About

The IOPMP is a hardware checker located in a bus fabric. It has the ability to check each transaction passing through it on the fly. It is an essential component used to create isolation spaces for trusted execution environments by controlling transactions initiated, especially by I/O agents. This project will help programmers of secure systems using the QEMU emulation as an alternative before their hardware supports IOPMP.
The IOPMP spec v0.9.2RC3: https://github.com/riscv-non-isa/iopmp-spec/releases/tag/v0.9.2-RC3

Project Scope and Timelines

Addition to hw/misc/riscv_iopmp.c around:

IOPMP device which checks the permission of memory acces with requestor-role-ID (RRID).

Change to hw/riscv/virt.c around:

Addition of "iopmp" machine option.
When "iopmp" option is enabled:
- Addition IOPMP device to protect all region of system memory

Components and Repos

Current verison(v11) patch
https://patchew.org/QEMU/20250312093735.1517740-1-ethan84@andestech.com/

Stakeholders and Partners

Other QEMU for RISC-V contributors, including:

RISE
- Daniel Henrique Barboza
External
- Alistair Francis (QEMU for RISC-V maintainer)

Dependencies

None

Measure of Success

TBD

RISE Requirements