论文标题
可信赖的HART用于移动RISC-V安全性
Trusted Hart for Mobile RISC-V Security
论文作者
论文摘要
当今的大多数移动设备都是基于ARM体系结构，该架构支持可信赖的执行环境（TEE）中受信任的应用程序的托管。 RISC-V是一种相对较新的开源指令集体系结构，该体系结构旨在适合许多用途。在一个潜在的RISC-V使用情况下，移动设备可以基于RISC-V硬件。 我们考虑将移动安全堆栈移植到芯片上的RISC-V系统之上的含义，确定用于构建自定义TEE的开源钥匙到底框架中的差距，并提出了一个安全体系结构，除其他外，还支持GlobalPlatform Tee Tee Tee API为受信任的应用程序提供。除了Keystone Enclaves外，架构还包括一个受信任的HART - 一种正常的核心，该核心运行可信赖的操作系统并专用于安全功能，例如对设备的密钥库的控制和安全外围设备的管理。 使用Hifive释放的RISC-V开发委员会对RISC-V平台的拟议安全架构进行了实验验证。
The majority of mobile devices today are based on Arm architecture that supports the hosting of trusted applications in Trusted Execution Environment (TEE). RISC-V is a relatively new open-source instruction set architecture that was engineered to fit many uses. In one potential RISC-V usage scenario, mobile devices could be based on RISC-V hardware. We consider the implications of porting the mobile security stack on top of a RISC-V system on a chip, identify the gaps in the open-source Keystone framework for building custom TEEs, and propose a security architecture that, among other things, supports the GlobalPlatform TEE API specification for trusted applications. In addition to Keystone enclaves the architecture includes a Trusted Hart -- a normal core that runs a trusted operating system and is dedicated for security functions, like control of the device's keystore and the management of secure peripherals. The proposed security architecture for RISC-V platform is verified experimentally using the HiFive Unleashed RISC-V development board.
