Hello Experts,
Does the Azure Sphere (pluton security subsystem) and ARM's Platform security Architecture (PSA) are equivalent solutions ?
Also I observe, Azure Sphere internally uses Medaitek (ARM core) but it has its own security subsystem built-in. Does it remains same for PSA as well ?
Hi there. PSA Certified devices are certified to different security levels depending on the threat model that needs to be addressed. There are three levels simply named Level 1, 2 and 3, whereby the higher levels are more strictly evaluated. The first two levels are for devices that only protect against software attacks, and the final level is for devices that also need to protect against a range of physical attacks.
You can find the list of PSA Certified chips and devices here https://www.psacertified.org/products/ a lab hasn't evaluated Sphere yet, so it can be difficult to know which level it is equivalent to. Especially because evaluations can take a month or longer in one of the labs depending on the level.
That said, Sphere devices look like they provide a great deal of security, and we look forward to seeing one evaluated.