Arm TrustZone technology provides hardware features to enable the deployment of security-critical software in trusted execution environments (TEEs). Although TrustZone is widely deployed on physical hardware, it is unavailable to increasingly deployed virtual machines (VMs) running on commodity Arm platforms. These VMs cannot leverage TrustZone's security features, such as secure boot, or deploy trusted applications to secure their systems. To address this limitation, we propose a new design, called kvTZ, that extends commodity hypervisors to expose a virtualized TrustZone to VMs. kvTZ introduces exception-level multiplexing, a novel technique that enables native execution of TrustZone software in the VM environment on the existing Arm hardware. We prototyped kvTZ by extending KVM implementations, including the mainline Linux and Google's Android Linux for pKVM, to support legacy and confidential VMs. kvTZ supports OP-TEE, a de facto open-source TEE for Arm TrustZone. For the first time, we enabled OP-TEE's entire software stack, which encompasses trusted applications (TAs), the kernel, and trusted firmware, to run in a virtualized TrustZone. We show that kvTZ achieves performance efficiency and outperforms the full software emulation-based solution.

This paper presents a voltage-controlled oscillator (VCO)-based readout ADC for quasi-static sensor applications. The proposed VCO-based ADC is implemented in a low-temperature polycrystalline silicon thin-film transistor (LTPS-TFT) process. To mitigate the severe offset and flicker noise in the TFT technology, this design adopts a relaxation-based VCO and a system-level chopping scheme. To improve the linearity and widen the input range, a foreground 3rd-order polynomial-fitted compensation is adopted in this design. This readout ADC is fabricated in a 3-µm LTPS-TFT process and occupies a core area of only 3.6 mm2. With a 5-V supply voltage, the proposed VCO-ADC achieves a 48.2-dB SNR with a 0.6-V input at a bandwidth of 250 Hz. The total power consumption is 505 µW. The ADC’s dynamic range is 59.5 dB. The corresponding Walden’s figure of merit (FoMw) is 4.8 nJ/conversion-step.