Certified Security and Containerisation for RISC-V Microcontrollers

on YouTube ↗15m

" summary

A minimal PSA-certified TEE for MMU-less RISC-V cores (Zaya) exposes the standard PSA crypto API, uses available hardware virtualization, and runs as an independent security monitor that preserves signature and lifecycle so user updates do not break certification. A user-space runtime hosts isolated microcontainers that are independent executables, enforce explicit resource access policies, allow independent deployment and third‑party certification, and can run interpreters, VMs or RTOS images — the claim is the device attains a PSA-compliant root of trust.

AI-written summary · about

" chapters (8)

1. 0:00Introduction to talk
2. 1:06Security challenges in RISC-V
3. 3:39Requirements for secure systems
4. 6:51PSA-certified solution for RISC-V
5. 9:25Extending to user space programming
6. 11:13Xaya micro-containers overview
7. 13:16Access policies for micro-containers
8. 14:21Use cases and conclusion

" related talks

• 39mSoftware Supply Chain Security with Trusted Execution Environment Provisioning (T...Akira Tsukamoto · SupplyChainSecurityCon @ Open Source Summit Japan 2023
• 16mTrusted RV: Trusted Execution Environment, Secure Coprocessor, and their Program...Kuniyasu Suzaki · RISC-V Forum: Security 2021
• 45mThe Future of Security is in Open SiliconJoel Wittenauer · Linux Security Summit North America 2018
• 23mRISC V Enclaves A Clean Slate Approach To Linux SecurityCesare Garlati · RISC-V Summit 2019
• 21mTEEP (Trusted Execution Environment Provisioning) on RISC-VAkira Tsukamoto, Kuniyasu Suzaki · RISC-V Global Forum 2020
• 13mRISC-V: Securing the Future of Open Source ComputingAndrew Dellow · Spring 2022 RISC-V Week — RISC-V International Day
• 01h 05mConfidential Computing for RISC-V-based PlatformsRavi Sahita · RISC-V Summit 2022
• 25mRISC V and Meta framework Security Cert Approach for a Secure Connected WorldJohn Boggie · RISC-V Summit 2019