Abstract: Systems and techniques are provided for providing access to one or more execution environments. For example, a process can include receiving a listen call from a first virtual machine (VM) and registering a listener call context of the first VM with a callback service of a trusted execution environment (TEE). A return code indicating no callback requests are available causes the first VM to put the listener call context to sleep. A call from a second VM raises a service request for a VM service of the first VM. A wake return code to the second VM wakes the listener call context of the first VM. A callback request transmitted to the VM service of the first VM corresponds to the service request raised by the second VM. A response call received from the VM service of the first VM is indicative of a callback response to the callback request.

Abstract: Methods, apparatus, and computer program products for protecting information stored on a computing device are described. An example of a method includes generating a first encryption key based on a previously stored factory reset value, encrypting, by a processor, at least a portion of information associated with an application using the first encryption key, storing the encrypted at least the portion of the information associated with the application in a memory of the computing device, obtaining, by the processor, a request for a factory reset of the computing device, in response to the request for the factory reset of the computing device, replacing, by the processor, the previously stored factory reset value with a new factory reset value, and disabling decryption of the stored encrypted at least the portion of the information associated with the application by generating a second encryption key based on the new factory reset value.