[Rats] FIDO and Android are major TEE use cases

[Laurence Lundblade <[e-mail]>]

Want to point out that TEEP / OTRP is a potential TEE use case, but not yet a major one (IMO). 

The Android keystore with attestation is just about always implemented in the TEE. There are extensive APIs available to Android apps today to use it. What is particularly cool about it is that access to a key in the keystore can be gated on biometric authentication making it a keystore that is actually useful to applications. Android SafetyNet is different and not in the TEE.

Most FIDO implementations are in the TEE, some by virtue of using the Android keystore some because they are an a separate trusted application.

WeChat pay, a major payment system in China bigger than PayPal, uses a tweaked version of the Android key store in the TEE. Probably IFAA / AliPay too.

Apple’s Secure Enclave is roughly equivalent to a TEE for our purposes. It is a fully isolated and functional computing environment that has facilities similar to the Anroid keystone that hopefully someday will implement EAT.

LL