Confidential Computing on RISC-V

Getting confidential computing right is a tough challenge. Other architectures already tried in the past to introduce mechanisms for providing confidentiality guarantees, and in many cases failed. On RISC-V the Confidential Computing SIG, under the Security HC, is working on two specifications for providing confidentiality guarantees for VMs/TEEs and devices (AP-TEE/AP-TEE-IO), for application-class processors. In this presentation we'll go through those mechanisms and give an overview of the provided guarantees and use cases in mind.