Jump to content

Draft:CHERI (computer architecture)

From Wikipedia, the free encyclopedia
  • Comment: GitHub is generally unacceptable as a source as it is made up of user-generated content. Aside from that, more sourcing would be ideal as the current sourcing fails to establish how this software is notable. Beachweak (talk) 18:01, 9 January 2025 (UTC)

CHERI.[1] is an extension to standard instruction set architectures that adds provenance, bounds and permissions to pointers.

It has been experimentally implemented on MIPS-64[2], Arm[3] and RISC-V[4] architectures and is currently in the standardisation process for RISC-V[5].

CHERI's original motivation was to reduce the cost of privilege separation, which is very expensive in conventional architectures. Although it does achieve this goal, it also became clear that CHERI could provide memory safety in C and C++ code. Microsoft investigated the impact this would have had on all their 2019 security issues, and found that it would have mitigated 70% of them[6].

References

[edit]
  1. ^ "Capability Hardware Enhanced RISC Instructions (CHERI)". Retrieved 9 January 2025.
  2. ^ "Sail model of CHERI-MIPS ISA". Retrieved 9 January 2025.
  3. ^ "Arm Morello Program". Retrieved 9 January 2025.
  4. ^ "CHERI-RISC-V". Retrieved 9 January 2025.
  5. ^ "CHERI Ratification Plan". Retrieved 10 January 2025.
  6. ^ "Security Analysis of CHERI ISA". Retrieved 10 January 2025.