{"guid":"mzNAGavKy2KOcwOjGqC8pw","title":"Trustworthy secure modular operating system engineering","subtitle":"fun(ctional) operating system and security protocol engineering","slug":"31c3_-_6443_-_en_-_saal_2_-_201412271245_-_trustworthy_secure_modular_operating_system_engineering_-_hannes_-_david_kaloper","link":"http://events.ccc.de/congress/2014/Fahrplan/events/6443.html","description":"We present Mirage OS, a modular library operating system developed from scratch in the functional programming language OCaml. Each service, called unikernel,  is an OCaml application using libraries such as a TCP/IP stack, DNS. It is either compiled to a Xen virtual machine image or to a Unix binary (for development). State in 2014 is that it runs on x86 and arm, we implemented a clean-slate TLS (1.0, 1.1, 1.2), X.509, ASN.1 stack, crypto primitives, Off-the-record. We also have TCP/IP, HTTP, a persistent branchable store (similar to git) - all implemented in OCaml. A virtual machine serving data via https is roughly 2MB in size - no libc inside :)","original_language":"eng","persons":["hannes","David Kaloper"],"view_count":2770,"promoted":false,"date":"2014-12-27T12:45:00.000+01:00","release_date":"2015-01-10T01:00:00.000+01:00","updated_at":"2026-07-15T13:15:08.337+02:00","tags":["Science"],"length":3662,"duration":3662,"thumb_url":"https://static.media.ccc.de/media/congress/2014/6443-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2014/6443-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2014/mzNAGavKy2KOcwOjGqC8pw-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2014/mzNAGavKy2KOcwOjGqC8pw-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/31c3_-_6443_-_en_-_saal_2_-_201412271245_-_trustworthy_secure_modular_operating_system_engineering_-_hannes_-_david_kaloper","url":"https://media.ccc.de/public/events/mzNAGavKy2KOcwOjGqC8pw","conference_title":"31C3: a new dawn","conference_url":"https://media.ccc.de/public/conferences/31c3","related":[{"event_id":368,"event_guid":"import-1fe52c4111d06034ef","weight":1},{"event_id":460,"event_guid":"import-a06deb348ba5dc5997","weight":1},{"event_id":1795,"event_guid":"PtMWK4y18s0TL1Dr8L6VGw","weight":1},{"event_id":2148,"event_guid":"NjtxGgpt76NkFb1Q4LLjvg","weight":1},{"event_id":2151,"event_guid":"SXxWu-U4pNjjFZLl9XXDDA","weight":1},{"event_id":2153,"event_guid":"HLDDEFxCxCrQryx8fEacZw","weight":1},{"event_id":2156,"event_guid":"-n9QScyDLXMEwkqrCHASYw","weight":1},{"event_id":2158,"event_guid":"n2DFvyl_lWjW-gm317vT3A","weight":2},{"event_id":2188,"event_guid":"oBQMMNfX5t-5TBIk3z6pOg","weight":2},{"event_id":2277,"event_guid":"ad722522-5817-4317-8f3d-bb443b4e6c77","weight":2},{"event_id":2291,"event_guid":"2f68e356-6c3f-4034-9640-c06d717ed96b","weight":2},{"event_id":2296,"event_guid":"sAZoeOc6Qu4bMPxrU8yEpw","weight":1},{"event_id":2299,"event_guid":"KJiq3wTS9cMLTTrgJ8PqHA","weight":3},{"event_id":2301,"event_guid":"419d4f7e-7506-4d46-8700-e47e164a8e32","weight":1},{"event_id":2549,"event_guid":"327922bb-5b63-416e-a6cb-8dcf73104037","weight":1},{"event_id":2674,"event_guid":"42e8e9f8-4e9c-4845-b871-bf8ce525594d","weight":8},{"event_id":2821,"event_guid":"5db7d97f-59c9-42d8-abfc-6224bf075f08","weight":1},{"event_id":2929,"event_guid":"d66db4df-49ed-4c9f-ada3-289d16786c8e","weight":1},{"event_id":3615,"event_guid":"74783236-46f4-493c-9574-1b27a44847b7","weight":1},{"event_id":3640,"event_guid":"700a07e7-a9c4-437b-a4c5-4491b23a9b4a","weight":2},{"event_id":3676,"event_guid":"f6811c99-96af-44d5-b82d-5afe826b2caf","weight":2},{"event_id":3692,"event_guid":"f21478d4-e8db-4f19-854c-2f74b5824706","weight":2},{"event_id":3743,"event_guid":"72e44333-c59a-47a4-9ef3-d5e8c9637eb6","weight":1},{"event_id":4762,"event_guid":"b036385c-ec1a-44e5-ae48-af703ce9b5d3","weight":7},{"event_id":4764,"event_guid":"da934433-0092-4749-b606-56b65e84214f","weight":3},{"event_id":4795,"event_guid":"722ce759-9cde-4e3b-8db5-5a97aa9673d9","weight":8},{"event_id":4866,"event_guid":"117a52b4-f675-49dd-aafe-659c07b6bc9c","weight":2},{"event_id":4870,"event_guid":"2cb8f405-10be-40f5-ae95-579f024a0c84","weight":4},{"event_id":4876,"event_guid":"dec6a7e0-2651-4bb5-8300-977795e901ed","weight":2},{"event_id":4930,"event_guid":"9a0efbf6-94d6-4c86-864c-caa1f3e929c7","weight":2},{"event_id":4937,"event_guid":"2e0125ef-679c-4eb3-9de6-f5e56e27fbca","weight":3},{"event_id":4940,"event_guid":"ff9f5cb5-8bff-44b4-9aa2-71855fed7cf4","weight":6}],"recordings":[{"length":3662,"mime_type":"video/mp4","language":"eng","filename":"31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_sd.mp4","state":"downloaded","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-02-03T14:08:19.219+01:00","label":"eng 