A trusted execution environment, a secure area of a processor that isolates code and data so that they are protected from the rest of the system, including a compromised operating system. It provides confidentiality and integrity for sensitive computation.
Semantic Classification
Content
- A trusted execution environment uses hardware features to create an isolated region where code runs with its memory protected from other software, even privileged software such as the operating system or hypervisor.
- Examples include Intel SGX, Arm TrustZone, and AMD SEV. TEEs support use cases such as confidential computing, secure key handling, and attestation, where a remote party can verify the integrity of the running code.