how can we decide which function or task to be put into TEE world?

[Tigerly]

Hello,
I'm trying to develop my own TA.
And I'm confused about which kind of functions or tasks should be put into the secure world.
Would it be possible to give me some suggestions?

Thanks in advance!

[vchong]

Anything you don't want to expose to normal world. Usually it's decrypting something with a key contained only in secure world, which has many applications e.g. basic decryption (of a file, etc), drm, banking/payment, etc.

[vchong]

Btw, this repo is now obsolete so please post future questions to https://github.com/linaro-swg/optee_examples. Thanks!

[Tigerly]

Thanks for replying!
So, you mean we can put the encryption/decryption process in the secure world, and allow the outside application invoke this decryption process and get the encrypted/decrypted data? I understand right?

Actually, since the op-tee is a solution for secure issues, I think there must be some use cases. Could you give me some advice about the use cases? or Where can I find these use cases?

Thanks in advance!

BTW, I'll post the future questions in the new repo : )

[vchong]

So, you mean we can put the encryption/decryption process in the secure world, and allow the outside application invoke this decryption process and get the encrypted/decrypted data? I understand right?

Yes.

Actually, since the op-tee is a solution for secure issues, I think there must be some use cases. Could you give me some advice about the use cases? or Where can I find these use cases?

Try https://www.globalplatform.org/mediaguideTEEUse.asp