Penglai Enclave: Verifiable and Scalable RISC-V TEE System

" summary

Penglai-Enclave presents an open-source trusted execution environment (TEE) for RISC‑V that uses hardware-assisted scalable physical memory isolation to support large numbers of enclaves and improve secure communication performance. It targets scalability (over 1,000 concurrent instances on constrained devices), includes support libraries such as ARM PSA for trusted app development, and applies formal methods to validate its software TCB.

AI-written summary · about

" related talks

• 14mScalable Memory Protection in the PENGLAI EnclaveHaibo Chen, Dong Du, Yubin Xia, Binyu Zang, Erhu Feng, Xu Lu, Bicheng Yang, Xueqiang Jiang · 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI '21)
• 21mTEEP (Trusted Execution Environment Provisioning) on RISC-VAkira Tsukamoto, Kuniyasu Suzaki · RISC-V Global Forum 2020
• 23mRISC V Enclaves A Clean Slate Approach To Linux SecurityCesare Garlati · RISC-V Summit 2019
• 16mTrusted RV: Trusted Execution Environment, Secure Coprocessor, and their Program...Kuniyasu Suzaki · RISC-V Forum: Security 2021
• 41mPanel: A New Root Of Trust: Changing Computing With TEEHardwear.io USA 2024
• 28mSanctum: Minimal Hardware Extensions for Strong Software IsolationSrinivas Devadas, Victor Costan, Ilia Lebedev · USENIX Security '16
• 39mSoftware Supply Chain Security with Trusted Execution Environment Provisioning (T...Akira Tsukamoto · SupplyChainSecurityCon @ Open Source Summit Japan 2023
• 15mProposal of porting Trusted Execution Environment Provisioning (TEEP) Protocol...Akira Tsukamoto · Linux Plumbers Conference 2023