Efficient and provable local capability revocation using uninitialized capabilities

Capability machines are a special form of CPUs that offer fine-grained privilege separation using authority-carrying values known as capabilities. The CHERI capability machine offers local capabilities, which could be used cheap but restricted revocation. Unfortunately, revocation is unrealistic in practice because large amounts stack memory need to cleared security precaution. In this paper, we address shortcoming by introducing uninitialized capabilities : new represent read/write authority block without exposing the memory’s initial contents. We provide mechanically verified program logic for reasoning about programs on with feature and formalize prove safety universal contract untrusted code. use making previously-proposed secure calling convention efficient its logic. Finally, report proof-of-concept implementation machine.