MicrosoftsNext-GenerationSecureComputingBase,formerl：microsoftsnext-generation安全计算基础，formerl.pptVIP

Microsoft’sNext-Generation Secure Computing Base,formerly Palladium Kit ColbertStudent Consultant Representing Microsoftmssc@ What is Palladium? A set of hardware and software extensions to make the PC more trustworthy. Today’s apps will still run just fine. You can disable Palladium extensions if you choose. What exactly is trustworthy computing? Good question… Trustworthy Computing Trustworthy: worthy of confidence. Examples: Credit card numbers that can’t be stolen. Personal diary that can only be written and viewed by you or people you choose. Someone is who she says she is. There are currently ad-hoc solutions for some of these concerns, Palladium seeks to solve them all. Who To Trust? Applications? Chain of Trust We start off trusting the hardware and build up, thus creating a chain of trust. Palladium’s Goals Usher in a new era of trustworthy computing by enabling the PC to: Perform trusted operations Span multiple computers with this trust Create dynamic trust policies Allow anyone to authenticate these policies How Palladium Will Do It Specifically, Palladium will add four new security features that increase the trustworthiness of the machine: Protected memory Attestation Sealed storage Secure input and output It primarily does this through cryptographic keys and algorithms. Hardware Extensions Security Support Component (SSC) Secure communication channels for: I/O Graphics Network Storage Chipsets CPU op-codes, registers, interrupts, and status bits Software Extensions Nexus (the kernel) shared source Trusted agents (the applications) The New View Two parallel operating systems? Not quite, the trusted kernel still relies on the untrusted kernel for most of its functionality. SSC/Nexus Interaction Sealed storage: SSC’s symmetric key, call it ‘s’ SSC hash of running Nexus kernel, call it ‘h’ Arbitrary data pointed to by pointer ‘p’ SSC implements two operations: c = SEAL(p) p = UNSEAL(c) Example implementation: SEAL: aes_encrypt(s+h, p) UNSEAL: aes_dec