Method and apparatus for a trust processor

摘要

In an embodiment, an apparatus includes a cryptographic processor within a wireless device. The cryptographic processor includes at least one cryptographic unit. The cryptographic processor also includes a nonvolatile memory to store one or more microcode instructions, wherein at least one of the one or more microcode instructions is related to a sensitive operation. The cryptographic processor also includes a controller to control execution of the one or more microcode instructions by the at least one cryptographic unit, wherein the controller is to preclude execution of the sensitive operation if the apparatus is within an untrusted state.

主权项

1. An apparatus comprising:
a system-on-a-chip including:
an application processor to execute a driver, the driver to generate a primitive instruction in response to a request for a security service;direct memory access logic; anda cryptographic processor comprising:
at least one cryptographic unit;an interface to receive the primitive instruction from the application processor through the direct memory access logic;an instruction buffer to store the primitive instruction received by the interface;a nonvolatile memory to store a plurality of microcode instructions, wherein one or more of the plurality of microcode operations is to cause the cryptographic processor to perform one or more of a plurality of operations including one or more sensitive operations; anda controller to retrieve the primitive instruction from the instruction buffer and one or more microcode instructions for the primitive instruction from the nonvolatile memory, determine whether at least one of the one or more microcode instructions is to cause the cryptographic processor to perform a sensitive operation, determine whether the cryptographic processor is within a trusted state based on whether the cryptographic processor is properly initialized, control execution of the at least one microcode instruction by the at least one cryptographic unit if the cryptographic processor is in the trusted state or if the at least one microcode instruction is to cause the cryptographic processor to perform a sensitive operation, and preclude execution of the at least one microcode instruction when the cryptographic processor is in an untrusted state and the at least one microcode instruction is to cause the cryptographic processor to perform a sensitive operation.