Islet
An open-source confidential-computing platform for ARM devices that protects data being processed on-device using ARMv9's Confidential Compute Architecture.
Islet enables confidential computing on ARM devices using ARMv9 CCA, aiming to protect user data at the point where it is first collected rather than only once it reaches a server. It runs virtual machines confidentially, called realms, and exposes standard SDKs so applications such as private messengers, secure email and password managers can integrate with it.
The platform has two parts: Islet RMM, a Realm Management Monitor that runs in the Realm world on application processor cores and manages confidential VMs, and Islet HES, Hardware Enforced Security, which performs boot measurement, generates platform attestation reports and manages sealing keys on separate secure hardware.
It is written in Rust and licensed under Apache-2.0.