English
Menu

What is Arm CCA (Confidential Compute Architecture)?

Arm's Confidential Compute Architecture. It adds to the Arm architecture, besides the Normal world and the Secure world, a Realm world for running virtual machines and a Root world that manages switching between worlds, so as to realize a VM-based TEE. Because the CPU checks in a table which world each region of memory belongs to, a hypervisor can allocate memory and CPU time to a realm but cannot read or write its contents.

Japanese name: Arm CCA

Arm CCA (Confidential Compute Architecture) appears in 1 practice question across 1 topic, including Hardware Security: Advanced Topics and Trends.

Field: Hardware Security: Advanced Topics and Trends

Try it: questions about Arm CCA (Confidential Compute Architecture)

Which correctly describes the realm introduced in Arm CCA (Confidential Compute Architecture)?

  1. ABesides the Normal world and the Secure world, a world called the realm is provided for running virtual machines, so that a hypervisor can allocate resources to it but cannot touch its contents
  2. BIt is merely the Secure world of TrustZone renamed, in which small tasks such as fingerprint matching and payment on smartphones are performed by an OS provided by the device maker
  3. CPrograms in a realm receive no hardware protection and are protected only by the guest OS encrypting its own memory contents in software
Show answer and explanation

Answer: A. Besides the Normal world and the Secure world, a world called the realm is provided for running virtual machines, so that a hypervisor can allocate resources to it but cannot touch its contents

The Secure world of TrustZone is meant for a small trusted OS provided by the device maker and was not suited to users running their own virtual machines. CCA adds, besides the Normal and Secure worlds, a Realm world and a Root world that manages switching between worlds. Because the CPU checks in a table (the granule protection table) which world each region of memory belongs to, a hypervisor running in the Normal world can allocate memory and CPU time to a realm's virtual machine but cannot read or write its contents. Like AMD SEV-SNP and Intel TDX, it is a mechanism for realizing a VM-based TEE, here on the Arm architecture.

Questions that mention Arm CCA (Confidential Compute Architecture) (1)

  1. Which correctly describes the realm introduced in Arm CCA (Confidential Compute Architecture)?

Books on Hardware Security: Advanced Topics and Trends Ad

As an Amazon Associate I earn from qualifying purchases.

Related terms

TrustZone Hypervisor CPU time Trusted execution environment (TEE) CHERI Confidential computing Control-flow integrity DICE (Device Identifier Composition Engine) FIPS 140-3 Hardware bill of materials (HBOM)

Back to the glossary