Gapfruit TEE | Sid Hussmann | PADSEC 2021
Channel: PADSEC
Date: 2021-06-09

We present a generic TEE toolkit applicable for many use-cases in finance, healthcare, and government. Gapfruit TEE embodies a microkernel operating system with capability-based security. Each component of the system is strongly isolated and has only access to the resources and services it really needs. The trust graph of each sub-system is concisely defined and verified during build, deployment, and run time. Gapfruit TEE provides confidence in the absence of functional impurity, while the TCB's full transitive closure is measured. Different application runtimes and a simple API aim to make it easy to integrate Gapfruit TEE into existing IT and OT infrastructure.