Arm Publishes Initial Confidential Compute Architecture "CCA" Code For Linux VMs

[phoronix]

Phoronix: Arm Publishes Initial Confidential Compute Architecture "CCA" Code For Linux VMs

Arm ended out January by publishing an early request for comments (RFC) version of its Confidential Compute Architecture (CCA) support for the Linux kernel so there can be KVM virtualization integration around Arm CCA, a KVM user-space ABI for managing Realms, and Linux guest support for Arm Realms...

https://www.phoronix.com/news/Arm-CCA-Linux-RFC-Patches

[tildearrow]

Prepare to see it used for DRM in 3... 2... 1...

[Matombo]

Oh that's the main Goal: https://community.arm.com/arm-commun...one-technology

I was wondering what the difference is to the already existing TEE/TrustZone: The anoncement is prety straight forward: DRM vendors don't trust each other to fix Arbitrary execution holes, so one unified blackbox sandbox doesn't cut it anymore: you can now have infinite black box sandboxes!

[Developer12]

Oh that's the main Goal: https://community.arm.com/arm-commun...one-technology

I was wondering what the difference is to the already existing TEE/TrustZone: The anoncement is prety straight forward: DRM vendors don't trust each other to fix Arbitrary execution holes, so one unified blackbox sandbox doesn't cut it anymore: you can now have infinite black box sandboxes!

My impression is that trustzone is closer to x86's System Management Mode, which has been around since the DOS days, or various runtime elements of UEFI which I have no doubt get used for DRM somewhere.

[Developer12]

I don't know that the comparison to SGX is entirely valid. SGX isn't really a virtual machine technology like what AMD and ARM are putting forward.

The fact that SGX isn't a full-blown VM and instead is intended to run applications definitely makes it a more attractive target for DRM.