Prime Highlights:
- The UK government is investing £21 million to embed CHERI hardware security into devices and critical infrastructure, aiming to block up to 70% of common cyberattacks.
- Leading tech companies and universities, including EnSilica, SCI Semiconductor, and LowRISC, are developing CHERI-enabled processors and tools to improve cybersecurity across sectors like healthcare, transport, and energy.
Key Facts:
- Nearly £15 million of the funding is allocated to three companies to embed CHERI into commercial products, while £6.1 million supports software and developer tools for adoption.
- CHERI technology works at the processor level to prevent software-related attacks such as data theft and system hijacking, providing protection from the ground up.
Background:
The UK government is investing £21 million in new computer hardware security to help stop up to 70% of common cyberattacks. The UK government is funding the addition of CHERI security into everyday devices and key systems.
CHERI is built into processors to prevent software bugs from causing attacks like data theft or hijacking. The government plans to use it in areas like energy, healthcare, transport, and manufacturing.
Nearly £15 million of the funding will be allocated through the Advancing CHERI RISC-V Devices competition to three companies, EnSilica, SCI Semiconductor, and LowRISC, to embed CHERI into commercial products. EnSilica is developing a microcontroller for secure networking in vehicles and industrial automation.
SCI Semiconductor is working on a processor that incorporates post-quantum cryptography and on-device AI for critical infrastructure protection. LowRISC is enhancing a CHERI-enabled Linux-compatible processor core for high-security platforms.
An additional £6.1 million will support five projects focused on software and developer tools. These include SCI Semiconductor’s toolkit for C/C++ and Rust, the University of Manchester’s specialised OS for embedded devices, Capabilities Limited’s FreeBSD integration work, University of Birmingham’s memory-safe capabilities for Zephyr RTOS, and Sensor IT’s secure gateway solution for industrial control protocols.
Cyber Security Minister Lloyd stated, “CHERI changes the game for cybersecurity, allowing us to build defenses directly into device hardware. This investment will help protect everything from smart devices in our homes to critical national systems, strengthening the UK’s digital future.”
Executives from participating companies highlighted the dual benefits of improved security and market potential, while technology giants Microsoft and Google are supporting the rollout by providing open-source processor cores and AI capabilities.
