Betrusted: Better Security Through Physical Partitioning
summary
Project builds a separate, verifiable device that isolates secure apps on a dedicated screen and keyboard, using an FPGA-based single-chip enclave with a spy bridge to an untrusted network coprocessor. Design targets <=4MB RAM and a RISC‑V CPU, a black-and-white LCD and physical keyboard, and a Rust microkernel written for tiny modules (aiming for ~64KB auditable units) with message-passing borrow semantics. First app is Matrix text chat (emulated in Renode), hardware and software are open source, ASICs are a long‑term goal.
AI-written summary · about
chapters (33)
- 0:00Intro
- 1:35Motivation: Hardware You Can Trust With Your Life
- 2:02Complex Things are Hard to Analyze
- 3:19Software Isolation is Dead Speed or safety: pick one
- 3:57Motivated Adversaries
- 4:47Untrustable Supply Chains
- 5:43There is no HMAC for Hardware
- 6:42State of the Art: Secure Enclaves
- 7:12The 1/0 Problem
- 8:04Bottom Line: Want Trust? There are Tradeoffs
- 9:18Betrusted: Verification Requires Simplicity. Simplicity Requires Focus. • The solution depends on
- 9:43The Betrusted Design Context
- 11:26Simple and Verifiable by Design
- 13:52Design Envelope Summary
- 16:09Xous: A Betrusted OS
- 16:26Betrusted Goals
- 17:04Microkernels
- 17:55Too Many Cooks
- 18:58Felix' Rule of Thumb
- 19:39Principles of Software
- 20:52Rust OS Landscape
- 23:13Rust-based OS: Redox
- 23:53Rust-based OS: Tifflin
- 25:20Xous: Memory Model
- 28:16Xous: Interrupts
- 29:55Xous: Missing Features
- 33:08Betrusted: Software
- 34:33Rust Development progression
- 35:25i18n: output
- 36:23Emojis!
- 36:52i18n: input
- 39:03Layer #2: The device
- 40:43How can I get involved?
related talks
38mOne Ring -3 To Secure Them All: Computing with Hardware Enclaves
28mSanctum: Minimal Hardware Extensions for Strong Software Isolation
16mTrusted RV: Trusted Execution Environment, Secure Coprocessor, and their Program...
32mBeyond Software: Hardware-Based Security
35mVeracruz: Privacy-preserving mutliparty computation using trusted hardware
40mKeeping secrets in your opponent's hands
45mThe Future of Security is in Open Silicon
57mDay 2 Keynote: Security Through Distrusting