Using trusted execution environments for security of code and data

An embodiment includes a processor coupled to memory to perform operations comprising: creating a first trusted execution environment (TXE), in protected non-privileged user address space of the memory, which makes a first measurement for at least one of first data and first executable code and which encrypts the first measurement with a persistent first hardware based encryption key while the first measurement is within the first TXE; creating a second TXE, in the non-privileged user address space, which makes a second measurement for at least one of second data and second executable code; creating a third TXE in the non- privileged user address space; creating a first secure communication channel between the first and third TXEs and a second secure communication channel between the second and third TXEs; and communicating the first measurement between the first and third TXEs via the first secure communication channel. 实施例包括处理器，所述处理器耦合至存储器以便执行包括以下各项在内的操作：在所述存储器的受保护非特权用户地址空间中创建第可信执行环境(TXE)，所述第TXE对第数据和第可执行代码中