NanoZone: Scalable, Efficient, and Secure Memory Protection for Arm CCA

arXiv:2506.07034 · cs.CR · Submitted 2025-06-08 · Read on arXiv

cs.CR

Submitted: 2025-06-08

Updated: 2026-09-24

Comments: Published in IEEE Transactions on Dependable and Secure Computing (TDSC)

Code: https://github.com/twitter-archive/twemperf

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

Core — 31× in this paper · explained in 2 episodes
Benchmark — 13× in this paper · explained in 2 episodes
Switch Abuse — 6× in this paper
Abstraction — 4× in this paper · explained in 1 episode
Code-Pointer Integrity — 4× in this paper
Confidential Virtual Machine — 4× in this paper
Granule Protection Check — 4× in this paper
Memory Protection Keys — 3× in this paper
Permission Overlay Extension — 3× in this paper
Verification — 3× in this paper · explained in 2 episodes
Arm Confidential Computing Architecture — 2× in this paper
Control-flow Enforcement Technology — 2× in this paper
Guarded Control Stack — 2× in this paper
IEEE Symposium on Security and Privacy — 2× in this paper
Permission Indirection Extension — 2× in this paper
Physical Address Spaces — 2× in this paper
Pointer Authentication — 2× in this paper
Realm Management Extension — 2× in this paper
Allocator — 1× in this paper · explained in 2 episodes
Annual International Symposium on Computer Architecture — 1× in this paper
Benchmarking — 1× in this paper · explained in 4 episodes
Granule Protection Fault — 1× in this paper
Granule Protection Tables — 1× in this paper
Pointer-Integrity Memory — 1× in this paper
Privileged Access Never — 1× in this paper
Trusted Computing Base — 1× in this paper
Virtual Machine Privilege Level — 1× in this paper

Sources

Meltdown

Related papers