From Flashless to Fearless - A Rust Firmware Journey into Caliptra Streaming Boot
Open Compute Project via YouTube
Overview
Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Explore the implementation of Caliptra's streaming boot model for secure Root-of-Trust (RoT) provisioning in this 18-minute conference talk. Learn how this innovative architecture eliminates persistent firmware storage requirements while reducing attack surfaces through dynamic, host-driven RoT initialization. Dive deep into the modular, Rust-based MCU firmware stack built on TockOS, examining components from user-space applications and image loading APIs to PLDM-MCTP protocol layers, I3C transport drivers, and Tock kernel integration. Discover how integrators can extend the SDK to implement custom boot logic while maintaining compliance with Caliptra streaming model requirements. Gain practical insights from real-world development experiences, including challenges faced and strategies for successfully adopting memory-safe Rust programming and secure RTOS architecture in embedded firmware development, as platform security threats continue to escalate and require scalable provisioning solutions.
Syllabus
From Flashless to Fearless A Rust Firmware Journey into Caliptra Streaming Boot
Taught by
Open Compute Project