BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//talks.osfc.io//osfc-2026//speaker//9UNBSR
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-osfc-2026-GSLJUP@talks.osfc.io
DTSTART;TZID=CET:20260915T113000
DTEND;TZID=CET:20260915T120000
DESCRIPTION:Security requires isolation and for most ARM systems\, this com
 es in the form of the ARM TrustZone\, which divides the CPU into a secure 
 and normal world. This allows the system to run a trusted exectuion enviro
 nment (TEE) in the secure world and a rich execution environment (REE) in 
 the normal world.\n\nOf course\, the TEE needs to be loaded from somewhere
  and be executed somewhere else. Doing this in a secure manner requires ca
 reful orchestration between multiple firmwares and failure to do so leads 
 to serious vulnerabilities. \n\nThe talk starts off with a TEE setup that 
 should sound familiar to many:\nA prebootloader starts at the highest priv
 ilige level\, does some DDR initialization and loads TF-A and OP-TEE as we
 ll as the final bootloader into memory. Then TF-A is invoked installing it
 self as secure monitor and OP-TEE as trusted OS before returning to the bo
 otloader in a lower privilige level.\n\nFrom there on\, the CPU should fau
 lt trying to access secure memory\, however hard the normal world tries. H
 owever\, as Marco will show\, there is no shortage on creative alternative
  ways to access memory and unfortunately\, they are often overlooked leadi
 ng to real world exploits.\n\nThis work culiminated into a number of patch
 es across TF-A\, OP-TEE and the barebox bootloader.
DTSTAMP:20260720T183607Z
LOCATION:Main
SUMMARY:Setting Boundaries: Securing overlooked OP-TEE attack vectors - Mar
 co Felsch
URL:https://talks.osfc.io/osfc-2026/talk/GSLJUP/
END:VEVENT
END:VCALENDAR