DeTRAP: RISC-V Return Address Protection With Debug Triggers

Isaac Richter, Jie Zhou, and John Criswell

Presented at IEEE Secure Development Conference 2024

https://arxiv.org/pdf/2408.17248

This initial release just includes the compiler.

Future releases will include the runtime, benchmarks used, binary scanner, and hardware modifications. This release includes the compiler, runtime, and benchmarks used. A future release will include the hardware modifications.

Requirements

• git with submodule support
• cmake 3.20 or later
• ninja (we used 1.11.1)
• python (we used 3.11)
• A working C++ toolchain for the host system; we test on Clang/LLVM/LLD Repository and Toolchain Setup ==============================

We use git submodules. To pull and check out all submodules, run:

git submodule update --init --recursive

Next, to build the DeTRAP toolchain. First, change to the toolchain directory. Configure the build:

cmake -G Ninja -B build -DCMAKE_BUILD_TYPE=Release

Next, build it:

ninja -C build

To use a specific C++ compiler (we recommend Clang), you can add -DCMAKE_C_COMPILER=clang -DCMAKE_CXX_COMPILER=clang++ to the cmake command, substituting with the name of the compiler you want to use.