Library-based Compartmentalisation on CHERI

on YouTube ↗12m

" summary

Prototype implements a dynamic linker as TCB on Morello/CHERI and demonstrates library-granular compartments enforced by trampoline-mediated transitions between executive and restricted user modes. Runtime trampolines apply capability attenuation, perform per-library stack switches to prevent capability leaks, and enforce low-back-to-control returns. Implementation runs on real Morello hardware, integrates with standard ELF dynamic linking, and shows early viability of low-overhead compartmentalisation without wholesale refactoring.

AI-written summary · about

" chapters (8)

1. 0:00Introduction
2. 0:19CHERI
3. 1:07Properties
4. 1:48Stage of Research
5. 5:11Problem
6. 6:48Morello
7. 9:11Stack Switching
8. 10:27Next Steps

" related talks

• 11mFast and fine-grained compartmentalisation in CHERIDapeng Gao, Robert N. M. Watson, Franz A. Fuchs, Peter Rugg, Jonathan Woodruff, Alexandre Joannou, Simon W. Moore · RISC-V Summit Europe 2025
• 24mSecure Calling Conventions for CHERI Capability Machines in Practice (Work in Pr...Steven Keuchel, Thomas Van Strydonck, Dominique Devriese, Sander Huyghebaert, Elias Storme · POCL 2024
• 23mCompartmentalisation modelsDapeng Gao · POCL 2024
• 10mCHERI in out-of-order microarchitecturesFranz Fuchs · RISC-V Summit Europe 2024
• 28mSECOMP2CHERI: Securely Compiling Compartments from CompCert C to a Capability M...Aina Linn Georges, Cătălin Hriţcu, Arthur Azevedo de Amorim, Andrew Tolmach, Jérémy Thibault, Roberto Blanco · PriSC 2023
• 16mMitigating Transient-Execution Attacks with CHERI CompartmentsFranz Fuchs · RISC-V Summit Europe 2023
• 53mLinux and CHERI: Back to the FutureCarl Shaw · Linux Security Summit Europe 2025
• 24mSecure Calling Conventions for CHERI Capability Machines in Practice (Work in P...Steven Keuchel, Thomas Van Strydonck, Dominique Devriese, Sander Huyghebaert, Elias Storme · PriSC 2024