GitHub - luhsra/linux-kpac: Linux with kpac extensions

luhsra / linux-kpac Public

forked from luhsra/linux

Notifications You must be signed in to change notification settings
Fork 0
Star 0

Linux with kpac extensions

View license

0 stars 53.3k forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 1,138,832 Commits
Documentation		Documentation
LICENSES		LICENSES
arch		arch
block		block
certs		certs
crypto		crypto
drivers		drivers
fs		fs
include		include
init		init
io_uring		io_uring
ipc		ipc
kernel		kernel
lib		lib
mm		mm
net		net
rust		rust
samples		samples
scripts		scripts
security		security
sound		sound
tools		tools
usr		usr
virt		virt
.clang-format		.clang-format
.cocciconfig		.cocciconfig
.get_maintainer.ignore		.get_maintainer.ignore
.gitattributes		.gitattributes
.gitignore		.gitignore
.mailmap		.mailmap
.rustfmt.toml		.rustfmt.toml
COPYING		COPYING
CREDITS		CREDITS
Kbuild		Kbuild
Kconfig		Kconfig
MAINTAINERS		MAINTAINERS
Makefile		Makefile
README		README

Repository files navigation

Linux kernel with kpac extensions
=================================

This repository contains the source code of the Linux kernel with kpac
extensions described in "Software-Emulated Pointer Authentication for
Control-Flow Integrity Protection" [1].

The core kpac functionality is implemented in kernel/kpac.c.  The various
hashing backends are implemented as header files in include/linux/kpac/ and are
included through include/linux/kpac_backend.h.  The types are defined separately
in include/linux/kpac_types.h.

The Kconfig database is extended with following configuration options:

+- Security options
   +- Enable software-emulated pointer authentication       [bool]
      +- Userspace mapping address                          [hex]
      +- Pointer authentication backend                     [choice]
         +- None (DEBUG)
         +- xxHash hashing algorithm
         +- ARMv8.3 QARMA block cipher

The extension is configured at runtime by writing into the debugfs directory
tree /sys/kernel/debug/kpac/:

+- kpac/
   +- addr               [Virtual address of the kpac page (read-only)]
   +- backend            [Hashing algorithm (read-only)]
   +- nr_aut             [Counter of AUT requests (read-only)]
   +- nr_aut             [Counter of PAC requests (read-only)]
   +- 0/
      +- cpumask         [CPUs served by CPU 0]
   +- 1/
      +- cpumask         [CPUs served by CPU 1]

   ...

   +- N/
      +- cpumask         [CPUs served by CPU N]

-----------

[1] https://scm.sra.uni-hannover.de/theses/2022/BA_ill.ostapyshyn