테크에코

Dear HN community! Looking forward to hearing your feedback on ACE (assured confidential execution), technology that implements VM-based trusted execution environment (TEE) for embedded RISC-V systems with focus on a formally verified and auditable firmware. We target high-assurance systems that can benefit from compartmentalization and hardware-backed isolation. The key ingredient called security monitor (firmware) is implemented in Rust. The formal specification is defined as annotations directly in code and gets translated to Coq using RefinedRust automation. ACE design is now part of the RISCV confidential VM extension (CoVE) specification (deployment model 3).

5 comments

neom3일 전

Developers have faced in the confidential computing space, particularly with x86 TEEs, fragmentation leading to vendor lockin and a difficult developer experience due to multiple, somewhat incompatible standards/approaches. Does the CoVE effort, and IBM's involvement in it, aim to prevent a similar situation in the RISC-V world, fostering a more open and standardized TEE ecosystem? Are you using CCC to align RISC-V CoVE with efforts to improve the developer experience? I hope we see common abstractions across different TEE architectures!!!

评论 #44061487 未加载

IshKebab4일 전

Can you explain what the relationship is between this and CoVE? Is ACE (this repo) the firmware, and CoVE the RISC-V hardware extensions that it requires?<p>How does it run on a P550 if that doesn't support CoVE?

评论 #44056911 未加载

评论 #44060764 未加载

hyperhello3일 전

> ACE supports local attestation, a mechanism to authenticate confidential VMs intended for embedded systems with limited or no network connectivity.<p>I'm interested to know the safe definition of 'limited' connectivity - is there some kind of boundary which logical reasoning can't support?

l0ng1nu52일 전

This area is where I see riscv excelling ahead of current proprietary options. I don't think it can compete on speed in terms of general purpose computing at this point.<p>The way I see it, once guaranteed security is offered, security conscious IT admins will insist on using it and the herd will eventually follow.

Show HN: Confidential computing for high-assurance RISC-V embedded systems

5 comments

Show HN: Confidential computing for high-assurance RISC-V embedded systems

5 comments