1 repository
Construction of kernel modules that minimize the Trusted Computing Base by isolating unsafe code.
Distinct from Kernel Security Modules: Focuses on the architectural minimization of the TCB during module construction rather than just capability restriction
Explore 1 awesome GitHub repository matching security & cryptography · TCB-Based Module Isolation. Refine with filters or upvote what's useful.
Asterinas is a memory-safe operating system kernel designed to prevent data races and memory corruption. It functions as a Linux-ABI compatible kernel, enabling the execution of existing Linux binaries and container workloads while providing a declarative operating system distribution model. The project distinguishes itself by acting as a virtual machine container host and a confidential computing guest OS, allowing it to run within hardware-isolated Trusted Execution Environments such as Intel TDX. It implements a minimal trusted computing base by isolating unsafe low-level operations and se
Limits unsafe code execution by utilizing a minimal Trusted Computing Base in the construction of kernel modules.