3 ms·
Multicultural Toronto English? Something else? (site seems dead)
by shermozle 3y ago
Multicultural Toronto English? Something else?
(site seems dead)
- darkamaul 3y agoMemory Tagging Extension (MTE) This allows to assign tag to each memory allocation. And subsequent accesses to the same memory area must be made with a pointer having a correct tag.
- zerocrates 3y agoMemory Tagging Extension, an arm v9 hardware feature for mitigating some memory safety bugs.
- LoganDark 3y agoIs this the outcome of the Morello project? Honestly sounds nice.
- akyuu 3y agoNo, AFAIK Morello project is about designing an Arm CPU with CHERI, a hardware architecture with extra security capabilities that is still WIP: https://tratt.net/laurie/blog/2023/two_stories_for_what_is_cheri.html https://tratt.net/laurie/blog/2023/two_stories_for_what_is_c...
- LoganDark 3y agoI've been trying to get a Morello board for months, but they only offer them to large research institutions, not individuals who just want a hobby project. I'm aware of CHERI being different from this, but it still seems similar.
- obnauticus 3y agoCHERI vs MTE is a bit of a nuanced topic. At least one part of the limiting factor for MTE is that you get a finite number of tag “color codes” which opens the opportunity for some form of probabilistic attacks. Of course this helps with defense in depth as it’s yet another layer of security, but it isn’t as strong of a prevention as a CHERI capability for example. This page explains it pretty well: https://msrc.microsoft.com/blog/2022/01/an_armful_of_cheris/ https://msrc.microsoft.com/blog/2022/01/an_armful_of_cheris/
- fuklief 3y agoThis survey by the same author also provides a good comparison https://saaramar.github.io/memory_safety_blogpost_2022/ https://saaramar.github.io/memory_safety_blogpost_2022/
- saagarjha 3y agoMTE is somewhat like an in-band, weak version of Morello, but the project is independent of MTE.