RISC-V-based Trusted Execution Environments (TEEs) are gaining traction in the automotive and IoT sectors as a foundation for protecting sensitive computations. However, the supporting infrastructure around these TEEs remains immature. In particular, mechanisms for secure enclave updates and migrations - essential for complete enclave lifecycle management - are largely absent from the evolving RISC-V ecosystem. In this paper, we address this limitation by introducing a novel toolkit that enables RISC-V TEEs to support critical aspects of the software development lifecycle. Our toolkit provides broad compatibility with existing and emerging RISC-V TEE implementations (e.g., Keystone and CURE), which are particularly promising for integration in the automotive industry. It extends the Security Monitor (SM) - the trusted firmware layer of RISC-V TEEs - with three modular extensions that enable secure enclave update, secure migration, state continuity, and trusted time. Our implementation demonstrates that the toolkit requires only minimal interface adaptation to accommodate TEE-specific naming conventions. Our evaluation results confirm that our proposal introduces negligible performance overhead: our state continuity solution incurs less than 1.5% overhead, and enclave downtime remains as low as 0.8% for realistic applications with a 1 KB state, which conforms with the requirements of most IoT and automotive applications.

翻译：基于RISC-V的可信执行环境（TEE）正逐渐在汽车和物联网领域成为保护敏感计算的基础设施。然而，围绕这些TEE的支撑体系仍不成熟。特别是，安全飞地更新与迁移机制（这是完整飞地生命周期管理的关键）在正在发展的RISC-V生态系统中基本缺失。本文通过引入一套新型工具包解决了这一局限，该工具包使RISC-V TEE能够支持软件开发生命周期的关键环节。我们的工具包与现有及新兴的RISC-V TEE实现（如Keystone和CURE）具有广泛兼容性，这些实现尤其有望集成于汽车行业。工具包扩展了安全监控器（SM）——即RISC-V TEE的可信固件层——通过三个模块化扩展实现了安全飞地更新、安全迁移、状态连续性以及可信时间。我们的实现表明，该工具包仅需极少接口适配即可兼容TEE特定的命名规范。评估结果证实，本方案引入的性能开销微乎其微：状态连续性方案的开销低于1.5%，且对于1 KB状态的典型应用，飞地停机时间低至0.8%，符合大多数物联网和汽车应用的要求。