kwitaszczyk

4 ms·

1.
by kwitaszczyk 3mo ago
That is not true. During the Digital Security by Design programme UKRI was shipping Morello boards to organisations that requested them. Since DSbD is over, the CHERI Alliance has taken over that initiative. You can request an Arm Morello b
2.
by kwitaszczyk 3mo ago
That is not true. Two days ago lowRISC announced that OpenTitan used in Google Chromebooks will include CHERI: https://lowrisc.org/news/opentitan-earl-grey-2-to-support-ch... Last year, Google announced that their Cora
3.
CHERI memory safety mitigates LLM-discovered vulnerability in FreeBSD(cheri-alliance.org)
1 points by kwitaszczyk 5mo ago|0 comments
4.
It Is Time to Standardize Principles and Practices for Software Memory Safety(cacm.acm.org)
2 points by kwitaszczyk 2y ago|0 comments
5.
by kwitaszczyk 2y ago
This is a nice and easy to understand example of a memory-safety bug that CHERI [1] prevents (among other classes of vulnerabilities). Given that the SYSCTL_PROC() macro installs a pointer to an uint16_t value in the oid_arg1 field, a CHERI
6.
by kwitaszczyk 2y ago
CHERI-RISC-V is being standardised [1], Codasip is working on a commercial implementation of CHERI-RISC-V [2], and lowRISC is working on the Sonata project [3] implementing CHERIoT. The Early performance results from the prototype Morello m
7.
by kwitaszczyk 2y ago
The CHERI ISA does not provide temporal safety features but it allows building temporal safety mechanisms in software. CheriBSD 23.11 includes user-space heap temporal memory safety that is enabled by default [0]. The paper "Cornucopia
8.
by kwitaszczyk 3y ago
CHERI is not specific to C/C++ but aims to provide primitives at the hardware level that can be used to make software safer (including programming languages) in terms of (spatial and temporal) memory safety and also to compartmentalize
9.
by kwitaszczyk 3y ago
"Any UK or international registered business or organisation can request a Morello Board by completing the form below": https://dsbd.tech/get-involved/morello-board-request/ Alternatively, you can use a