2.0 -//Pentabarf//Schedule//EN PUBLISH 3C98PM@@talks.osfc.io -3C98PM Opening OSFC 2024 en en 20240903T093000 20240903T094500 001500

Opening OSFC 2024

PUBLIC CONFIRMED Event Info https://talks.osfc.io/osfc-2024/talk/3C98PM/ Main Room PUBLISH YDNVKP@@talks.osfc.io -YDNVKP Open-Source Firmware Foundation - Status Update en en 20240903T094500 20240903T100000 001500

Open-Source Firmware Foundation - Status Update

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2024/talk/YDNVKP/ Main Room PUBLISH NN9H8A@@talks.osfc.io -NN9H8A Practical PCR forgery: aka how I will decrypt your laptop en en 20240903T100000 20240903T103000 003000

Practical PCR forgery: aka how I will decrypt your laptop

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/NN9H8A/ Main Room Mate Kukri PUBLISH WGG9AH@@talks.osfc.io -WGG9AH Provable Security in Embedded Systems: Verification Work in Tock OS en en 20240903T104500 20240903T111500 003000

Provable Security in Embedded Systems: Verification Work in Tock OS

I am a graduate student at UC San Diego working on verifying Tock OS, an OS for embedded systems written in Rust. Tock OS is widely used for root-of-trusts. Tock supports process isolation. Verification allows a path to eliminating million dollar bugs and make sure your system behaves the way you expect. Formal methods are going to make sure that we can trust systems. We show that verifying your software is possible with low line-of-code overhead. Testing code such as timers/alarms is very error prone and requires invasive instrumentation or imagining every possible edge case. I will show how you can statically analyze your code with formal methods. At compile time, you know your code does not violate any properties and works correct in every possible execution. I will show you some crazy bugs I have discovered in timing code that can be completely eliminated. Content of the talk: - What is Tock OS - OS for resource contrained systems (microcontrollers) written in a high level language - used in industry by [Google](https://security.googleblog.com/2020/01/say-hello-to-opensk-fully-open-source.html), HP, WD - Software Verification is here - Now is the time for verifying our systems are safe. We are using [Verus](https://github.com/verus-lang/verus) and [Flux](https://github.com/flux-rs/flux) to *prove* that system guarantees of isolation and correctness are met. - Verifying properties of our Rust OS has low overhead and does not require reimplementing the whole system. Rust+verification eliminates memory errors and logic errors for critical systems such as the root-of-trust use case. - Our Approach - Examples of bugs caught - Developers have more confidence in implementing optimizations and accepting code changes in PRs. - I have found bugs that are virtually impossible to find by reading the code. We will take a look at previous security bugs in Tock, how we came up with system properties to verify, and show how these problems are now impossible produce. - Some technical explanation on how verification works and the methods we have used. - Verification - Formal methods have been coming for a long time, and they are here to stay. With our work, I hope to show that proving system properties is doable for a microkernel. I will show our future work and paths for current software to become more safe and more understable via formal methods. - Tock is open source! Freely use it for whatever you want. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/WGG9AH/ Main Room Samir Rashid PUBLISH WXURD7@@talks.osfc.io -WXURD7 Everything Old is New Again: Virtualizing Firmware on RISC-V en en 20240903T114500 20240903T121500 003000

Everything Old is New Again: Virtualizing Firmware on RISC-V

This talk explores the idea of virtualizing firmware: running firmware in a less privileged, sandboxed environment. While virtualization is now a well understood concept, it is still restricted to higher privilege modes. In this talk we explain how we leveraged insight from the past to build, test, and partially verify Miralis, a security monitor that virtualizes RISC-V firmware. Starting with Popek and Goldberg’s requirement for virtualization, we define the three properties of virtual machines: equivalence, isolation, and efficiency. We explain the hardware requirements to support simple and efficient virtualization through trap & emulate, the consequences of violating those requirements, and how it relates to firmware executing on modern architectures. We then describe Miralis, our prototype security monitor that virtualizes M-mode on RISC-V platforms. We give insights into our ongoing attempt to (partially) verify the equivalence and isolation properties by leveraging the executable RISC-V specification and symbolic execution. Finally, we conclude with use cases for which firmware virtualization could be useful, such security, debugging, and consolidation. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/WXURD7/ Main Room Charly Castes PUBLISH ZUYFLB@@talks.osfc.io -ZUYFLB How Open-Source Firmware Enables New Opportunities in Systems Research en en 20240903T133000 20240903T140000 003000

