diff --git a/flake.nix b/flake.nix
index 82628fb..d9d3b5d 100644
--- a/flake.nix
+++ b/flake.nix
@@ -38,6 +38,7 @@
       formatter = forAllSystems (pkgs: pkgs.nixfmt-rfc-style);
 
       devShells = forAllSystems (pkgs: {
+        armTrustedFirmware = pkgs.callPackage ./shells/armTrustedFirmware { };
         plotter = pkgs.callPackage ./shells/plotter { };
         ryujinx = pkgs.callPackage ./shells/ryujinx { };
         zephyr = pkgs.callPackage ./shells/zephyr { };
diff --git a/shells/armTrustedFirmware/default.nix b/shells/armTrustedFirmware/default.nix
new file mode 100644
index 0000000..4c65508
--- /dev/null
+++ b/shells/armTrustedFirmware/default.nix
@@ -0,0 +1,27 @@
+{
+  mkShellNoCC,
+  stdenv,
+  pkgsCross,
+  dtc,
+  openssl,
+}:
+let
+  aarch64 = pkgsCross.aarch64-multiplatform;
+  m0 = pkgsCross.arm-embedded;
+in
+  mkShellNoCC {
+  depsBuildBuild = [
+    stdenv.cc
+    aarch64.stdenv.cc
+    m0.stdenv.cc
+  ];
+  packages = [
+    dtc
+    openssl
+  ];
+
+  CROSS_COMPILE = "${aarch64.stdenv.cc.targetPrefix}";
+  M0_CROSS_COMPILE = "${m0.stdenv.cc.targetPrefix}";
+
+  hardeningDisable = [ "all" ];
+}