secGear: openEuler native confidential computing framework
Talkat Confidential Computing Mini Summit at Open Source Summit Europe 2023 · on Monday, 2023-09-18·
summary
secGear is an openEuler-native confidential computing stack that ships a multi-architecture SDK (x86, ARM, RISC‑V) and a unified API so one code path targets different TEEs. It implements secure channel + remote attestation and an enclave switchless 10x ARM exit/enter optimization using shared memory to cut context switches and copies. Two large Chinese deployments—an issuing agency and an encrypted-query database on a compound TEE chip—run at scale with the stack in production.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 1:04openEuler OS and vision
- 3:59Technology advantages
- 7:52secGear framework
- 10:43secGear tools
- 13:28Performance on ARM
- 14:57Certificate agency use case
- 17:09Encrypted database use case
- 18:59Summary
- 19:42Q&A: Asia expansion
- 20:25Q&A: CCC role
- 22:31Q&A: Hardware standardization
- 23:36Q&A: Secure channel & attestation
- 24:41Q&A: Contributing
- 26:34Q&A: Languages & compilers
related talks
38mOne Ring -3 To Secure Them All: Computing with Hardware Enclaves
43mShhh - Stop Sharing Secrets, a Secure Mindset for Embedded Development
09mThe Future of Embedded Security with RISC-V
20mPortable Implementation of GlobalPlatform API for TEE
48mOP-TEE: Using the ARM Trust-Zone to Control Tamper Resistant Processors
24mSecure boot, TEEs, different OSes and more
15mProposal of porting Trusted Execution Environment Provisioning (TEEP) Protocol...
45mThe Future of Security is in Open Silicon