How Open-Source Firmware Enables New Opportunities in Systems Research

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/ZUYFLB/ Main Room Yussuf Khalil PUBLISH 9WKR7E@@talks.osfc.io -9WKR7E Leveraging NATS and OpenTelemetry in u-bmc for Enhanced Data Center Operations en en 20240903T141500 20240903T144500 003000

Leveraging NATS and OpenTelemetry in u-bmc for Enhanced Data Center Operations

This talk will cover new design decisions made in u-bmc which aim to cover common shortcomings looking at server management not from an OxM or manufacturer perspective but rather from an end users of such stacks which often are data center DevOps and SREs. We will cover the development that happened in u-bmc since the last talk at OSFC 2022 and how NATS and OpenTelemetry, two technologies alien to average embedded systems, can play a role in current and futures data center management and monitoring at scale. While NATS is more known from high speed trading systems, deployed in Nascar telemetry systems or used by the Matrix chat servers, it showed properties that made it an ideal choice for connecting embedded systems like BMCs inside a larger installation. And while Redfish is a great standard to cover hardware management capabilities it feels very different from how regular cloud workloads are monitored. By adding OpenTelemetry monitoring capabilities into the BMC firmware it turns the BMC and therefore the servers hardware into yet another service to monitor from an SREs point of view. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/9WKR7E/ Main Room Marvin Drees PUBLISH XJBD9Y@@talks.osfc.io -XJBD9Y Open source all the way down: developing firmware in parallel with open silicon en en 20240903T153000 20240903T160000 003000

Open source all the way down: developing firmware in parallel with open silicon

OpenTitan is an open source silicon root of trust project that includes silicon designs, verification, firmware, and integration tests. We have been developing OpenTitan's firmware in parallel with its silicon designs and have encountered several challenges that come from building execution environments to approximate how the real silicon will behave. Simulations, FPGAs, and now engineering sample silicon, are each used for different kinds of tests and each have their own trade-offs. In order to test the firmware in CI against these platforms in the open, we have had to solve problems around resource-demanding jobs, proprietary tooling, and using specific and sometimes bespoke hardware. This talk will cover some of the issues we have faced testing OpenTitan's firmware, our current solutions to these problems, and where we would like to see progress in the future based on what we've learned. We hope that sharing our knowledge will contribute toward an ecosystem of open silicon projects. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/XJBD9Y/ Main Room James Wainwright PUBLISH ZZRY8T@@talks.osfc.io -ZZRY8T Bochum: The Hub of Firmware Security Innovation and Collaboration en en 20240903T161500 20240903T162500 001000

Bochum: The Hub of Firmware Security Innovation and Collaboration

PUBLIC CONFIRMED Orga https://talks.osfc.io/osfc-2024/talk/ZZRY8T/ Main Room Thomas Wollinger PUBLISH RTZFTM@@talks.osfc.io -RTZFTM Getting your open source software ready for 0-day SoC bringup : success stories and strategies en en 20240903T162500 20240903T165500 003000

Getting your open source software ready for 0-day SoC bringup : success stories and strategies

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/RTZFTM/ Main Room Bhupesh Sharma PUBLISH H8KMQT@@talks.osfc.io -H8KMQT It Takes Time - Building Bridges and Symphony Among Fragmented Open Source Firmware Community en en 20240903T171000 20240903T174000 003000

It Takes Time - Building Bridges and Symphony Among Fragmented Open Source Firmware Community

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/H8KMQT/ Main Room Lean Sheng Tan PUBLISH KYBNAY@@talks.osfc.io -KYBNAY Wrapping Up - Tuesday en en 20240903T175500 20240903T180000 000500

Wrapping Up - Tuesday

PUBLIC CONFIRMED Event Info https://talks.osfc.io/osfc-2024/talk/KYBNAY/ Main Room PUBLISH FWT7WC@@talks.osfc.io -FWT7WC Opening 2nd Day en en 20240904T092000 20240904T093000 001000

