PRISM: Lightweight Enclave Isolation with Prismatic Capabilities

arXiv:2608.26367 · cs.CR · Submitted 2026-08-26 · Read on arXiv

cs.CR

Submitted: 2026-08-26

Updated: 2026-08-26

Code: https://github.com/CTSRD-CHERI/Flute

Terminology

Provenance — 19× in this paper · explained in 3 episodes
Verification — 17× in this paper · explained in 2 episodes
Core — 16× in this paper · explained in 2 episodes
Allocator — 11× in this paper · explained in 1 episode
Verifier — 4× in this paper · explained in 2 episodes
Benchmark — 3× in this paper · explained in 2 episodes
Hue Management Monitor — 3× in this paper
Alignment — 2× in this paper · explained in 1 episode
Hue-Addressed Memory — 2× in this paper
Memory Tracking Table — 2× in this paper
Abstraction — 1× in this paper · explained in 1 episode
Adam — 1× in this paper · explained in 2 episodes
Arm Confidential Computing Architecture — 1× in this paper
Capability Hardware Enhanced RISC Instructions — 1× in this paper
Clustering — 1× in this paper · explained in 2 episodes
Decode — 1× in this paper · explained in 2 episodes
Decoupling — 1× in this paper · explained in 2 episodes
Network and Distributed System Security Symposium — 1× in this paper
Pruning — 1× in this paper · explained in 4 episodes
SGX2 with Enclave Dynamic Memory Management — 1× in this paper
Supervisor Binary Interface — 1× in this paper
TEE Security Manager — 1× in this paper
Trace — 1× in this paper · explained in 2 episodes

Sources

Related papers