In this paper, we set out to systematically design a minimal active RoT for tiny low-end MCU-s. We begin with the following questions: (1) What functions and hardware support are required to guarantee actions in the presence of malware?, (2) How to implement this efficiently?, and (3) What security benefits stem from such an active RoT architecture? We then design, implement, formally verify, and evaluate GAROTA: Generalized Active Root-Of-Trust Architecture. We believe that GAROTA is the first clean-slate design of an active RoT for low-end MCU-s. We show how GAROTA guarantees that even a fully software-compromised low-end MCU performs a desired action. We demonstrate its practicality by implementing GAROTA in the context of three types of applications where actions are triggered by: sensing hardware, network events and timers. We also formally specify and verify GAROTA functionality and properties.
A Scalable Trust Discovery Architecture for the Internet of Agents
China Internet Network Information Center（中国互联网络信息中心）；Alibaba Cloud Intelligence Group（阿里云智能集团）；National Engineering Laboratory of Internet Domain Name Management Technology（互联网域名管理技术国家工程实验室）；Computer Network Information Center, Chinese Academy of Sciences（中国科学院计算机网络信息中心）
KORD: Breaking the Key-Generation Bottleneck in Dealerless FSS via Protocol--Hardware Co-Design
College of Computer Science and Technology, National University of Defense Technology（国防科技大学计算机学院）；Key Laboratory of Advanced Microprocessor Chips and Systems, National University of Defense Technology（国防科技大学先进微处理器芯片与系统重点实验室）