Opening 2nd Day

PUBLIC CONFIRMED Event Info https://talks.osfc.io/osfc-2024/talk/FWT7WC/ Main Room PUBLISH FP7XRR@@talks.osfc.io -FP7XRR Enabling coreboot on Talos II platform en en 20240904T093000 20240904T100000 003000

Enabling coreboot on Talos II platform

In a world when it gets harder and harder to even start executing instructions on main CPU without some kind of blob, OpenPOWER gives hope for open-source enthusiasts. Talos II is an example of OpenPOWER platform, stuck somewhere between server and PC. While it already has open-source firmware, that didn't stop us from adding support for it to coreboot. This subject was already presented on numerous occasions (OSFC 2020, OpenPOWER Summit 2020 and OpenPOWER Summit 2021), but this time it is done by someone who spent significant amount of time working on that code, so the talk will be depicted from more technical point of view. This presentation will compare existing open firmware stack with coreboot. Some parts of the existing firmware (code that runs on on-chip microcontrollers, because SoC is much more than just the main, OS-visible cores) are reused by coreboot. Those will be briefly described, along with how coreboot interacts with them and what debugging options are available. Obstacles (not always technical) encountered along the way and how we dealt with them will also be discussed. To sum things up, current status of upstreaming process will be presented. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/FP7XRR/ Main Room Krystian Hebel PUBLISH DRMM3E@@talks.osfc.io -DRMM3E x86 coreboot with long mode: where are we at and where are we going en en 20240904T101500 20240904T104500 003000

x86 coreboot with long mode: where are we at and where are we going

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/DRMM3E/ Main Room Arthur Heymans Patrick Rudolph PUBLISH TFNAJZ@@talks.osfc.io -TFNAJZ TamaGo - bare metal Go for ARM/RISC-V SoCs en en 20240904T113000 20240904T120000 003000

TamaGo - bare metal Go for ARM/RISC-V SoCs

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/TFNAJZ/ Main Room Andrea Barisani PUBLISH YUHZNA@@talks.osfc.io -YUHZNA Firmware in Rust: More Than Just 'Rewrite It In Rust' en en 20240904T121500 20240904T124500 003000

Firmware in Rust: More Than Just 'Rewrite It In Rust'

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/YUHZNA/ Main Room Akira Moroo PUBLISH G8RDEX@@talks.osfc.io -G8RDEX What CSP Servers Need from Open Source Firmware Solutions en en 20240904T140000 20240904T143000 003000

What CSP Servers Need from Open Source Firmware Solutions

There have been a couple significant firmware evolutions in x86 PC/server spaces from assembly language to C, from monolithic thread to a dependency-based driver loading algorithm, and AGESA, FSP to aid the developers who do not have access to privileged information. Amazon AWS firmware teams have been paying attention to and experimenting these ideas since its formation in 2016. AWS did a few pathfinding projects, and some of them were shared with OSF community in the past events, such as using SeaBIOS as CSM on real hardware (with contribution back to the community), and a TinyLinux in BIOS leveraging LinuxBoot initiative. We have successfully booted to OS on several internal platforms, but we did not deploy the solution. Why? In this talk, we are going to discuss some of the reasons, and we like to collaborate with the OSF community to advance CSP-focused system firmware solutions with simplicity, modularity, and security in mind. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/G8RDEX/ Main Room Jiming Sun PUBLISH 9ZZZGT@@talks.osfc.io -9ZZZGT Building a flash less firmware infrastructure en en 20240904T144500 20240904T151500 003000

