Parsec: A New Platform Abstraction for Security
summary
Parsec provides a language‑agnostic IPC service that maps the PSA Crypto API onto real TPMs, HSMs and secure elements, exposing REST/Go/C/Cli clients and a wire protocol so the same ~25‑line client code can generate an ECC key, sign a hash and export a public key without platform changes. Service architecture uses a listener, provider backends and keystore partitioning for multi‑tenancy; identity authenticators include Unix peer credentials (UID) over domain sockets and SPIRE SVID/JWT via the Workload API. Rust crates wrap TSS, PKCS#11 and psa‑crypto and are memory‑safe.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 2:00What is Parsec
- 2:52Parsec API
- 4:07Service Architecture
- 5:52Client Libraries
- 6:53Identity
- 9:04Identity Providers
- 11:48Core Library
- 15:01CLI Client
- 16:18Crates
- 18:11Other Rust Projects
related talks
10mParsec
24mPARSEC: A New Platform Abstraction for Security
30mTaming Attestation for the Cloud Native World with Parsec
13mHardware Backed Security For Multitenancy at the Edge with SPIFFE & PAR...
15mCertified Security and Containerisation for RISC-V Microcontrollers
31mSequoia: A New OpenPGP Implementation in Rust
29mClosing the Supply Chain Security Loop with Rust & Pyrsia
40mGetting Started with the TPM2 Software Stack (TSS2)