2024‐10‐23‐CFCC‐Minutes

Certifier Framework Monthly Meeting

Date: Wed, Oct, 23, 2024, Time: 6-7 am PST

Aditya: #250: Follow-up with John to push the intern project proposal further. Started email thread with John
Team: Quick scan of open issues and did a bit of updates / scrubbing.

Ye - investigate and come-up with a recommendation for a static analysis tool to be implemented in our repo
Rado -- investigate and come-up with a recommendation for a dynamic analysis tool to be implemented in our repo
Aditya -- once the tools / processes are identified, will coordinate with Ye & Rado to implement the dev/Ci-processes required.
Aditya -- follow-up on code-level cleanup items for Ubuntu-Linux, sev-simulator changes
Aditya will take John's recent writeup on Quantum safe crypto algorithms and update Wiki. Work w/ John to finalize.

(John) 3+John (MS, Cornell, and another person) started company to work with German Acad of Sciences, to study use-cases of CC.
- Extend use-cases to small devices for cars, factory floor -- Some work may come into CFCC
- Supporting small p/fs (e.g., Samsung's client for ARM). Library for policy-control on APIs.
Ye investigated static analysis tooling. Need resolution for issue #251. Need input from Keystone folks. Aditya to connect Keystone folks & Ye to drive this further.
- (9/25/2024): Ye said he will try to charge-ahead w/local builds to overcome Keystone build issues. Change is not big; but would be better if it's verified by UCB Keystone folks.
- (Aditya) Pushed off email to UCB Keystone owners asking for engineer to work with Ye on issue #251
- 9/25/2024: Alex from UCB is trying to reach Dayeol Lee.
Rado will try to push on integrating sanitizers into CFCC builds... back-burner work.

Ashish: Put-up a Discussion note explaining arch description of s/w components and their plan on how-to integrate with CFCC.