{"id":"https://openalex.org/W7214197657","doi":"https://doi.org/10.48456/tr-891","title":"Capability Hardware Enhanced RISC Instructions: CHERI Instruction-Set Architecture (Version 5)","display_name":"Capability Hardware Enhanced RISC Instructions: CHERI Instruction-Set Architecture (Version 5)","publication_year":2021,"publication_date":"2021-04-12","ids":{"openalex":"https://openalex.org/W7214197657","doi":"https://doi.org/10.48456/tr-891","mag":"2517996894"},"language":"en","primary_location":{"id":"doi:10.48456/tr-891","doi":"https://doi.org/10.48456/tr-891","is_oa":true,"landing_page_url":"https://doi.org/10.48456/tr-891","pdf_url":null,"source":{"id":"https://openalex.org/S7407052044","display_name":"CL Technical Reports","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},"volume":null,"type":"report","is_traditional":false,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48456/tr-891","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013006563","display_name":"Robert N. M. Watson","orcid":"https://orcid.org/0000-0001-8139-8783","observed_orcids":["https://orcid.org/0000-0001-8139-8783"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robert N. M. Watson","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151801015","display_name":"Peter G. Neumann","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peter G. Neumann","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136101822","display_name":"Jonathan Woodruff","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jonathan Woodruff","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Michael Roe","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Michael Roe","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062925499","display_name":"Jonathan Anderson","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jonathan Anderson","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003350033","display_name":"David Chisnall","orcid":"https://orcid.org/0000-0001-6060-0153","observed_orcids":["https://orcid.org/0000-0001-6060-0153"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David Chisnall","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048690334","display_name":"Brooks Davis","orcid":"https://orcid.org/0009-0006-6256-0419","observed_orcids":["https://orcid.org/0009-0006-6256-0419"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Brooks Davis","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026528066","display_name":"Alexandre Joannou","orcid":"https://orcid.org/0000-0002-3161-2638","observed_orcids":["https://orcid.org/0000-0002-3161-2638"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alexandre Joannou","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151780184","display_name":"Ben Laurie","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ben Laurie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041439799","display_name":"Simon W. Moore","orcid":"https://orcid.org/0000-0002-2806-495X","observed_orcids":["https://orcid.org/0000-0002-2806-495X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Simon W. Moore","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011443512","display_name":"Steven J. Murdoch","orcid":"https://orcid.org/0000-0002-8744-1575","observed_orcids":["https://orcid.org/0000-0002-8744-1575"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Steven J. Murdoch","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151727828","display_name":"Robert Norton","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robert Norton","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5151835815","display_name":"Stacey Son","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Stacey Son","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5045554783","display_name":"Hongyan Xia","orcid":"https://orcid.org/0000-0002-8047-899X","observed_orcids":["https://orcid.org/0000-0002-8047-899X"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hongyan Xia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.003000000026077032,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cheri","display_name":"CHERI","score":0.9139999747276306},{"id":"https://openalex.org/keywords/instruction-set-architecture","display_name":"instruction set architecture","score":0.7710000276565552},{"id":"https://openalex.org/keywords/principle-of-least-privilege","display_name":"principle of least privilege","score":0.9300000071525574},{"id":"https://openalex.org/keywords/control-flow-integrity","display_name":"control-flow integrity","score":0.7250000238418579},{"id":"https://openalex.org/keywords/compartmentalization","display_name":"compartmentalization","score":0.6439999938011169},{"id":"https://openalex.org/keywords/separation-kernel","display_name":"separation kernel","score":0.5770000219345093},{"id":"https://openalex.org/keywords/hypervisor","display_name":"hypervisor","score":0.9039999842643738},{"id":"https://openalex.org/keywords/operating-system-kernel","display_name":"operating