Open-Source, Royalty-Free Confidential Computing for RISC-V Embedded Systems: IBM & Max Planck Collaboration

Key Takeaways

IBM researchers developed ACE, a confidential computing technology for RISC-V embedded systems.
The technology enhances the security of mission-critical applications by isolating them from untrusted code.
A prototype evaluation demonstrates ACE’s feasibility for future embedded system developments.

Innovative Approach to Secure Embedded Systems

A recent technical paper titled “ACE: Confidential Computing for Embedded RISC-V Systems” has been released by a team of researchers from IBM Research, the IBM T.J. Watson Research Center, and the Max Planck Institute for Software Systems (MPI-SWS).

The focus of this paper is on the importance of confidential computing in safeguarding sensitive applications against the pervasive untrusted code in modern cloud environments. The researchers assert that this technology can be effectively utilized to create safer and more secure mission-critical embedded systems.

The cornerstone of their work is the introduction of Assured Confidential Execution (ACE), an open-source and royalty-free technology specifically designed for embedded RISC-V systems. The authors outline a set of principles and a methodology that guided the development of ACE, which could also be applied to other embedded systems necessitating formal verification.

To assess the practicality of ACE, the team evaluated a prototype on the initial RISC-V hardware that supports virtualization. The results indicate that ACE is a promising technology for forthcoming embedded systems, offering a potential pathway to enhance security in environments where sensitive data is processed.

The researchers contributing to this paper include Wojciech Ozga, Guerney D.H. Hunt, Michael V. Le, Lennard Gäher, Avraham Shinnar, Elaine R. Palmer, Hani Jamjoom, and Silvio Dragone. The full technical paper can be accessed on arXiv (arXiv:2505.12995), with publication anticipated in May 2025.

This work not only emphasizes the role of confidential computing in the cloud but also highlights its applicability in the embedded systems sector, addressing the need for robust security measures in a landscape where vulnerability to untrusted code poses significant risks.

The content above is a summary. For more details, see the source article.