2025‐1‐29‐CFCC‐Minutes

Date: Wed, Jan 29, 2025, (4th Wed of each month) [Delayed by a week for this month.] Next: Wed, Feb 26, 2025

Time: 6-7 am PST

Meeting Link: https://zoom-lfx.platform.linuxfoundation.org/meeting/99864751424?password=3b15fe50-d16c-40af-8e2f-b6b1b5e7124d

(You should be able to join as 'guest' using your mail-ID.)

Attendees

• Community: Aditya Gurajada, John Manferdelli, Chris Ramming
• Broadcom: Ye Li, Rado Gerganov
• Samsung: Bokdeuk Jeong
• Others: Ashish Pandey, Pari Patel (Univ of Missouri)
• Data Village: Arne Goeteyn,
• Jacob Lagerros (London, Open-Source Silicon computing, startup founder)

Agenda

• #250 John has submitted this CFCC-2025: intern project proposal

• Hear about John's updates: We're also implementing an ACL'ed API interface you can use on the secure channel to provide granular protection of resources via the secure channel (So, for example, differentiated private data access.)

  • As we discussed last time, Paul England and I are working on a certifier supported Android implementation and I did a granular access control system for API and highly differentiated sharing over a certifier channel. This facilitates data sharing as well as secure conferencing.

• John asks (BC folks): We're trying to extend CC to client and embedded devices. You also saw, in that proposal, a Raspberry pi based hardware configuration that seems to support it. I thought Broadcom made the RP and I was wondering if you know any of the engineers who could help tell us about the interface.

Status Updates

• #260 protobuf issues on Linux - talk to John.

• Notifications:

  • CCC Summit 2025 in SFO 17-18th June, and deadline for submitting presentation proposal is 17th Feb.

Pending items from past backlog list

• [#259] Ye - investigate and come-up with a recommendation for a static analysis tool to be implemented in our repo: Merged and closed in 12/2024.

• Rado Reassigned to Ye - To investigate and come-up with a recommendation for a dynamic analysis tool to be implemented in our repo

  • 1/29/2025: Revisited. (CFCC wanted us to do this kind of pre-check working.) Pending for now ...

• Aditya -- once the tools / processes are identified, will coordinate with Ye & Rado to implement the dev/Ci-processes required.

• Aditya -- follow-up on code-level cleanup items for Ubuntu-Linux, sev-simulator changes

• Aditya will take John's recent writeup on Quantum safe crypto algorithms and update Wiki. Work w/ John to finalize.

• Ye investigated static analysis tooling. Resolved issue #251.

  • (1/29/2025): Re-discussed. The PR has been merged, and above issue can be closed. Need input from Keystone folks. Aditya to connect Keystone folks & Ye to drive this further.

  • (9/25/2024): Ye said he will try to charge-ahead w/local builds to overcome Keystone build issues. Change is not big; but would be better if it's verified by UCB Keystone folks.

  • (Aditya) Pushed off email to UCB Keystone owners asking for engineer to work with Ye on issue #251

  • 9/25/2024: Alex from UCB is trying to reach Dayeol Lee.

• Rado will try to push on integrating sanitizers into CFCC builds... back-burner work. (Rado's busy; won't be done any time soon.)

• Pari (Univ of Missouri): Trying to create multi-server communication with few diff Linux VMs.

  • Want to establish the connection between a cluster.
  • Want to customize few different workflows within the framework.
  • Was able to build very simple workflows as a POC
  • Using CFCC package to simulate the enclave, to securely process the workflows.
    • Have overcome bootstrap issues with using and integrating apps on top of CFCC library
  • Plan for a short demo on 2/27/2025: Message communication and execution of the workflow

Action Items

• (John asks) Would love to hear the status of ARM CC from Samsung.
• Aditya to follow-up w/Sal asking how the https://www.bestpractices.dev/en/projects/8912#analysis will be updated to reflect Ye's cleanup for static analysis tooling.