system kernel","score":0.7990000247955322},{"id":"https://openalex.org/keywords/formal-verification","display_name":"formal verification","score":0.39399999380111694}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8219000101089478},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5921000242233276},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5218999981880188},{"id":"https://openalex.org/C118524514","wikidata":"https://www.wikidata.org/wiki/Q173212","display_name":"Computer architecture","level":1,"score":0.5054000020027161},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4964999854564667},{"id":"https://openalex.org/C202491316","wikidata":"https://www.wikidata.org/wiki/Q272683","display_name":"Instruction set","level":2,"score":0.49480000138282776},{"id":"https://openalex.org/C126298526","wikidata":"https://www.wikidata.org/wiki/Q189376","display_name":"Reduced instruction set computing","level":3,"score":0.4767000079154968},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.45080000162124634},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.436599999666214},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.4350999891757965},{"id":"https://openalex.org/C34165917","wikidata":"https://www.wikidata.org/wiki/Q188267","display_name":"Programming paradigm","level":2,"score":0.4207000136375427},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.39890000224113464},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.38280001282691956},{"id":"https://openalex.org/C28180684","wikidata":"https://www.wikidata.org/wiki/Q4080983","display_name":"Memory safety","level":3,"score":0.3617999851703644},{"id":"https://openalex.org/C65232700","wikidata":"https://www.wikidata.org/wiki/Q5656403","display_name":"Hardware architecture","level":3,"score":0.3481999933719635},{"id":"https://openalex.org/C12186640","wikidata":"https://www.wikidata.org/wiki/Q6815743","display_name":"Memory model","level":3,"score":0.3249000012874603},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3237000107765198},{"id":"https://openalex.org/C153247305","wikidata":"https://www.wikidata.org/wiki/Q835713","display_name":"Memory address","level":3,"score":0.3019999861717224},{"id":"https://openalex.org/C2779602883","wikidata":"https://www.wikidata.org/wiki/Q15544750","display_name":"Memory architecture","level":2,"score":0.29499998688697815},{"id":"https://openalex.org/C55356503","wikidata":"https://www.wikidata.org/wiki/Q2136675","display_name":"Reference architecture","level":4,"score":0.2833000123500824},{"id":"https://openalex.org/C35869016","wikidata":"https://www.wikidata.org/wiki/Q846636","display_name":"Software architecture","level":3,"score":0.2782999873161316},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.2736999988555908},{"id":"https://openalex.org/C41036726","wikidata":"https://www.wikidata.org/wiki/Q844824","display_name":"Physical address","level":3,"score":0.26980000734329224},{"id":"https://openalex.org/C98025372","wikidata":"https://www.wikidata.org/wiki/Q477538","display_name":"Systems architecture","level":3,"score":0.26910001039505005},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.26809999346733093},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.26260000467300415}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.48456/tr-891","doi":"https://doi.org/10.48456/tr-891","is_oa":true,"landing_page_url":"https://doi.org/10.48456/tr-891","pdf_url":null,"source":{"id":"https://openalex.org/S7407052044","display_name":"CL Technical Reports","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},{"id":"mag:2517996894","doi":null,"is_oa":false,"landing_page_url":"https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-891.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"doi:10.48456/tr-891","doi":"https://doi.org/10.48456/tr-891","is_oa":true,"landing_page_url":"https://doi.org/10.48456/tr-891","pdf_url":null,"source":{"id":"https://openalex.org/S7407052044","display_name":"CL Technical Reports","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Report"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2499491173","https://openalex.org/W7213319025","https://openalex.org/W7213266460","https://openalex.org/W7213316036","https://openalex.org/W7213304200","https://openalex.org/W4388667448","https://openalex.org/W4388667356","https://openalex.org/W4388667216","https://openalex.org/W2978621079","https://openalex.org/W2516191413"],"abstract_inverted_index":{"This":[0,30,57],"technical":[1,55],"report":[2],"describes":[3],"CHERI":[4,112,188,220,249,288],"ISAv5,":[5],"the":[6,10,26,49,60,169,203,212,245,252,287,309,324,381],"fifth":[7],"version":[8,58],"of":[9,28,35,77,167,171,181,205,214,261,295,331,365,380,423],"Capability":[11],"Hardware":[12],"Enhanced":[13],"RISC":[14,131],"Instructions":[15],"(CHERI)":[16],"Instruction-Set":[17],"Architecture":[18],"(ISA)":[19],"being":[20],"developed":[21],"by":[22,164,323],"SRI":[23],"International":[24],"and":[25,41