~/talk

Secure Calling Conventions for CHERI Capability Machines in Practice (Work in P...

on YouTube 24m
Talkat PriSC 2024 · on Saturday, 2024-01-20· [security]

speakers

name:Elias Storme
links:none on file
name:Sander Huyghebaert
links:none on file
name:Steven Keuchel
links:none on file
name:Thomas Van Strydonck
links:none on file
name:Dominique Devriese
linkedin:dominique-devriese-9905757

resources

video:https://youtu.be/oDFA18IXE8g
slides:none on file

summary

Proposes a concrete design that reconciles theoretical secure calling conventions with real CHERI-RISC-V constraints by introducing a reserve stack to avoid the 16 KB limit caused by CHERI’s capability compression, provides an LLVM implementation of selected conventions, and runs microbenchmarks measuring execution cost, stack usage and binary size; results are work-in-progress, no hardware yet (emulator and gem5 trace plans), and initial findings show nontrivial overheads and compatibility challenges that still need quantification.

AI-written summary · about

chapters (10)

  1. 0:00Introduction
  2. 1:05CHERI capability machines
  3. 4:59Secure compartmentalization goal
  4. 9:22Secure calling conventions theory
  5. 11:09Capability compression challenge
  6. 13:22Stack splitting design
  7. 16:14LLVM implementation
  8. 18:40Return encapsulation design
  9. 20:23Benchmarking and compatibility
  10. 21:03Conclusion

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.