# Building Hardware-Enforced Trust into Matter Devices with ESP-TEE

DevFeed: [Building Hardware-Enforced Trust into Matter Devices with ESP-TEE](<https://devfeed.tech/articles/building-hardware-enforced-trust-into-matter-devices-with-esp-tee-13724.md>)

Original publisher: [Read original article](<https://developer.espressif.com/blog/2025/09/matter_w_esp_tee_c6/>)

Author: John Lee

Published: 2025-09-12T00:00:00Z

Content type: article

Language: en

Sources: [Blog on Developer Portal](<https://devfeed.tech/sources/blog-on-developer-portal.md>)

Topics: [Matter](<https://devfeed.tech/topics/matter.md>), [trusted-execution-environment](<https://devfeed.tech/topics/trusted-execution-environment.md>), [ESP32-C6](<https://devfeed.tech/topics/esp32-c6.md>), [RISC-V](<https://devfeed.tech/topics/riscv.md>), [Internet of things](<https://devfeed.tech/topics/iot.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [attestation](<https://devfeed.tech/tags/attestation.md>), [blog](<https://devfeed.tech/tags/blog.md>), [esp-tee](<https://devfeed.tech/tags/esp-tee.md>), [esp32-c6](<https://devfeed.tech/tags/esp32-c6.md>), [iot](<https://devfeed.tech/tags/iot.md>), [matter](<https://devfeed.tech/tags/matter.md>), [risc-v](<https://devfeed.tech/tags/risc-v.md>), [security](<https://devfeed.tech/tags/security.md>), [verification](<https://devfeed.tech/tags/verification.md>)

## AI overview

This article explains how Espressif's ESP-TEE framework integrates with Matter on ESP32-C6 RISC-V SoCs. It describes hardware-isolated protection for device credentials, cryptographic operations, secure storage, OTA updates, attestation, and Matter DAC and NOC keys.

## Source excerpt

As security expectations rise globally - driven by region-specific cybersecurity regulations - safeguarding device credentials has become critical for IoT manufacturers. This article explains how the ESP-TEE framework integrates with Matter and demonstrates building secure products using the Espressif RISC-V SoCs, showcasing hardware-enforced security that can resist scalable remote software attacks.