Confidential Computing for RISC-V-based Platforms
summary
Proposal describes a practical confidential computing stack for application‑class RISC‑V that uses a small Trusted Security Monitor (TSM) plus a dynamic PMA and MMU extensions to mark and enforce confidential physical memory attribute regions so the host OS/VMM keeps resource control but loses direct access to tenant memory. It specifies a TH/TG ABI and standard attestation rooted in hardware, sketches device attestation and PCIe TDISP flows, and ships an open source Rust TSM (95% of ABI) for 64‑bit RISC‑V.
AI-written summary · about
chapters (15)
- 0:00Introduction to talk
- 0:42About speaker and outline
- 3:09What is confidential computing
- 7:23Use cases for confidential computing
- 9:09Threat model for confidential compute
- 12:21Reference architecture overview
- 19:01Technology components and TCB
- 25:40Hardware root of trust
- 30:55Confidential memory model
- 34:08Platform data protection
- 36:55Device assignment to TVMs
- 41:08TSM API and life cycle
- 46:05Current status of specs
- 48:30Call to action and summary
- 50:20Q&A session
related talks
31mConfidential Computing for RISC-V-based Platforms
23mTowards Scalable Confidential Computing on RISC-V
52mEnabling New Security Frontiers: Deep-Dive Into Implementing Confidential Computing on RISC-V
21mScaling Data Analytics Via Confidential Computing on RISC-V
13mTowards unified confidential computing ABIs
37mIt's All About Trust: Why Confidential Computing Matters
36mEverybody is talking about Confidential Computing - the minimum Devs should know
47mThe Rise of Confidential Computing, What It Is and What it Means to You