Building a flash less firmware infrastructure

We will demonstrate how we could consider the BMC firmware as being an O/S and use the associated relevant tools to manage that initial firmware stack through network booting, in the intent to expand supply chain security. We will emphasis on OpenBMC implementation, and how we changed the bootflow to successfully boot the BMC by using a full network block storage device, and provide continuous updates capabilities to lower downtime and enhance security by easing deployment process. We will focus on the security aspect by leveraging SiROT and linux LUKS technologies. We will also open the door to hardware modification as to reach a total flash less system design based on OpenSource firmware. That talk is going to be technical and requires a good knowledge of the linux stack. It is a common talk with OVHCloud an openbmc community member. A live demo will be run during the presentation as to demonstrate the full stack. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/9ZZZGT/ Main Room Jean-Marie Verdun PUBLISH KXJ9SN@@talks.osfc.io -KXJ9SN AMD's Long-Term Strategy for Open Source Firmware: From Concept to Implementation en en 20240904T160000 20240904T163000 003000

AMD's Long-Term Strategy for Open Source Firmware: From Concept to Implementation

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/KXJ9SN/ Main Room Paul Grimes, PMTS FW Engineer – AMD Server Firmware PUBLISH MUT3SC@@talks.osfc.io -MUT3SC Open source platform communication with MCTP en en 20240904T164500 20240904T171500 003000

Open source platform communication with MCTP

MCTP gives us a fairly lightweight protocol definition, which can be abstracted to a range of different hardware packet transports. This gives us a convenient way to implement message-based communication between components of an embedded system, handling endpoint addressing, message fragmentation and reassembly, request-to-response correlation and multiplexing different upper-layer protocols. While this is mainly targeted for "management controller" platforms - typically a Baseboard Management Controller (BMC) and the devices it manages - the lower-layer protocol is suitable for carrying messages of any type. This could be handy for all sorts of embedded communication mechanisms! Linux kernel support for MCTP landed in v5.15, providing a simple sockets-based interface to MCTP messaging with platform devices. Since then, new features and hardware transports have been added, allowing MCTP communication over i2c, serial and i3c, with some new transports landing soon. There are also a number of other projects that provide support for MCTP - including userspace utilities for the kernel stack, upper-layer protocols that use MCTP for messaging, userspace MCTP stacks, and repositories suited for lower-level embedded MCTP implementations. This talk will provide a brief overview of MCTP, and the current status of support for MCTP in the open source ecosystem, some implementation hints, and some quirks to be aware of along the way. PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/MUT3SC/ Main Room Jeremy Kerr PUBLISH KA3ZWC@@talks.osfc.io -KA3ZWC Adapting OpenBMC for NVIDIA Platforms: Challenges and Solutions en en 20240904T173000 20240904T180000 003000

Adapting OpenBMC for NVIDIA Platforms: Challenges and Solutions

PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/KA3ZWC/ Main Room Tom Joseph Deepak Kodihalli PUBLISH 9RTPHB@@talks.osfc.io -9RTPHB Wrapping Up - Wednesday en en 20240904T181500 20240904T183000 001500

Wrapping Up - Wednesday

PUBLIC CONFIRMED Event Info https://talks.osfc.io/osfc-2024/talk/9RTPHB/ Main Room PUBLISH W8DRN9@@talks.osfc.io -W8DRN9 Open Compute Project Europe and Open Source Firmware Foundation: Intro and collaboration opportunities en en 20240905T103000 20240905T104500 001500

Open Compute Project Europe and Open Source Firmware Foundation: Intro and collaboration opportunities

The Open Compute Project (OCP) community in Europe is rapidly expanding, reflecting a growing interest in collaborative, open-source hardware and software solutions. The OCP, originally launched by Facebook, aims to redesign hardware technology to improve efficiency and sustainability. In Europe, this movement is gaining momentum as organizations and data centers adopt OCP principles to enhance sustainability, performance, reduce costs and ease up the current compliance challenges in the market. A key focus within the OCP ecosystem is Open Platform Firmware (OPF), which plays a crucial role in standardizing and improving server firmware across different platforms. OPF is designed to provide a common firmware interface that enhances compatibility, security, and manageability. The current state of the art in OPF involves advancements in firmware development tools, increased support for diverse hardware configurations, and improved security features to safeguard against emerging threats. As the OCP community continues to innovate, these advancements are set to drive further progress in open hardware and firmware solutions across Europe. PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2024/talk/W8DRN9/ Main Room Martin L Roth Paul Grimes, PMTS FW Engineer – AMD Server Firmware Raul Alvarez PUBLISH BV8RFW@@talks.osfc.io -BV8RFW OpenBMC - The state of multi-host platform support en en 20240905T104500 20240905T110000 001500

