CVA6-CFI: A First Glance at RISC-V Control-Flow Integrity Extensions
Fuente:
arXiv
Salvato in:
| Autori principali: | , , , , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2026
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866910020844650496 |
|---|---|
| author | Manoni, Simone Parisi, Emanuele Tedeschi, Riccardo Rossi, Davide Acquaviva, Andrea Bartolini, Andrea |
| author_facet | Manoni, Simone Parisi, Emanuele Tedeschi, Riccardo Rossi, Davide Acquaviva, Andrea Bartolini, Andrea |
| contents | This work presents the first design, integration, and evaluation of the standard RISC-V extensions for Control-Flow Integrity (CFI). The Zicfiss and Zicfilp extensions aim at protecting the execution of a vulnerable program from control-flow hijacking attacks through the implementation of security mechanisms based on shadow stack and landing pad primitives. We introduce two independent and configurable hardware units implementing forward-edge and backward-edge control-flow protection, fully integrated into the open-source CVA6 core. Our design incurs in only 1.0% area overhead when synthesized in 22 nm FDX technology, and up to 15.6% performance overhead based on evaluation with the MiBench automotive benchmark subset. We release the complete implementation as open source. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2602_04991 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | CVA6-CFI: A First Glance at RISC-V Control-Flow Integrity Extensions Manoni, Simone Parisi, Emanuele Tedeschi, Riccardo Rossi, Davide Acquaviva, Andrea Bartolini, Andrea Hardware Architecture Cryptography and Security This work presents the first design, integration, and evaluation of the standard RISC-V extensions for Control-Flow Integrity (CFI). The Zicfiss and Zicfilp extensions aim at protecting the execution of a vulnerable program from control-flow hijacking attacks through the implementation of security mechanisms based on shadow stack and landing pad primitives. We introduce two independent and configurable hardware units implementing forward-edge and backward-edge control-flow protection, fully integrated into the open-source CVA6 core. Our design incurs in only 1.0% area overhead when synthesized in 22 nm FDX technology, and up to 15.6% performance overhead based on evaluation with the MiBench automotive benchmark subset. We release the complete implementation as open source. |
| title | CVA6-CFI: A First Glance at RISC-V Control-Flow Integrity Extensions |
| topic | Hardware Architecture Cryptography and Security |
| url | https://arxiv.org/abs/2602.04991 |