Publication:
A first exploration of fine-grain coherence for integrity metadata

Loading...
Thumbnail Image
Date
2024-11-05
relationships.isAuthorOfPublication
relationships.isSecondaryAuthorOf
relationships.isDirectorOf
Authors
Ekemark, Per ; Ros Bardisa, Alberto ; Sagonas, Konstantinos ; Kaxiras, Stefanos
item.page.secondaryauthor
item.page.director
Publisher
IEEE Computer Society
publication.page.editor
DOI
https://doi.org/10.1109/SEED61283.2024.00017
item.page.type
info:eu-repo/semantics/article
Description
© 2024 IEEE. This document is the Submitted version of a Published Work that appeared in final form in International Symposium on Secure and Private Execution Environment Design (SEED). To access the final edited and published work see https://doi.org/10.1109/SEED61283.2024.00017
Abstract
Memory integrity protection is intended for secure execution, and it is typically associated with programs running on a single core. However, with the emergence of multi-processor systems-on-chip and chiplets, extending memory integrity protection to cache-coherent multiprocessors becomes essential. In this work, we explore for the first time the design space for maintaining coherence in fine-grain integrity metadata at the block level. We discuss various policies for updating the integrity tree using the underlying coherence protocol, and examine how these policies affect coherence traffic. We introduce the concepts of proactive and reactive update initiation, and discuss their implications for data and integrity-tree blocks. We also investigate the trade-offs between eager and lazy update propagation policies, focusing on coherence transactions such as invalidations and downgrades to analyse the pros and cons of different approaches. What we observe is that for some benchmarks the choice between the eager and the lazy update initiation policy does not make much difference, while for many other benchmarks one policy is better over the other, depending on how the benchmark shares its data.
publication.page.subject
Citation
item.page.embargo
Collections