Introducing RISC-V Confidential Computing for IoT Devices

on YouTube ↗18m

" summary

Proposes a lightweight hardware-software stack that brings confidential computing to RISC-V IoT devices without an MMU by adding an sPMP extension and a compact runtime called Polite-mini. Implementation in the Spike model and an OSDI paper prototype demonstrates enclave creation and execution with no measurable overhead and shows 128 isolation domains using only 16 PMP registers. Provides APIs, supervisor-mode access prevention, thread-region permissions, and an SDK; evaluation uses microbenchmarks and real-device patches as proof of concept.

AI-written summary · about

" chapters (6)

1. 0:00Introduction
2. 0:18Background
3. 3:07Continuous Continuity
4. 7:10Reference Architecture
5. 9:37Case Study
6. 17:02Summary

" related talks

• 23mRISC V Enclaves A Clean Slate Approach To Linux SecurityCesare Garlati · RISC-V Summit 2019
• 23mTowards Scalable Confidential Computing on RISC-VRavi Sahita · RISC-V Summit North America 2023
• 52mEnabling New Security Frontiers: Deep-Dive Into Implementing Confidential Computing on RISC-VR... · Linux Security Summit Europe 2024
• 21mScaling Data Analytics Via Confidential Computing on RISC-VRavi Sahita · RISC-V Summit North America 2025
• 31mConfidential Computing for RISC-V-based PlatformsRavi Sahita · Linux Plumbers Conference 2022
• 13mRISC-V: Securing the Future of Open Source ComputingAndrew Dellow · Spring 2022 RISC-V Week — RISC-V International Day
• 15mCore slicing: closing the gap between leaky confidential VMs and bare-metal cloudAndrew Baumann, Ziqiao Zhou, Yizhou Shan, Marcus Peinado, Weidong Cui, Xinyang Ge · OSDI 2023
• 09mThe Future of Embedded Security with RISC-VDavid Kerr-Munslow · RISC-V at embedded world 2024