Contributor
Zhang Xingjian

Arm CCA Support for Unikraft


Mentors
Vlad Badoiu, Hugo Lefeuvre, Maria Sfîrăială, Răzvan Vîrtan, Michalis E. Pappas
Organization
Unikraft
Technologies
C, Arm assembly
Topics
Unikernel, Security, Confidential Computing
This project aims to add Arm Arm Confidential Computing Architecture (CCA) support to the Unikraft ecosystem, which is a step of “Unikraft as the Secure Configurable Unikernel”. Arm CCA is introduced in Arm v9 and it introduces new hardware features to make OS run as a confidential VM without trusting the underlying hypervisor. To achieve this goal, this project needs to finish the following tasks: 1) making CCA an option for Unikraft and adding support for necessary RSI commands; 2) preparing the FVP environment; 3) Adding support for more advanced features like attestation and memory encryption; 4) testing the project using several applications.