Original Link: https://www.anandtech.com/show/6007/amd-2013-apus-to-include-arm-cortexa5-processor-for-trustzone-capabilities
AMD 2013 APUs To Include ARM Cortex-A5 Processor For TrustZone Capabilities
by Ryan Smith on June 13, 2012 8:00 AM ESTAt AMD’s 2012 Financial Analyst Day, as part of their presentation on their future strategy AMD’s CTO Mark Papermaster announced that AMD would be looking into integrating 3rd party IP into future AMD APUs. At the time there was a strong assumption that this would be mobile focused – perhaps in the form of a cellular modem or an ARM core – and it turns out the assumptions were both right and wrong. Today AMD is announcing that they are in fact going to start integrating ARM cores into future APUs starting in 2013, but not in the way you’re probably thinking.
If you look at AMD’s long term strategy, not only do they need to continue to compete with Intel on the technology front, but they also want to better position themselves to compete on the tablet front. AMD has the basic hardware for this with their APU families, particularly for tablets with their Zacate based entry-level APUs, but they have a feature gap in certain markets. Both Intel and ARM have hardware trusted platform/security technologies but AMD lacks such a technology.
For various reasons we’ll get to in a moment, AMD believes they need some kind of hardware security platform technology to continue to compete in the market in the future. Intel’s Trusted Execution Technology is not part of the x86 specification and is therefore not shared, so AMD would need to come up with their own technology. Designing and implementing such a technology is not only resource intensive but by its very nature it fragments the market, which is something AMD doesn’t necessarily have the clout to get away with all the time. So rather than design their own technology they’ve chosen to license an existing technology, and this brings us to ARM.
In order to implement a hardware security platform on their future APUs, AMD has chosen to enter into a strategic partnership with ARM for the purpose of gaining access to ARM’s TrustZone technology. By licensing TrustZone, AMD gains a hardware security platform that’s already in active use, which means they avoid fragmenting the market and the risks that would bring. Furthermore AMD saves on the years of work – both technical and evangelical – that they would have needed had they rolled their own solution. Or more simply put, given their new willingness to integrate 3rd party IP, licensing was the easy solution to getting a hardware security platform quickly.
But because TrustZone is an ARM technology (both in name and ISA) AMD needs an ARM CPU to execute it. So the key to all of this will be the integration of an ARM processor into an AMD APU, specifically ARM’s Cortex-A5 CPU. The Cortex-A5 is ARM’s simplest ARMv7 application processor, and while it’s primarily designed for entry-level and other lower-performance devices, as it turns out it fits AMD’s needs quite nicely since it won’t be used as a primary application processor.
ARM TrustZone Hardware Model; Normal World Would Be On x86
This also means that the ARM and x86 CPU cores will fit together in an interesting manner unlike any existing ARM or Intel x86 CPU. By integrating a low-power/low-performance ARM CPU in this manner an application will be split up over multiple CPUs, with the TrustZone secure backend executing on the Cortex-A5 while the frontend logic will be executing as normal on AMD’s x86 CPU and GPU cores. This gives AMD a dedicated security co-processor with all the benefits and drawbacks thereof, while on full ARM processors and on Intel’s x86 processors TrustZone and TXT respectively are hardware features of a single CPU.
By implementing a hardware security platform in this manner AMD not only gains a relatively quick turnaround time on the hardware, but on the software side too. AMD is specifically looking to leverage existing ARM applications for their tablet ambitions by taking advantage of the fact that existing TrustZone application cores can easily (if not directly) be ported over to AMD’s APUs. Developers would still need to put in some effort to write the necessary x86 frontends (in all likelihood written in scratch for Win8 as opposed to any kind of Android), but the hard part of implementing and validating the TrustZone functionality would simply carry over, leaving the new x86 frontend to talk to the existing ARM TrustZone application core. AMD isn’t in any position to talk about specific software yet, but we’re told that they’ve been working with select software partners even before this announcement in order to get a jump on developing applications.
As for the hardware details AMD hasn’t named any specific APUs that will be receiving the Cortex-A5, but they have told us that they intend to start with the low-power APUs in order to go after the tablet market. That means we’re almost certainly looking at the 2013 successor to the Zacate APU found at the heart of AMD’s Brazos platform. However AMD won’t be stopping there, and in 2014 and beyond AMD will continue to add it to further APUs until AMD’s entire APU lineup from mobile to desktop to server contains the Cortex-A5 and TrustZone functionality.
Having covered the technology, let’s also quickly discuss why AMD is pursuing this move. As AMD is pitching this it’s not just closing a feature gap but also about what it enables. A big focus of this of course is on trusted computing in the classical sense, meaning DRM for consumer applications and on platform lockdown and auditing for business IT purposes. But as we’ve seen Intel do with their acquisition of McAfee some years back, there’s also a strong focus on securing systems from malware in the form of new anti-virus technologies and in newer applications such as mobile payments. Even cloud services get a mention in here, since TrustZone can be used to make sure malware isn’t watching in on a session from the client.
It’s worth noting that AMD also has a bit of self-interest in here. AMD’s Chief Information Officer Mike Wolfe is spearheading this announcement with a focus on how AMD intends to use this technology internally. AMD recently implemented a Bring Your Own Device (BYOD) policy for employees to let them use their own computers at work. BYOD is popular with employees because it allows them to use the device they like the most, but it’s a potential headache for IT since it means many different devices that need to be supported and secured. As a result only a select number of generally high-end devices are allowed in AMD’s BYOD environment because most low-end x86 devices lack hardware security platform technology. By implementing this in their entire range of APUs, AMD expects to be self-serving here by expanding the range of devices they can support. At the same time AMD and Wolfe expect other companies to adopt BYOD too, in which case this will help to quickly set up AMD to serve a potentially large market.