,43,73,96,109,141,161,165,195,237,263,277,303,311,341,390,410,426],"University":[27],"Cambridge.":[29],"design":[31,79],"captures":[32],"six":[33],"years":[34],"research,":[36],"development,":[37],"refinement,":[38],"formal":[39],"analysis,":[40],"testing,":[42],"is":[44,115],"a":[45,75,118,128,142,227,293],"substantial":[46],"enhancement":[47],"to":[48,69,89,106,127,135,244,291,307,362,415],"ISA":[50,78,132],"versions":[51],"described":[52],"in":[53,198,272],"earlier":[54],"reports.":[56],"introduces":[59],"CHERI-128":[61],"\u201ccompressed\u201d":[62],"capability":[63,67,229,233,235,289],"format,":[64],"adds":[65,123],"further":[66],"instructions":[68],"improve":[70],"code":[71,270,429],"generation,":[72],"rationalizes":[74],"number":[76],"choices":[80],"(such":[81,402],"as":[82,85,394,403],"system":[83,189,320],"permissions)":[84],"we":[86,371,398],"have":[87,241],"come":[88],"better":[90],"understand":[91],"mappings":[92],"from":[93,251,298],"C":[94],"programming-language":[95],"MMU-based":[97],"operating-system":[98,386],"models":[99,209],"into":[100],"CHERI.":[101],"It":[102],"also":[103,177,278],"contains":[104],"improvements":[105],"descriptions,":[107],"explanations,":[108],"rationale.":[110],"The":[111,187],"instruction":[113],"set":[114],"based":[116],"on":[117,376],"hybrid":[119,319],"capability-system":[120,125],"architecture":[121,190],"that":[122,201,231,240,337,413],"new":[124],"primitives":[126],"commodity":[129,199],"64-bit":[130,246],"enabling":[133],"software":[134,159,333,335,355,418],"efficiently":[136],"implement":[137],"fine-grained":[138,158,259],"memory":[139,175,225,239,262],"protection":[140,176,296],"hardware-software":[143],"object-capability":[144],"security":[145,326],"model.":[146],"These":[147],"extensions":[148],"support":[149],"incrementally":[150],"adoptable,":[151],"high-performance,":[152],"formally":[153],"based,":[154],"programmer-friendly":[155],"underpinnings":[156],"for":[157,267,316],"decomposition":[160],"compartmentalization,":[162],"motivated":[163],"capable":[166],"enforcing":[168],"principle":[170,213],"least":[172,215],"privilege.":[173,216],"Fine-grained":[174],"provides":[178],"direct":[179],"mitigation":[180],"many":[182],"widely":[183],"deployed":[184,345],"exploit":[185],"techniques.":[186],"purposefully":[191],"addresses":[192],"known":[193],"performance":[194],"robustness":[196],"gaps":[197],"ISAs":[200],"hinder":[202],"adoption":[204,330],"more":[206,339],"secure":[207],"programming":[208],"centered":[210],"around":[211],"To":[217],"this":[218],"end,":[219],"blends":[221],"traditional":[222],"paged":[223],"virtual":[224],"with":[226,431],"per-address-space":[228],"model":[230,290],"includes":[232],"registers,":[234],"instructions,":[236],"tagged":[238],"been":[242],"added":[243],"MIPS":[247],"ISA.":[248],"learns":[250],"C-language":[253,300,304],"fat-pointer":[254],"literature:":[255],"its":[256],"capabilities":[257],"describe":[258],"regions":[260],"can":[264,343],"be":[265,344,363],"substituted":[266],"data":[268,276,404,433],"or":[269],"pointers":[271],"generated":[273],"code,":[274],"protecting":[275],"providing":[279],"Control-Flow":[280],"Integrity":[281],"(CFI).":[282],"Strong":[283],"monotonicity":[284],"properties":[285],"allow":[286],"express":[292],"variety":[294],"properties,":[297],"valid":[299],"pointer":[301],"provenance":[302],"bounds":[305],"checking":[306],"implementing":[308],"isolation":[310],"controlled":[312],"communication":[313],"structures":[314],"required":[315],"compartmentalization.":[317],"CHERI's":[318],"approach,":[321],"inspired":[322],"Capsicum":[325],"model,":[327],"allows":[328],"incremental":[329],"capability-oriented":[332],"design:":[334],"implementations":[336],"are":[338,348,372,421],"robust":[340],"resilient":[342],"where":[346],"they":[347],"most":[349],"needed,":[350],"while":[351,435],"leaving":[352,436],"less":[353],"critical":[354],"largely":[356],"unmodified,":[357],"but":[358],"nevertheless":[359],"suitably":[360],"constrained":[361],"incapable":[364],"having":[366],"adverse":[367],"effects.":[368],"For":[369],"example,":[370],"focusing":[373],"conversion":[374],"efforts":[375],"low-level":[377],"TCB":[378],"components":[379],"system:":[382],"separation":[383],"kernels,":[384,387],"hypervisors,":[385],"language":[388],"runtimes,":[389],"userspace":[391],"TCBs":[392],"such":[393],"web":[395],"browsers.":[396],"Likewise,":[397],"see":[399],"early-use":[400],"scenarios":[401],"compression,":[405],"protocol":[406],"parsing,":[407],"image":[408],"processing,":[409],"video":[411],"processing)":[412],"relate":[414],"particularly":[416],"high-risk":[417],"libraries,":[419],"which":[420],"concentrations":[422],"both":[424],"complex":[425],"historically":[427],"vulnerability-prone":[428],"combined":[430],"untrustworthy":[432],"sources,":[434],"containing":[437],"applications":[438],"unchanged.":[439]},"counts_by_year":[],"updated_date":"2026-10-14T16:39:01.820549","created_date":"2026-09-25T00:00:00"}