In the upcoming virtual CARRV co-located with ISCA, Gui will be presenting "Software-Based Off-Chip Memory Protection for RISC-V Trusted Execution Environments" which implements off-chip memory protection for Keystone enclaves! Check out the paper/video at carrv.github.io/2020
Unfixable vulnerability found on Intel chips. The ROM of CSME is vulnerable which breaks the root of Trust.
"The vulnerability allows extracting the Chipset Key and manipulating part of the hardware key and the process of its generation."
blog.ptsecurity.com/2020/03/…
Keystone's security monitor now has a partial Rust implementation. All the core metadata handling was ported to Rust. Follow the docs to try: docs.keystone-enclave.org/en…
Keystone is now available for testing on @XilinxInc VC707!
Thanks to contributions from Akira Tsukamoto and Hoang Trong Thuc (UEC, Tokyo)
thuchoang90.github.io/vc707.…
We hosted a great Open-Source Enclaves Workshop (OSEW'19) last week here at UC Berkeley. You can read our thoughts on it on the Keystone blog. keystone-enclave.org/2019/07…
Panel discussion is ongoing at #OSEW2019! Paul Chou (Nvidia),
Paul Kocher (Independent), Justin Lin (HTC), Frank Mckeen (Intel Labs), Satyam Srivastava (Intel): youtube.com/c/esgeecs/live
Mingshen from Baidu talking about building Rust SDK in Keystone, bringing more memory-safe applications to run in Keystone enclave: youtube.com/c/esgeecs/live
Live streaming of the workshop on Open Source Secure Enclave: youtube.com/c/esgeecs/live . Join us for an exciting day of talks and discussions on building trustworthy secure enclaves!
The Keystone paper is now available! We're summarizing it in a short blog series, check out the first entry on the Keystone Blog keystone-enclave.org/2019/07…
Really excited about our first open source release for Keystone Secure Hardware Enclave! Looking forward to working together with community! Available for download and run today:
keystone-enclave.org/2018/12…