1.4 KiB
OEMCrypto Development Kit For Trusted Execution Environments
ODKiTEE is the Widevine hardened reference implementation of OEMCrypto suitable to run in a TEE. It is written in C with a thin porting interface to make it easier to port to various trusted environments.
Current Status
This very early preview release contains an early version of the ODKiTEE source code. It contains only the following:
- Code for an IPC layer that implements the OEMCrypto API functions, translates the calls into serialized objects, deserializes the objects inside the TEE, and invokes the appropriate TA function
- Code for a Trusted Application that implements the logic of OEMCrypto
No build system is included. No implementation of the porting layers for working with different TEE OSes and chip hardware is included.
In addition, the code herein has the following known limitations:
- The usage table code does not yet encrypt the usage table information.
- The code is only sporadically and opportunistically hardened.
- Some minor functionality is still missing, though it should all be marked with TODO comments.
If you have received this code, Widevine is looking for your feedback! Please let us know where it can be improved. Don't hesitate to call out things you think we already know, particularly as regards hardening. We want to know whether the places we see room for improvement are the same as the ones where you do.