Integration of the DICE specification into the Keystone framework

The scope of this thesis is to implement a design that permits the correct implementation of the Device Identifier Composition Engine (DICE) in Keystone. The first three chapters have been used to write the state of the art of the different topics debated. The first one is related to the most important characteristics of DICE, its hardware requirements and the different types of architectures on which it is based on. Each one of this topic has been explained, considering all the different papers associated to DICE. The second chapter talks about the Trusted Execution Environments (TEEs), briefly explains what a TEE is and what its features are. The rest of the chapter presents the different technologies that are actually on the market and a platform that produces standards about this topic. Associated to each technology an explanation of how it works and how it is implemented is provided. The third one, instead, is associated to the presentation of the Keystone Project, the project on which the thesis is based, showing how it works, its features and its weaknesses. The practical part has been focused on the implementation of the DICE standard in the Keystone framework making all the things needed to obtain the better results: the fourth chapter describes the design that have been chosen and in the fifth chapter all the modification that have to be included in Keystone to respect the standard are shown. The last chapter is associated to the tests. The first part is associated to the functional tests that have been used to check the correctness of what have been done, demonstrating the correct implementation of the DICE specifications in the Keystone project. The second part, instead, shows the performance tests: they have been used to see how the performances of the edited version of the project is different from the original one.