Keystone – Open-source Secure Hardware Enclave

Re:Keystone – Open-source Secure Hardware Enclave by Confiks on Thursday December 06, 2018 @08:00PM (#18624175)

> there's not much there

What's missing?

Workshop on Building Open Source Secure Enclave, with little information about what was presented [1]. The Google slides are superficially interesting: https://keystone-enclave.org/workshop-website-2018/slides/Sc...

Documentation: http://docs.keystone-enclave.org/en/latest/Getting-Started/i...

Mailing list: https://groups.google.com/forum/#!forum/keystone-enclave

[1] https://keystone-enclave.org/workshop-website-2018/

[ Parent | on HN ]

Re:Keystone – Open-source Secure Hardware Enclave by tptacek on Thursday December 06, 2018 @09:02PM (#18624492)

I'm not saying there's anything missing, just that there isn't much in it; it's a mirror of the already-existing "tethered RISC-V" proxy kernel, with a trivial hello-world app on top of it (the app listens for messages over the "HTIF" interface, uses NaCL to encrypt/decrypt them, and implements essentially "hello world").

Compare to the object/capability schemes in modern L4s.

[ Parent | on HN ]