As quoted above, a TEE is a hardware-backed secure area of the main processor (like ARM TrustZone or Intel SGX). Technically speaking, the TEE is just the hardware fortress (exceptions exist like TrustZone) whilst a Content Decryption Module (CDM) like Google’s Widevine, Apple’s FairPlay, and Microsoft’s PlayReady use the TEE to ensure cryptographic keys and decrypted media buffers are never exposed to the host operating system let alone the user’s browser. For the purposes of this article, I may at times refer to them interchangeably but all you need to know is that they work together and in any case, the host OS can’t whiff any of their farts so to speak.
its own, with up to 20KB of user-available memory and diskette drive. A 3601，推荐阅读旺商聊官方下载获取更多信息
，详情可参考同城约会
→ 0x5D5 (PASSED) + set A-bit
Strong process isolation，详情可参考safew官方下载