2025-02-18 Security HC Meeting Notes

Date

Feb 18, 2025

Disclosures

Participants

Name	Affiliation

Name	Affiliation
Alex Richardson (Google)	Individual
Allison Randal (Capabilities Limited)	Capabilities Limited
Andrea Gallo (RISC-V International)	RISC-V International
Andrew Dellow (Qualcomm, Inc.)	Qualcomm, Inc.
Ben Laurie (Google LLC)	Google LLC
Cay Blomqvist (Individual)	Individual
Daniel Gracia PÃ©rez - THALES	Thales SA
deepak gupta (Rivos Inc)	Rivos Inc
Fabrice Marinet	Qualcomm, Inc.
Franz Fuchs	Cambridge university
Geoffrey Thorpe (MIPS Tech LLC.)	MIPS
Georgios Christou (Technical University of Crete)	Technical University of Crete
Greg Favor (Ventana Micro Systems)	Ventana Micro Systems
Guerney Hunt (International Business Machines Corporation)	International Business Machines Corporation
Hany Ragab	Qualcomm
Kris Kwiatkowski (PQShield Ltd.)	PQ Shield
LuÃs Fiolhais (Individual)	Individual
Nick Kossifidis (Foundation for Research and Technology - Hellas (FORTH))	Foundation for Research and Technology - Hellas (FORTH)
Paul Elliott (Codasip s.r.o.)	Codasip s.r.o.
Paul Heath (Seagate Technology LLC)	Seagate Technology LLC
Prashanth Mundkur (RISC-V International)	Risc-V internaitonal
Radim KrÄmÃ¡Å™ (Ventana Micro Systems)	Ventana
Ravi Sahita (Rivos Inc)	Rivos Inc
Roberto Avanzi (Qualcomm, Inc.)	Qualcomm, Inc.
Ruud Derwig (Synopsys, Inc)	Synopsys, Inc
skye yuan (Beijing Institute of Open Source Chip)	BOSC
Steven Bellock (NVIDIA Corporation)	NVIDIA Corporation
Ved Shanbhogue (Rivos Inc)	Rivos Inc
Vedvyas Shanbhogue (Rivos Inc)	Rivos Inc
Victor Lu	Individual
Yann Le Floch	Capgemini Engineering
Yann Loisel (SiFive)	SiFive
Yanru Li (Samsung)	Samsung
Yitian Chen (Nvidia)	Nvidia

Agenda

approval of 04th feb 2025 minutes and todays agenda

discussion on speculation barriers

presentation from @Vedvyas Shanbhogue of the current PoW Speculation Barriers - Proposal of Work

@Geoffrey Thorpe raised concerns about actual effectiveness vs. the promise or potential. @Allison Randal described that this wont ever be 100% effective, and reminded the group that this whole area is counter intuitive and difficult, even for security experts. This is something the TG will need to clarify and provide guidance on, just like the timing fences TG. @Vedvyas Shanbhogue to expand the PoW to clarify this point further.

@Ravi Sahita pointed out We will require more participating companies for this to proceed. we cant propose to the TSC without at least 3. if your company is willing to contribute, please email the security list, @Vedvyas Shanbhogue or @Andrew Dellow

closure of Control Flow Integrity SIG - announced by RVI staff - is this in line with group expectations ? SSLP has completed, do we need CFI SIG to continue to monitor the space, or we absorb into runtime integrity SIG ? - It was previously agreed that this should be part of the RTI SIG and has been closed. no requirement to vote again.

TEE whitepaper - some comments, any more reviewers ? request from Andrea to ready for the TSC to review, with an aim to publish this embedded world (march 10) or RVI EU summit in may.

It can be found at:

Doc: https://docs.google.com/document/d/1PjqAawMT6F-lSiEhtYO4KK8rGqoNayKrboCJ6BYt6TM/edit?tab=t.0#heading=h.olop86cuom6q

Slides: https://docs.google.com/presentation/d/15IaM-nxvwc40wUpUDAZrsi_69-zm28_Bl2sIbuTjgfE/edit#slide=id.p2

please review in google docs - for access you will need to log in. any issues email help@riscv.org

Presentations

	Title	Presenter	File

	Title	Presenter	File
1	speculation barriers PoW	@Vedvyas Shanbhogue	Speculation Barriers - Proposal of Work
2

Votes

Quorum Status: 15 of 23 present, quorum met.
Vote Record

Agenda Item or Motion: approval of previous minutes
Motion Made By: luis fiolhais
Motion Seconded By: paul elliott

Voting Results:

In Favor: 15
Opposed: 0
Abstentions: 0

Outcome: passed

Additional Notes:

Notes & Action Items

Adjournment

Motion to Adjourn Made By: ravi sahita
Seconded By: ved shanbhogue
Time Adjourned: 5.07

Security