OpenBMC - The state of multi-host platform support

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2024/talk/BV8RFW/ Main Room Oliver Brewka PUBLISH HMNJS8@@talks.osfc.io -HMNJS8 Operating system provided device-trees en en 20240905T113000 20240905T114500 001500

Operating system provided device-trees

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2024/talk/HMNJS8/ Main Room Heinrich Schuchardt PUBLISH 7GEYTT@@talks.osfc.io -7GEYTT Prem'Day: feedback on the first infra on-prem conference and creation of a user group en en 20240905T114500 20240905T120000 001500

Prem'Day: feedback on the first infra on-prem conference and creation of a user group

PUBLIC CONFIRMED Lightning Talk https://talks.osfc.io/osfc-2024/talk/7GEYTT/ Main Room Erwan Velu PUBLISH ZFJ3XG@@talks.osfc.io -ZFJ3XG Open Mic en en 20240905T133000 20240905T160000 023000

Open Mic

Submit your idea here: openmic.osfc.io/osfc24-open-mic/cfp PUBLIC CONFIRMED Talk https://talks.osfc.io/osfc-2024/talk/ZFJ3XG/ Main Room PUBLISH XQ77VG@@talks.osfc.io -XQ77VG Wrapping Up - Thursday en en 20240905T160000 20240905T161500 001500

Wrapping Up - Thursday

PUBLIC CONFIRMED Event Info https://talks.osfc.io/osfc-2024/talk/XQ77VG/ Main Room PUBLISH XEQ33Q@@talks.osfc.io -XEQ33Q Introduction to Open Source Firmware with coreboot en en 20240905T103000 20240905T123000 020000

Introduction to Open Source Firmware with coreboot

The coreboot project started since 1998, and has been widely deployed as host firmware, and you can find it running on each and every Chromebook selling today. Participants will gain hands-on experience with coreboot, learning to configure, build, and install it on real hardware. The session is ideal for developers and enthusiasts interested in firmware development and customization. Whether you're an experienced developer or just starting out, there's something for everyone! So don't be shy if you're completely new, we'll be happy to give you an introduction. Still, having some basic knowledge of firmware, Linux or hardware basics will be helpful in your learning process. Objectives: - Understand the basics of coreboot and its components, e.g. booting process and file compositions Learn the process of configuring and building coreboot - Hands-on experience installing/ flashing coreboot on hardware - debugging issues and some customizations - Who Should Attend: Students, Developers, hardware enthusiasts, and anyone interested in learning about open-source firmware. PUBLIC CONFIRMED Workshop https://talks.osfc.io/osfc-2024/talk/XEQ33Q/ Hacker Room PUBLISH ZJSJ8N@@talks.osfc.io -ZJSJ8N Mastering Zephyr: Advanced Techniques and Best Practices for Experienced Developers en en 20240905T133000 20240905T153000 020000

Mastering Zephyr: Advanced Techniques and Best Practices for Experienced Developers

This session will explore the intricate aspects of RTOS design and implementation, highlighting Zephyr's advanced features and configurations. We will explore its comprehensive support for multi-core processors, advanced scheduling techniques, and intricate memory management. Additionally, we will cover the integration of cutting-edge connectivity protocols, optimization for power efficiency, and leveraging Zephyr's security framework for high-stakes applications.The practical segment of the workshop will guide participants through complex real-world scenarios, focusing on optimizing system performance, customizing Zephyr modules, and implementing advanced debugging and profiling techniques. Attendees will engage in hands-on exercises to build sophisticated Zephyr-based applications, enabling them to tackle performance bottlenecks and ensure robust and secure deployments.Finally, we will delve into the extensive ecosystem surrounding Zephyr, discussing how to contribute to its development, stay updated with the latest advancements, and collaborate with the vibrant community of experts. Participants will gain insights into best practices for maintaining and scaling their Zephyr projects, ensuring long-term success. PUBLIC CONFIRMED Workshop https://talks.osfc.io/osfc-2024/talk/ZJSJ8N/ Hacker Room Ritvi Mishra