Technical presentation - 30 minutes (including q&a)
This talk presents ongoing work at Arm to implement an fTPM SP in Trusted Services. The first functional version of the SP is already public. It implements the DEN0138 TPM CRB over FF-A specification as the communication layer. It contains the ms-20-tpm-ref library as TPM backend and uses PSA ITS for non-volatile storage. Currently the crypto operations required by the TPM backend are implemented with MbedTLS. However, it is planned to replace this with PSA Crypto instead, so the fTPM SP can rely on the already existing Trusted Services Crypto SP.