Adopting Memory-Safety and Fine-Grained Compartmentalisation With CHERI

QCon London 2026

Session security

Adopting Memory-Safety and Fine-Grained Compartmentalisation With CHERI

Tuesday Mar 17 / 05:05PM GMT, Windsor (5th Fl.) at The QEII Centre, London

Abstract

This talk will describe how CHERI achieves memory safety for existing code with just a recompile and how that non-bypassable memory safety can be used as a building block for higher-level security abstractions.

CPUs with CHERI support are starting to appear in commercial products now. CHERI began as a DARPA-funded research project at the University of Cambridge and SRI International  in 2010 to add support for fine-grained compartmentalisation (providing strong security boundaries around software components within a program) to modern CPU instruction sets. This included support for object-granularity memory safety, which allows usable abstractions for compartmentalisation, where programmers share objects, not pages. CHERI has subsequently been the subject of over £200M of total research, including Arm producing a high-performance test chip (Morello).

Most CHERI work has focused on incremental adoption. Morello, for example, can run versions of Linux and FreeBSD that can run unmodified binaries, and allows individual processes to adopt CHERI features either for isolated sandboxes or for a fully memory-safe process environment. The latter, on CheriBSD (the FreeBSD CHERI variant) includes a complete Wayland and KDE userspace stack.

Any memory-safety bug in any of this software track becomes a recoverable error (trapping before any memory corruption). A small team was able to run well over a hundred million lines of C and C++ in a fully memory safe environment. Rewriting in a safe language such as Rust would have cost orders of magnitude more.

CHERIoT aimed to showcase what will be possible once you can assume CHERI everywhere and design the software model to support this. The CHERIoT Platform is a fully open hardware-software stack for embedded systems that assumes CHERI from the ground up, with a mere 350 instructions that are trusted for the core isolation guarantees (contrast with around 50 KLoC in an embedded microkernel such as Zephyr or millions of lines of code in Linux). Every part of the system is built using CHERI-enabled compartmentalisation and .

The talk will discuss how fine-grained compartmentalisation can be not just possible, but easy on a CHERI system.

Topics

security embedded hardware
76% senior dev or higher
1:11 speaker ratio
60+ practitioners

QCon London 2026 is a three day conference for senior software engineers, architects and team leads. An international program committee of working engineers selects every session. Patterns and practices, not products and pitches.

Share

From the same track

Tuesday 17 March

10:35 Mountbatten (6th Fl.) Session security Why Governance Matters: The Key to Reducing Risk Without Slowing Down Sarah Wells Independent Consultant and Author 11:45 Mountbatten (6th Fl.) Session Kernel Building on Bedrock: A Security Philosophy from Bootloader to Runtime Alex Zenla Founder & CTO @Edera 13:35 Mountbatten (6th Fl.) Session SBOMs From Chaos to Clarity: Modern SBOM Practices That Actually Work Viktor Petersson Founder of sbomify, Co-founder & CEO of Screenly, Host of Nerding Out with Viktor 14:45 Rutherford (4th Fl.) Unconference Unconference: Software Security & Risk Management 15:55 Windsor (5th Fl.) Session security Exploding GPUs Andrew Martin Founder and CEO @ControlPlane, CISO OpenUK, CNCF Security Advisory Group 17:05 Windsor (5th Fl.) Session security Adopting Memory-Safety and Fine-Grained Compartmentalisation With CHERI David Chisnall Director of System Architecture @SCI Semiconductor, OS, Compiler, and Computer-Architecture Expert, Maintainer of the CHERIoT Platform