A declarative Rust architecture for a zero-trust hardware cryptographic boundary, targeting Hubris. Assumes hostile silicon: closes a documented ME/AMT network-egress path, narrows DMA key-exposure via page-splitting, encodes fault-injection immunity via compiler-enforced typestates. 3 PoCs verify these claims. Declarative spec, no runtime yet.
rust security cryptography embedded memory-safety threat-modeling fault-injection microkernel zero-trust trusted-execution-environment hubris typestate voltage-glitching cold-boot-attack space-grade dma-attacks
-
Updated
Jul 14, 2026 - Rust