Towards Scalable Confidential Computing on RISC-V

on YouTube ↗23m

" summary

Proposes a RISC‑V architecture to host true confidential VMs by adding a memory tracking table (MTT) and supervisor domains (SMMT) that enforce physical page ownership while keeping existing SV and hypervisor page models, plus an IMT checker to tie device IOMMUs into those domains and simple interrupt binding so devices can be safely assigned. Specifies a CoVE ABI for lifecycle ops and attestation chaining to a hardware root of trust like OpenTitan, largely spec proposals with Keystone demos and some ratified extensions.

AI-written summary · about

" chapters (8)

1. 0:00Introduction to project
2. 1:06Confidential computing basics
3. 2:52Threat modeling and goals
4. 4:07Trusted execution requirements
5. 5:50Reference architecture
6. 9:30ISA mechanisms
7. 16:38Non-ISA and ABI capabilities
8. 21:24Call to action and summary

" related talks

• 01h 05mConfidential Computing for RISC-V-based PlatformsRavi Sahita · RISC-V Summit 2022
• 52mEnabling New Security Frontiers: Deep-Dive Into Implementing Confidential Computing on RISC-VR... · Linux Security Summit Europe 2024
• 31mConfidential Computing for RISC-V-based PlatformsRavi Sahita · Linux Plumbers Conference 2022
• 21mScaling Data Analytics Via Confidential Computing on RISC-VRavi Sahita · RISC-V Summit North America 2025
• 10mUpdate on RISC-V Confidential VM Extension (CoVE)Atish Patra, Ravi Sahita · Linux Plumbers Conference 2023
• 18mIntroducing RISC-V Confidential Computing for IoT DevicesBicheng Yang, Dingji Lee · RISC-V Summit 2022
• 13mRISC-V: Securing the Future of Open Source ComputingAndrew Dellow · Spring 2022 RISC-V Week — RISC-V International Day
• 15mCore slicing: closing the gap between leaky confidential VMs and bare-metal cloudAndrew Baumann, Ziqiao Zhou, Yizhou Shan, Marcus Peinado, Weidong Cui, Xinyang Ge · OSDI 2023