upcoming protected DMA-Bufs feature managed by TEEs and its potential applications in DRM protected media pipelines, TEE protected crypto accelerator keys, and secure user interfaces. Participate in discussions about real-world upstream user-space use cases and the technical challenges involved in advancing kernel TEE subsystem capabilities.