Multi-tenant computing platforms are typically comprised of several software and hardware components including platform firmware, host operating system kernel, virtualization monitor, and the actual tenant payloads that run on them (typically in a virtual machine, container, or application). This model is well established in large scale commercial deployment, but the downside is that all platform components and operators are in the Trusted Computing Base (TCB) of the tenant. This aspect is ill-suited for privacy-oriented workloads that aim to minimize the TCB footprint. Confidential computing presents a good stepping-stone towards providing a quantifiable TCB for computing. Confidential computing [1] requires the use of a HW-attested Trusted Execution Environments for data-in-use protection. The RISC-V architecture presents a strong foundation for meeting the requirements for Confidential Computing and other security paradigms in a clean slate manner. This paper describes a reference architecture and discusses ISA, non-ISA and system-on-chip (SoC) requirements for confidential computing on RISC-V Platforms. It discusses proposed ISA and non-ISA Extension for Confidential Virtual Machine for RISC-V platforms, referred to as CoVE.
翻译：多租户计算平台通常由几个软件和硬件组件组成，包括平台固件、主机操作系统内核、虚拟化监视器以及实际运行在这些组件上（通常是在虚拟机、容器或应用程序中）的租户载荷。这种模型在大规模商业部署中已经得到了很好的应用，但缺点是所有平台组件和运营商都在租户的信任计算基础（TCB）中，这方面不适合旨在最小化 TCB 占用的基于隐私的工作负载。机密计算是朝着提供可量化 TCB 的计算方式的一个良好的跳板。机密计算[1]需要使用硬件授权的可信执行环境来保护数据使用。RISC-V 架构以一种干净的方式为满足机密计算和其他安全范例提供了坚实的基础。本文描述了一个参考架构，并讨论了面向 RISC-V 平台的机密计算的指令集架构、非指令集架构和 SoC 要求。它还讨论了用于 RISC-V 平台的机密虚拟机的建议指令集架构和非指令集架构扩展，称为 CoVE。
相关内容
微信扫码咨询专知VIP会员