Std Intel seecurity does not go to the level Trustzone specifies security. FS also adds its extensions to secure boot which helps. There is a reason why AMD licenses TZ and plans to put a Cortex A5 as a sec subsystem in its x86 SoC.
Part of the reason is that the os security mode needed to run full Trustzone is kind of orthogonal to the ring levels of security in the std scheme of things.
The issue is that security has to be thought up ground up. Adding extensions like aes-ni, no execute bit et all over a period of time does not necessarily create a cohesive security model. For example above a certain level of security level, it is preferable to have a sec functional module rather than aes extensions. that function unit can have its own isolated ram, key storage and other isolation features. Which is what FS does and which by the way is not mandated by Trustzone. If I use the main Alu's functional unit for security processing, may leak keys through cache or create other channels for information leakage.
Getting better opportunities on the security and embedded internet stack because of very long stay in the computing environment will be a very good plus point for Intel on getting proven in IoT Processor segment.
The reasoning by Daikin is a load of nonsense.
Freescale ARM and Power products are the only mass market processors and controllers available with tamper detect, secure boot, flips 140-3 grade security and in certain products side channel analysis production. maxim and a few others make parts but no support across the entire range.
I just finished design of a tablet ref design for mil grade security and only the Freescale I.mx6 cut it. granted the Mcafee stack helps but security 101 says that the root of trust begins in hw. Add to all this arm's Trustzone really hels secure os partitioning.
In summary, it looks to be a poor technical decision.
Note, am not a Freescale employee or contractor. just a security researcher .
At least according to a few software engineers I asked about this subject, symantec and wind river doesn't offer something unique security-related. It's mostly branding.
I wonder if this is the only benefit for this chip, or are there others planned?
Blog That A-Ha Moment Larry Desjardin 10 comments Have you ever had an a-ha moment? Sure, you have. The Merriam-Webster dictionary defines it as "a moment of sudden realization, inspiration, insight, recognition, or ...