1- ## wolfCrypt in TrustZone-M secure domain
1+ # wolfCrypt in TrustZone-M secure domain
22
33ARMv8-M microcontrollers support hardware-assisted domain separation for running
44software. This TEE mechanism provides two separate domains (secure & non-secure),
@@ -8,7 +8,7 @@ functions from the non-secure domain (non-secure callable).
88wolfBoot may optionally export the crypto functions as a non-callable APIs that
99are accessible from any software staged in non-secure domain.
1010
11- ### Compiling wolfBoot with wolfCrypt in TrustZone-M secure domain
11+ ## Compiling wolfBoot with wolfCrypt in TrustZone-M secure domain
1212
1313When wolfBoot is compiled with the options ` TZEN=1 ` and ` WOLFCRYPT_TZ=1 ` ,
1414a more complete set of components of the wolfCrypt crypto library are built-in
@@ -17,7 +17,7 @@ non-secure domain through non-secure callable APIs.
1717
1818This feature is used to isolate the core crypto operations from the applications.
1919
20- ### PKCS11 API in non-secure world
20+ ## PKCS11 API in non-secure world
2121
2222The ` WOLFCRYPT_TZ_PKCS11 ` option provides a standard PKCS11 interface,
2323including a storage for PKCS11 objects in a dedicated flash area in secure mode.
@@ -27,7 +27,7 @@ non-secure domain can access wolfCrypt through a standard PKCS11 interface and
2727use the crypto library with pre-provisioned keys that are never exposed to the
2828non-secure domain.
2929
30- ### Example using STM32L552
30+ ## Example using STM32L552
3131
3232 - Copy the example configuration for STM32-L5 with support for wolfCrypt in
3333 TrustZone-M and PKCS11 interface: ` cp config/examples/stm32l5-wolfcrypt-tz.config .config `
@@ -115,7 +115,7 @@ STM32_Programmer_CLI -c port=swd -d test-app/image_v1_signed.bin 0x08040000
115115 - Green LED: ECDSA Sign/Verify test successful
116116
117117
118- ### Example using STM32H563
118+ ## Example using STM32H563
119119
120120 - Copy one of the example configurations for STM32H5 with support for TrustZone and PKCS11 to ` .config ` :
121121 ` cp config/examples/stm32h5-tz.config .config `
0 commit comments