Technologies for secure z-order enforcement with trusted display

A method for secure display z-order enforcement, the method comprising:

• invoking, by a trusted execution environment of a computing device, a first processor instruction with display programming information that includes a z-order enforcement policy, wherein the z-order enforcement policy indicates whether the trusted execution environment requests z-order enforcement for an overlay surface associated with the trusted execution environment;
• generating, by a processor of the computing device, wrapped programming information based on the display programming information in response to invoking the first processor instruction, wherein the wrapped programming information comprises a message authentication code over the z-order enforcement policy;
• invoking, by an untrusted supervisor component of the computing device, a second processor instruction with the wrapped programming information;
• and
• programming, by the processor, a display controller of the computing device with the z-order enforcement policy in response to invoking the second processor instruction.

One or more computer-readable storage media comprising a plurality of instructions stored thereon that, in response to being executed, cause a computing device to:

• invoke, by a trusted execution environment of the computing device, a first processor instruction with display programming information that includes a z-order enforcement policy, wherein the z-order enforcement policy indicates whether the trusted execution environment requests z-order enforcement for an overlay surface associated with the trusted execution environment;
• generate, by a processor of the computing device, wrapped programming information based on the display programming information in response to invoking the first processor instruction, wherein the wrapped programming information comprises a message authentication code over the z-order enforcement policy;
• invoke, by an untrusted supervisor component of the computing device, a second processor instruction with the wrapped programming information;
• and
• program, by the processor, a display controller of the computing device with the z-order enforcement policy in response to invoking the second processor instruction.