3 ms·
Memory Tagging Extension, an arm v9 hardware feature for mitigating some memory safety bugs.
by zerocrates 3y ago
Memory Tagging Extension, an arm v9 hardware feature for mitigating some memory safety bugs.
- LoganDark 3y agoIs this the outcome of the Morello project? Honestly sounds nice.
- akyuu 3y agoNo, AFAIK Morello project is about designing an Arm CPU with CHERI, a hardware architecture with extra security capabilities that is still WIP: https://tratt.net/laurie/blog/2023/two_stories_for_what_is_cheri.html https://tratt.net/laurie/blog/2023/two_stories_for_what_is_c...
- LoganDark 3y agoI've been trying to get a Morello board for months, but they only offer them to large research institutions, not individuals who just want a hobby project. I'm aware of CHERI being different from this, but it still seems similar.
- obnauticus 3y agoCHERI vs MTE is a bit of a nuanced topic. At least one part of the limiting factor for MTE is that you get a finite number of tag “color codes” which opens the opportunity for some form of probabilistic attacks. Of course this helps with defense in depth as it’s yet another layer of security, but it isn’t as strong of a prevention as a CHERI capability for example. This page explains it pretty well: https://msrc.microsoft.com/blog/2022/01/an_armful_of_cheris/ https://msrc.microsoft.com/blog/2022/01/an_armful_of_cheris/
- fuklief 3y agoThis survey by the same author also provides a good comparison https://saaramar.github.io/memory_safety_blogpost_2022/ https://saaramar.github.io/memory_safety_blogpost_2022/
- saagarjha 3y agoMTE is somewhat like an in-band, weak version of Morello, but the project is independent of MTE.