What's New

1

Updated the documents.

• The iTrustee/CCOS supports more TEE sessions.
• Updated the compilation guide for the level-2 certificate import tool.

• Confidential Computing TrustZone Kit 1.7.4 Release Notes
• Confidential Computing TrustZone Kit Feature Guide

1

Updated the documents.

Resolved version incompatibility issues for itrustee_tzdriver and itrustee_client.

• Confidential Computing TrustZone Kit 1.7.3 Release Notes
• Confidential Computing TrustZone Kit Feature Guide

1

Updated the documents.

Removed the cgroup trustlists feature.

• Confidential Computing TrustZone Kit 1.7.2 Release Notes
• Confidential Computing TrustZone Kit Feature Guide

1

Updated the documents.

Resolved the incompatibility between the confidential OS and iTrustee secure storage files.

• Confidential Computing TrustZone Kit 1.7.1 Release Notes
• Confidential Computing TrustZone Kit Feature Guide

1

Updated the documents.

Fixed open-source XZ Utils vulnerabilities.

• Confidential Computing TrustZone Kit 1.7.0 Release Notes
• Confidential Computing TrustZone Kit Feature Guide

1

Updated the documents.

Fixed the open-source OpenSSL and cJSON vulnerabilities.

• Confidential Computing TrustZone Kit 1.6.3 Release Notes
• Confidential Computing TrustZone Kit Feature Guide

1

Updated the documents.

• Added the TA image encryption function and the secure storage function with SM algorithms.
• Added support for SM4-based hardware acceleration.
• Optimized the multi-core performance of the TEE OS.
• Optimized the display of the TEE OS CPU usage in the REE.

• Confidential Computing TrustZone Kit 1.6.2 Release Notes
• Confidential Computing TrustZone Kit Feature Guide

1

Updated the documents.

• Optimizing secure storage performance for confidential computing
• Providing the remote attestation QCA demo for TA deployment in containers
• Upgrading confidential computing on the Tianchi motherboard

• Confidential Computing TrustZone Kit 1.5.0 Release Notes
• Confidential Computing TrustZone Kit Feature Guide

2

Removed some documents.

Due to product roadmap adjustments, support for Java and Python applications on the CCOS has been discontinued, and the related guide documents have been removed.

• Confidential Computing TrustZone Kit Java Developer Guide
• Confidential Computing TrustZone Kit Python Developer Guide

1

Added the documents.

Added the high-level language application development guides, which provide guidance for compiling Java and Python applications using the confidential OS SDK.

• Confidential Computing TrustZone Kit Java Developer Guide
• Confidential Computing TrustZone Kit Python Developer Guide

2

Updated the documents.

Added the support for high-level languages and confidential containers.

• Confidential Computing TrustZone Kit Technical White Paper
• Confidential Computing TrustZone Kit Feature Guide
• Confidential Computing TrustZone Kit Acceptance Test Guide

1

Updated the documents.

Fixed the security vulnerabilities related to the third-party component OpenSSL.

• Confidential Computing TrustZone Kit 1.3.2 Patch Release Notes
• Confidential Computing TrustZone Kit Feature Guide

1

Updated the documents.

Added necessary build parameters to the TEE OS build command.

• Confidential Computing TrustZone Kit 1.3.1 Patch Release Notes
• Confidential Computing TrustZone Kit Feature Guide

1

Updated the documents.

• Added the Attestation Service (AS) content to "TA Remote Attestation" and the CRL import content to "TA Certificate Import" in the Technical White Paper.
• Added the description of checking whether the TrustZone firmware is preconfigured on the server to the Feature Guide and adjusted the document structure.
• Updated the Acceptance Test Guide: added the zero-copy test case to "Parameter Transfer of the Shared Memory in the Secure OS"; added the CRL import test case to "Importing the TA Level-2 CA Certificate"; and added "SMEE Memory Encryption and Decryption".

• Kunpeng BoostKit for Confidential Computing TrustZone Kit Technical White Paper
• Kunpeng BoostKit for Confidential Computing TrustZone Kit Feature Guide
• Kunpeng BoostKit for Confidential Computing TrustZone Kit Acceptance Test Guide

1

Added Confidential Computing TrustZone Kit documents of earlier versions.

Added the Version Mapping, guide pages for historical versions, and documents of historical versions.

Guide pages for historical versions

1

Updated the documents.

• Added descriptions about TA certificate import and remote attestation to the Technical White Paper.
• Added descriptions about compilation of the rsa-demo TA, remote/local attestation, TA level-2 certificate import, and SmartKit tool to the Feature Guide.
• Added the itrustee_tzdriver and kunpengsecl software test environments, TA remote attestation, TA local attestation, and level-2 CA certificate import test cases to the Acceptance Test Guide.

• Kunpeng BoostKit for Confidential Computing TrustZone Kit Technical White Paper
• Kunpeng BoostKit for Confidential Computing TrustZone Kit Feature Guide
• Kunpeng BoostKit for Confidential Computing TrustZone Kit Acceptance Test Guide

2

1

Optimized document types.

• Changed the Deployment Guide to a Feature Guide, and added the feature description, security management, and troubleshooting cases.
• Changed the RSA Demo User Guide to an RSA Demo Developer Guide, and added the API Reference.

• Kunpeng BoostKit for Confidential Computing TrustZone Kit Feature Guide
• Kunpeng BoostKit for Confidential Computing TrustZone Kit RSA Demo Developer Guide

2

Added the Acceptance Test Guide.

Provided test cases for security features, secure OS functions, and performance to verify TrustZone.

Kunpeng BoostKit for Confidential Computing TrustZone Kit Acceptance Test Guide

1

Introduced Kunpeng BoostKit for Confidential Computing TrustZone Kit.

TrustZone is a security extension technology based on the standard Arm architecture. It has an additional trusted execution environment (TEE), and its original execution environment is called rich execution environment (REE). The two environments are isolated from each other in the chip architecture to ensure the applications running in the TEE are secure and trusted. TrustZone resolves the security issue of in-use data.

• Kunpeng BoostKit for Confidential Computing TrustZone Kit Technical White Paper
• Kunpeng BoostKit for Confidential Computing TrustZone Kit Deployment Guide
• Kunpeng BoostKit for Confidential Computing TrustZone Kit RSA Demo User Guide