Wrapping things up, we would be remiss to ignore the elephant in the room, which of course is the inclusion of an ARM core in the first place. A lot of speculation has been going on that AMD is considering adopting the ARM architecture on a broader basis – particularly if HSA takes off and makes the underlying architecture less important – and this certainly is going to fuel more of that. The Cortex-A5 in AMD’s future APUs will be a fully functional ARM processor and in theory it is possible to run full ARM applications on the processor (OS differences not withstanding), though at this point in time AMD hasn’t released the full details on how accessing the ARM processor will work. Even if AMD just intends to use ARM for TrustZone today, this opens the door to comprehensive native ARM code execution in the future if AMD wanted to go that way; but at the same time this could end up being as far as AMD ever goes.
In any case we aren’t expecting AMD to go into any more detail about this announcement here at AFDS, but there are still two days of keynotes to go. Otherwise we’d expect AMD to discuss this in greater detail once they’re ready to unveil more details about their 2013 APUs. So until then stay tuned.
AMD Strengthens Security Solutions through
Technology Partnership with ARM
– Industry-first Collaboration to Extend ARM TrustZone Security Technology into x86-based AMD Offerings, Enabling More Secure Computing Experiences and Significantly Expanding the Security Ecosystem –
SUNNYVALE, Calif. — June 13, 2012 — AMD(NYSE: AMD) today announced it will integrate a new security solution into its future products to meet the increasing need to provide consumers and businesses with secure access to their content and worry-free online transactions. Through a strategic technology partnership with ARM, AMD will integrate the established ARM® TrustZone® technologyinto future Accelerated Processing Units (APUs) via a system-on-a-chip (SoC) design methodology. This industry-first collaboration will help accelerate broader ecosystem support by aligning x86 hardware with the world’s most broadly-adopted mobile security ecosystem.
By adopting the industry-standard approach to security that TrustZone technology embodies, AMD and ARM will provide a consistent approach to security spanning billions of Internet-connected mobile devices, tablets, PCs and servers − whether they are powered by ARM processor-based solutions or AMD x86 APUs. AMD plans to provide development platforms that have TrustZone security features on select APUs in 2013, expanding further across its product portfolio in 2014. In a presentation this week at the AMD Fusion Developer Summit 2012 (AFDS), AMD Senior Vice President and Chief Information Officer Mike Wolfe described AMD’s vision to advance computing security by enhancing AMD’s existing security technologies. This is expected to include developing a platform security processor using an ARM Cortex™-A5 CPU that features TrustZone technology, to monitor and help protect against malicious access to sensitive data and operations at the hardware level
“With AMD’s support for, and inclusion in, the expanding TrustZone ecosystem, consumers and businesses can rest assured their data and content are secured by an industry-standard security solution that spans a multitude of devices and operating systems,” said Wolfe. “This example of AMD’s ambidextrous strategy, which leverages our history of x86 and graphics innovation while also embracing other technologies and intellectual property, will help drive a more secure computing experience for our consumer and businesses customers.”
“As technology becomes more important to our everyday lives, security needs to be present in every single device. The challenge that the industry faces is how to make this a reality,” said Ian Drew, executive vice president, strategy, ARM. “Through this technology partnership with AMD, and the broadening of the ARM TrustZone technology ecosystem, we’re making another important step towards a solution. The aim is to make security accessible and consistent for consumers and business users across all computing devices.”
Industry Support Demonstrates Market Need
In recognition of the first time hardware will be aligned to an industry-standard security solution between multiple processor architectures, the technology partnership has garnered wide support from industry leaders and influencers.
“At Alipay, we strive to provide safe and reliable online payment services to hundreds of millions of registered users for the tens of millions of transactions they make every day,” said Stephen Zhu, senior director, Alipay. “By incorporating security at the hardware level, AMD and ARM are providing an added level of protection and taking us one step closer to achieving this goal.”
“Hardly a week goes by without the emergence of another scary story regarding stolen identities or some other computer-related security breach – such as last week’s hack of social career networking website LinkedIn that resulted in millions of stolen passwords,” observed Nathan Brookwood, Research Fellow at Insight 64. “The bad guys have figured out that it’s easier to steal money from a bank’s computers than from the bank itself. AMD’s move to integrate ARM’s TrustZone technology into future APUs will allow systems containing those APUs to attain the same level of hardware-enforced security as today’s most advanced devices, and will allow the users of those systems to sleep more soundly at night.
ARM TrustZone Brings Security to Millions of Devices
ARM TrustZone technology - a system-wide approach to security - is a key component of the ARM architecture and is integrated into the ARM Cortex-A processor series. Launched in 2004, TrustZone is a result of ongoing co-development that ARM carries out with a wide range of companies and has been implemented in a wide array of devices to date. The aim of the TrustZone ecosystem is to drive industry alignment and scalability. This will enable billions of TrustZone technology-based devices to meet the system security needs of consumers, service providers, enterprises and device manufacturers.
Supporting Resources
- Visit AMD.comto learn more about AMD and its products, or AMD Blogsfor the latest on what’s going on in and around the company
- A live video webcast of the AFDS presentations, with recorded playback, can be accessed at http://www.inxpo.com/events/amd/afds-d
- Follow all the news from the AMD on Twitter at @AMD_Unprocessed or like uson Facebook
- For more information on ARM TrustZone technologyand ARM Cortex Series processors
Facebook
Twitter
RSS
