Abstract:To ensure secure and trustworthy execution of applications in potentially insecure environments, vendors frequently embed trusted execution environments (TEE) into their systems. Applications executed in this safe, isolated space are protected from adversaries, including a malicious operating system. TEEs are usually build by integrating protection mechanisms directly into the processor or by using dedicated external secure elements. However, both of these approaches only cover a narrow threat model resulting in limited security guarantees. Enclaves nested into the application processor typically provide weak isolation between the secure and non-secure domain, especially when considering side-channel attacks. Although external secure elements do provide strong isolation, the slow communication interface to the application processor is exposed to adversaries and restricts the use cases. Independently of the used approach, TEEs often lack the possibility to establish secure communication to peripherals, and most operating systems executed inside TEEs do not provide state-of-the-art defense strategies, making them vulnerable to various attacks. We argue that TEEs, such as Intel SGX or ARM TrustZone, implemented on the main application processor, are insecure, especially when considering side-channel attacks. In this paper, we demonstrate how a heterogeneous multicore architecture can be utilized to realize a secure TEE design. We directly embed a secure processor into our HECTOR-V architecture to provide strong isolation between the secure and non-secure domain. The tight coupling of the TEE and the application processor enables HECTOR-V to provide mechanisms for establishing secure communication channels between different devices. We further introduce RISC-V Secure Co-Processor (RVSCP), a security-hardened processor tailored for TEEs. To secure applications executed inside the TEE, RVSCP provides hardware enforced control-flow integrity and rigorously restricts I/O accesses to certain execution states. RVSCP reduces the trusted computing base to a minimum by providing operating system services directly in hardware.

Towards a Secure Integrated Heterogeneous Platform via Cooperative CPU/GPU Encryption

Confidential Computing on Heterogeneous CPU-GPU Systems: Survey and Future Directions

Enabling Privacy-Preserving, Compute- and Data-Intensive Computing using Heterogeneous Trusted Execution Environment

Towards a High-performance and Secure Memory System and Architecture for Emerging Applications

A Trustenclave-Based Architecture for Ensuring Run-Time Security in Embedded Terminals

SHAPER: A General Architecture for Privacy-Preserving Primitives in Secure Machine Learning.

A low-complexity heterogeneous multi-core platform for security soc

Enabling Rack-scale Confidential Computing using Heterogeneous Trusted Execution Environment

High-Efficiency Parallel Cryptographic Accelerator for Real-Time Guaranteeing Dynamic Data Security in Embedded Systems

TensorTEE: Unifying Heterogeneous TEE Granularity for Efficient Secure Collaborative Tensor Computing

Empowering Data Centers for Next Generation Trusted Computing

Code Polymorphism Meets Code Encryption: Confidentiality and Side-Channel Protection of Software Components

Hardware/Software Cooperative Design Against Power Side-Channel Attacks on IoT Devices

HECTOR-V: A Heterogeneous CPU Architecture for a Secure RISC-V Execution Environment

Research on Performance Optimization of Encryption Algorithms for Network Security Framework

Composite Enclaves: Towards Disaggregated Trusted Execution

Understanding Co-Running Behaviors on Integrated CPU/GPU Architectures

Enclavisor: A Hardware-software Co-design for Enclaves on Untrusted Cloud

Coherence Attacks and Countermeasures in Interposer-Based Systems

A New Profiling-Based Side-Channel Attack on Graphics Processing Units

Unified Coprocessor for High-Speed AES-128 and SM4 Encryption