Towards xBGAS on CHERI: Examining the Benefits of a Secure Distributed Architecture
summary
Retrofits the xBGAS runtime to CHERI-enabled ARM Morello by translating RISC‑V xBGAS semantics into ARM equivalents and simulating distributed PEs with pthread thread pooling, using KVM/FVP-style emulation and sending high/low pointer halves across the OS to rebuild capabilities. Uses CHERI’s unused object type bits as object type remoteness encoding. Benchmarks run GUPS at ~33–35M updates in 20s and show expected scalability (but an X‑factor slowdown from pure hardware); out‑of‑bounds reads trigger CHERI address‑space exceptions, use‑after‑free remains unresolved.
AI-written summary · about
chapters (11)
- 0:00xBGAS on CHERI intro
- 1:50xBGAS architecture motivation
- 3:15Distributed systems security
- 5:23CHERI for secure extensions
- 6:46xBGAS on ARM Morello
- 9:17Adapting xBGAS instructions
- 10:00Runtime tests and benchmarks
- 11:24Performance evaluation
- 13:13Security vs memory flaws
- 14:58Conclusion and future
- 15:40Q&A
related talks
10mCHERI in out-of-order microarchitectures
18mCVA6-CHERI - An Open-source RV64Y Implementation for Commercialization
17mHardening Linux and FreeBSD on RISC-V with CHERI
11mFast and fine-grained compartmentalisation in CHERI
53mLinux and CHERI: Back to the Future
11mDemo: Securely Booting CHERI on a Full OS to Prevent Buffer Overflow Attacks
24mSecure Calling Conventions for CHERI Capability Machines in Practice (Work in P...
20mMaking CHERI Accessible