Security

This topic describes security features of NVIDIA^® Jetson™ Linux. Below are the subtopics:

• Secure Boot describes Secure Boot, a feature which ensures that the Jetson Linux boot process cannot be redirected or compromised. This feature will be supported in next public release.

• OP-TEE describes the Open Portable Trusted Execution Environment, a TEE provided with Jetson Linux.

• Disk Encryption describes the Jetson Linux implementation of Linux Unified Key Setup (LUKS), the Linux standard for disk encryption. This release does not support this feature.

• Secure Boot
• OP-TEE: Open Portable Trusted Execution Environment
  • OP-TEE in Jetson Linux
  • Architecture
    • Execution Steps
  • Trusted Application and Client Application Development
    • How to Implement a New Trusted Application or Port an Existing One
    • Types of Trusted Applications
  • Key Derivation Function of a Fuse Key and User-Defined Key
    • Encrypted Keyblobs
    • Encrypted Keyblob Overview
    • Encrypted Keyblob Format
    • EKB Header
    • EKB Content
    • EKB Binary Size Restrictions
    • Encrypted Keyblob Generation and Device Provisioning
    • Encrypted Keyblob Decryption
    • SE Keyslot Clearing
  • Secure Samples
    • Sample Pseudo Trusted Application: jetson_user_key_pta
    • hwkey-agent Trusted Application
    • nvhwkey-app Client Application
  • Key Maintenance and EKBs
    • KDF of Fuse Keys
    • Pseudocode for NIST-SP-800-108
    • EKB Generation
    • EKB Extraction
    • Tool for EKB Generation
    • EKB Extraction Sample
  • AES-256 Hardware Key Derivation Function in jetson_user_key_pta
    • Flow of the AES-256 Hardware KDF
    • API Functions
• Disk Encryption