Change Description

SM algorithms in the confidential computing OS

• The confidential computing OS allows encrypting TA image files using SM algorithms.
• Secure storage with SM algorithms is supported in the confidential computing OS.

Hardware acceleration with SM algorithms in the confidential computing OS and concurrent computing in the TEE OS

The confidential computing OS (iTrustee) of Kunpeng 920 enables hardware acceleration with SM algorithms. The TEE OS supports multi-core concurrency. The supported SM algorithms are SM4-ECB and SM4-CBC.

Linear improvement of multi-core performance in the confidential OS

Resolved the problem where performance does not increase when the number of threads (CPU cores) increases in the TEE.

CPU usage optimization in the confidential OS

Optimized the process of using the shared memory and also the display of CPU usage in the TEE OS.

Insight into TA resource usage in the confidential computing OS

The permission on the proc directory of TAs in the confidential OS is granted to obtain the CPU and memory usage of TAs.