Abstract:To ensure secure and trustworthy execution of applications in potentially insecure environments, vendors frequently embed trusted execution environments (TEE) into their systems. Applications executed in this safe, isolated space are protected from adversaries, including a malicious operating system. TEEs are usually build by integrating protection mechanisms directly into the processor or by using dedicated external secure elements. However, both of these approaches only cover a narrow threat model resulting in limited security guarantees. Enclaves nested into the application processor typically provide weak isolation between the secure and non-secure domain, especially when considering side-channel attacks. Although external secure elements do provide strong isolation, the slow communication interface to the application processor is exposed to adversaries and restricts the use cases. Independently of the used approach, TEEs often lack the possibility to establish secure communication to peripherals, and most operating systems executed inside TEEs do not provide state-of-the-art defense strategies, making them vulnerable to various attacks. We argue that TEEs, such as Intel SGX or ARM TrustZone, implemented on the main application processor, are insecure, especially when considering side-channel attacks. In this paper, we demonstrate how a heterogeneous multicore architecture can be utilized to realize a secure TEE design. We directly embed a secure processor into our HECTOR-V architecture to provide strong isolation between the secure and non-secure domain. The tight coupling of the TEE and the application processor enables HECTOR-V to provide mechanisms for establishing secure communication channels between different devices. We further introduce RISC-V Secure Co-Processor (RVSCP), a security-hardened processor tailored for TEEs. To secure applications executed inside the TEE, RVSCP provides hardware enforced control-flow integrity and rigorously restricts I/O accesses to certain execution states. RVSCP reduces the trusted computing base to a minimum by providing operating system services directly in hardware.

Hypervisor Extension for a RISC-V Processor

Advancing Cloud Computing Capabilities on gem5 by Implementing the RISC-V Hypervisor Extension

A First Look at RISC-V Virtualization from an Embedded Systems Perspective

HSP-V: Hypervisor-Less Static Partitioning for RISC-V COTS Platforms

CVA6 RISC-V Virtualization: Architecture, Microarchitecture, and Design Space Exploration

DuVisor: a User-level Hypervisor Through Delegated Virtualization

HECTOR-V: A Heterogeneous CPU Architecture for a Secure RISC-V Execution Environment

VOSySmonitoRV: a mixed-criticality solution on Linux-capable RISC-V platforms

RISC-V Processor for IOT Applications

Development an efficient AXI-interconnect unit between set of customized peripheral devices and an implemented dual-core RISC-V processor

Security and Performance in the Delegated User-level Virtualization

SERVAS! Secure Enclaves via RISC-V Authenticryption Shield

SmartVisor - towards an efficient and compatible virtualization platform for embedded system.

Enabling an OpenStack-based cloud on top of RISC-V hardware

Vcerberus: A DRTM System Based on Virtualization Technology

T-Visor: A Hypervisor for Mixed Criticality Embedded Real-time System with Hardware Virtualization Support

Enabling Heterogeneous, Multicore SoC Research with RISC-V and ESP

Software Development Vehicles to enable extended and early co-design: a RISC-V and HPC case of study

An Agile Instruction Set Extension Method Based on the RISC-V Processor

A Hardware Platform for Ensuring OS Kernel Integrity on RISC-V

Vitamin-V: Expanding Open-Source RISC-V Cloud Environments