MobiSys 2025 Working PR

[ppannuto]

Rendered

Do not merge.

This is a PR from the WIP branch where we are organizing materials for the MobiSys tutorial. Opening a PR so that the netlify integration will build previews of the branch as it updates automatically.

[pqcfox]

Would it be possible to have permission to add a commit to this branch? Would love to change ZeroRisc -> zeroRISC and to modify the outline for the first section (primarily just removing the question marks, since as detailed the outline seems excellent, and adding in "hardware attestation demo").

[alevy]

@pqcfox see my inline comment for how to suggest changes without commit privileges.

[pqcfox]

Thanks!

[pqcfox]

Here's some suggestions for the first session, feel free to tweak these as you see fit!

[pqcfox]

Suggested change

	<li>Examples of RoTs you use already? (Directly, e.g. SecureEnclave; Indirectly, e.g. cloud)</li>
	<li>Examples of RoTs in practice (mobile devices, personal computers, cloud infrastructure)</li>

[pqcfox]

Suggested change

	(50m+10m) A Primer on Roots of Trust
	(25m+5m) A Primer on Roots of Trust

(shrinking this per discussion today, since it sounds like additional hands-on time would be useful)

[pqcfox]

Suggested change

	(30m) Interactive Session
	(45m) Interactive Session

[pqcfox]

Suggested change

	<li>Maybe: Turn nrf52840dk into a U2F token?</li>
	<li>Warming up to Tock: writing your first app</li>
	<li>Protecting against malicious apps with Tock: app signing</li>

[RyanTorok]

I might make this header a bit more RoT-specific. I might combine the old and new titles to get something like:

Warming up to Tock as a RoT: Turn nrf52840dk into a U2F token.

[pqcfox]

Sounds perfect! In that case, I think what we add to the Tock book could just be an addendum to the U2F tutorial introducing a small malicious application onto the U2F token, and then blocking it from loading using app signing?

(Could also be a great way to introduce Tock capabilities in action, but maybe that's too much at once.)

[pqcfox]

(lastly in case it helps, nit on nRF52840 DK capitalization)