Centralized System Security Hub for Server Platforms

This 21-minute Open Compute Project talk features Phanikumar Kancharla (Marvell Sr Principal Engineer) and Craig Barner (Marvell Senior Distinguished Engineer) discussing a proposed centralized security framework for server platforms. Learn about extending secure key management beyond storage to multiple hardware components including MAC, DRAM, PCIe, CXL, and storage systems. The speakers explain how current security approaches rely on system software for on-demand encryption key provisioning, creating vulnerability risks. Discover how this proposed security hub simplifies hardware-software design by centralizing key management, enabling capabilities like encrypted memory transfer between systems and secure application offloading to crypto accelerators with encrypted keys. The presentation explores how this solution addresses security challenges in virtualized and cloud environments, potentially enhancing existing Caliptra and LOCK specifications or functioning as an independent Security Hub framework.