Update on RISC-V Confidential VM Extension (CoVE)

on YouTube ↗10m

" summary

Proposes a RISC‑V memory tracking table (MTT) ISA extension that checks the final physical address after page-table walks and enforces per‑supervisor‑domain allow/deny decisions, biased for large pages and cacheable to avoid more than one extra load in fast paths. Provides reference software: a TSM implementation using the H extension, KVM patches and a pure‑software proof‑of‑concept that runs without custom silicon. Specification split: smmt in the ISA tree, CoVE ABI and guest/TSM ABI as non‑ISA docs, target public review Q4'23.

AI-written summary · about

" chapters (7)

1. 0:00Introduction to CoVE update
2. 1:03Supervisor domains concept
3. 2:49Memory Tracking Table details
4. 4:13CoVE architecture models
5. 5:55ABI design rationale
6. 8:26Software-defined CoVE approach
7. 9:30Discussion and next steps

" related talks

• 23mTowards Scalable Confidential Computing on RISC-VRavi Sahita · RISC-V Summit North America 2023
• 52mEnabling New Security Frontiers: Deep-Dive Into Implementing Confidential Computing on RISC-VR... · Linux Security Summit Europe 2024
• 31mConfidential Computing for RISC-V-based PlatformsRavi Sahita · Linux Plumbers Conference 2022
• 21mScaling Data Analytics Via Confidential Computing on RISC-VRavi Sahita · RISC-V Summit North America 2025
• 01h 05mConfidential Computing for RISC-V-based PlatformsRavi Sahita · RISC-V Summit 2022
• 21mI/O Virtualization Use Cases and the RISC-V IOMMU OverviewVed Shanbhogue · RISC-V Summit 2022
• 24mTrusted Execution State: An Extension for Lightweight Secure Function CallingMark Hill · RISC-V Global Forum 2020
• 21mTEEP (Trusted Execution Environment Provisioning) on RISC-VAkira Tsukamoto, Kuniyasu Suzaki · RISC-V Global Forum 2020