Since RPMB is tamper-resistant, it can be used as a storage medium for a variety of data-critical purposes on an
embedded system: • A place to write "permanent" and/or "pre-programmed" data on a system without any
programmable ROM storage, or if the data is too large for it. • Along with encryption and hardware fuses, it can also be used to build a trusted storage solution for a
trusted execution environment • Anti-rollback protection for versioned data (keys, encrypted files, software, etc). • Storage for a Trusted Application However, in other cases the access to RPMB is controlled through a proprietary driver; this may require use of a Trusted Application instead of a normal application to access the data. Some embedded flash storage devices, such as
eMMC,
eUFS and
NVMe, support this standard. == Logical unit addressing ==