Trusted Application

A trusted application is a specific software program designed to run within a secure execution environment, such as a Trusted Execution Environment or a Secure Element. These applications are built with security as the primary requirement, often undergoing formal verification to ensure they are free of common vulnerabilities.

They handle the most sensitive operations of a device, such as managing cryptographic keys, processing biometric data, or authorizing financial transactions. Because they run in an isolated domain, they are protected from the potential vulnerabilities of the host operating system.

Developers must follow strict coding standards and use secure APIs to interact with the TEE or Secure Element. The lifecycle of a trusted application, from installation to execution, is managed by the secure environment to prevent unauthorized modifications.

They are the functional layer that provides security features to the end-user. In the context of digital assets, a trusted application might be responsible for signing a transaction based on user input, ensuring the key never touches the main system memory.