Trusted Execution Environments

A Trusted Execution Environment (TEE) is a hardware-enforced, isolated area on a main processor (CPU) that guarantees the confidentiality and integrity of sensitive code and data, even if the main operating system (OS) is compromised.

The Trusted Execution Environment (TEE) is a critical security component, operating as a segregated space on the main processor to protect data in use. This isolation is enforced at the hardware level, utilizing features like dedicated memory regions and cryptographic mechanisms to create secure enclaves. Major implementations include Intel Software Guard Extensions (SGX) and ARM TrustZone, which effectively minimize the attack surface by separating 'Trusted Applications' from the Rich Execution Environment (REE). TEEs enable high-assurance use cases: secure mobile payments, biometric authentication (fingerprint/facial recognition), Digital Rights Management (DRM), and confidential computing workloads in the cloud.

https://www.globalplatform.org/technology/trusted-execution-environment-tee/