Adding Arm RME/CCA Support in Confidential Containers - Kevin Zhao, Linaro скачать в хорошем качестве

Adding Arm RME/CCA Support in Confidential Containers - Kevin Zhao, Linaro

Adding Arm RME/CCA Support in Confidential Containers - Kevin Zhao, Linaro Confidential containers (CoCo) have significantly streamlined the adoption and utilization of confidential computing in the cloud-native sphere, particularly as an ever-growing number of hardware extensions, such as Intel TDX and AMD SEV, have begun supporting the confidential VM threat model. Arm is also entering this space with the confidential computing extensions that come with the newly published Armv9-A architecture. In this presentation, we will discuss our efforts to integrate Arm’s confidential computing software stack (CCA) with CoCo. Our discussion will touch upon the development of a Rust crate providing Arm CCA attestation primitives. This library, designed to integrate smoothly into CoCo, eases attestation evidence verification and appraisal, whilst also acting as an endorsement and reference values store abstraction. Furthermore, we will talk about the integration of CoCo’s Attestation Service with Veraison, an open-source attestation verifier, in a chained deployment topology. The efforts to support Arm CCA in CoCo’s attestation-service/guest-components will also be shared. To conclude, we will showcase the end-to-end attestation flow in a demo setup.