Technical Architecture

The Kunpeng commercial cryptographic module relies on a trusted application (TA) and the Huawei-developed iTrustee OS. During system startup, the cryptographic module TA firmware is securely booted to ensure integrity protection.

The cryptographic module TA offers API and authentication services. You can rely on this module to call algorithms and manage keys using an algorithm service unit and a secure storage service unit in the iTrustee OS.

The module complies with the Security Requirements for Cryptographic Modules (GM/T 0028-2014). This enables customers to meet the CPCA requirements.

The module complies with the Cryptographic Device Application Interface Specifications (GM/T 0018).

Figure 1 Technical architecture