使用MCU固件SDK移植到Caliptra子系统.pdf

1、Christopher Swenson(Microsoft)XilingSun(Microsoft)Porting to Caliptra Subsystem using MCU Firmware SDKPorting to Caliptra Subsystem using MCU Firmware SDKChristopher Swenson(Microsoft)XilingSun(Microsoft)SecurityCaliptra Subsystem and MCU overviewMCU responsibilitiesBuilding with MCU SDKHow to use t

2、he MCU SDKOutlineCaliptra CoreCaliptra Security SubsystemSecond RISC-V core,ROM,and firmwareResponsible for booting Caliptra and securely booting the SoCActive Component Root of Trust(ACROT)Unlike Caliptra Core,is customizableoi.e.,Caliptra WG cannot release blessed firmware for itManufacturer Contr

3、ol Unit(MCU)Caliptra WG has developed a Rust firmware SDKCommon ROM routinesRuntime based on TockOS secure RTOSTools for CSR and fuse map code generationSupports in-tree and out-of-tree developmentMCU Firmware SDKMCU StackTock is an academic project to develop a highly customizable,secure RTOS writt

4、en in Rust that uses Rust-like memory managementMicrokernel architectureKernel is custom to your board and chipUser-mode applications should be mostly hardware independentoUse Tock syscalls to use hardwareKernel services syscalls using capsules(kernel modules)Enforce memory protection with hardware

5、supportoe.g.,RISC-V ePMPTockOSA Tock capsule generally provides a service,e.g.,send/receive MCTP packets,run a cryptographic operationTo interact with a Tock capsule,an application only uses 5 syscalls:allow_ro:share read-only memory with kernelallow_rw:share mutable memory with kernelsubscribe:setu

6、p a notificationcommand:execute a capsule commandyield:wait for a subscriptionTock CapsulesClone https:/ Rust(rustup)if you havent alreadyRun cargo xtask to see available commandsoBuilding,running,linting,etc.,are all available through xtask commandsoRun cargo xtask runtimeoBuild