Hardware pointer checks in a Rust application near you?

Hardware pointer checks in a Rust application near you? https://peertube.watch/videos/watch/3042a1c5-3dc7-4026-af11-a5afa51c0718 This talk presents a case study in taking a security-focused application to the next level by modifying the Rust compiler to target a capability-based architecture. We will discuss CHERI, a system that enables hardware enforcement of safety constraints at runtime using capabilities, and how we have added support for CHERI to the Rust compiler in order to improve the security of CyberHive Connect, an application that implements an end-to-end encrypted mesh network. Connect can already boast a very high level of security when we consider the protocols it uses, and we can argue that the application itself has many potential vulnerabilities eliminated by being written in Rust. However, just like most real world applications, Connect needs to make use of unsafe code in areas such as the interface with the underlying operating system. This exposes an attack surface in the form of code that the compiler can't guarantee will be safe at runtime. If, however, we make modifications to the Rust compiler to support transferring knowledge about pointer provenance, bounds and other access restrictions to CHERI's capability-based runtime enforcement, then in many cases we should be able to eliminate the potential for unsafe situations to occur. This talk will demonstrate what we have managed to achieve in terms of producing a modified Rust compiler that can target CHERI architectures. We will give an overview of what problems were solved by doing this and how we worked towards getting our real world Rust application running on CHERI. Speaker: Lewis Revill, Track: Rust devroom, Room: H.1308 (Rolin), When: Saturday 3 February 2024, 12:30–12:50 (Brussels time), Schedule: FOSDEM 2024 event page, Licence: Creative Commons Attribution 2.0 Belgium (CC BY 2.0 BE) (as stated in the FOSDEM video archive). Attribution: “Hardware pointer checks in a Rust application near you?” by Lewis Revill, FOSDEM 2024. Original recording: 2024/h1308/fosdem-2024-2322-hardware-pointer-checks-in-a-rust-application-near-you-.av1.webm from the FOSDEM video archive. This channel is an unofficial mirror; FOSDEM is a free and non-commercial event organised by the community for the community. Sun, 18 Oct 2026 20:57:21 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://peertube.watch Hardware pointer checks in a Rust application near you? https://peertube.watch/lazy-static/avatars/3b284627-b75f-409e-ac2e-10f4c2946f43.png https://peertube.watch/videos/watch/3042a1c5-3dc7-4026-af11-a5afa51c0718 All rights reserved, unless otherwise specified in the terms specified at https://peertube.watch/about and potential licenses granted by each content's rightholder.