576p","size":198,"recording_url":"https://cdn.media.ccc.de/congress/2014/h264-sd/31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_sd.mp4","url":"https://media.ccc.de/public/recordings/6079","event_url":"https://media.ccc.de/public/events/mzNAGavKy2KOcwOjGqC8pw","conference_url":"https://media.ccc.de/public/conferences/31c3"},{"length":3662,"mime_type":"video/webm","language":"eng","filename":"31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_webm-sd.webm","state":"downloaded","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-02-03T14:08:19.313+01:00","label":"eng 576p","size":166,"recording_url":"https://cdn.media.ccc.de/congress/2014/webm-sd/31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_webm-sd.webm","url":"https://media.ccc.de/public/recordings/6081","event_url":"https://media.ccc.de/public/events/mzNAGavKy2KOcwOjGqC8pw","conference_url":"https://media.ccc.de/public/conferences/31c3"},{"length":3655,"mime_type":"audio/opus","language":"eng","filename":"31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_opus.opus","state":"downloaded","folder":"opus","high_quality":true,"width":null,"height":null,"updated_at":"2015-01-10T22:28:06.304+01:00","label":"eng","size":42,"recording_url":"https://cdn.media.ccc.de/congress/2014/opus/31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_opus.opus","url":"https://media.ccc.de/public/recordings/6078","event_url":"https://media.ccc.de/public/events/mzNAGavKy2KOcwOjGqC8pw","conference_url":"https://media.ccc.de/public/conferences/31c3"},{"length":3655,"mime_type":"audio/mpeg","language":"eng","filename":"31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_mp3.mp3","state":"downloaded","folder":"mp3","high_quality":true,"width":null,"height":null,"updated_at":"2015-01-10T22:29:13.191+01:00","label":"eng","size":84,"recording_url":"https://cdn.media.ccc.de/congress/2014/mp3/31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_mp3.mp3","url":"https://media.ccc.de/public/recordings/6080","event_url":"https://media.ccc.de/public/events/mzNAGavKy2KOcwOjGqC8pw","conference_url":"https://media.ccc.de/public/conferences/31c3"},{"length":3662,"mime_type":"video/mp4","language":"eng","filename":"31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_hd.mp4","state":"downloaded","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:08:19.065+01:00","label":"eng 1080p","size":515,"recording_url":"https://cdn.media.ccc.de/congress/2014/h264-hd/31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_hd.mp4","url":"https://media.ccc.de/public/recordings/6077","event_url":"https://media.ccc.de/public/events/mzNAGavKy2KOcwOjGqC8pw","conference_url":"https://media.ccc.de/public/conferences/31c3"},{"length":3662,"mime_type":"video/webm","language":"eng","filename":"31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_webm-hd.webm","state":"downloaded","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:08:19.527+01:00","label":"eng 1080p","size":477,"recording_url":"https://cdn.media.ccc.de/congress/2014/webm-hd/31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering_webm-hd.webm","url":"https://media.ccc.de/public/recordings/6084","event_url":"https://media.ccc.de/public/events/mzNAGavKy2KOcwOjGqC8pw","conference_url":"https://media.ccc.de/public/conferences/31c3"},{"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"DRAFT_31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering.en_DRAFT.srt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-01-15T18:33:07.130+01:00","label":"eng (todo)","size":null,"recording_url":"https://cdn.media.ccc.de/congress/2014/DRAFT_31c3-6443-en-Trustworthy_secure_modular_operating_system_engineering.en_DRAFT.srt","url":"https://media.ccc.de/public/recordings/50868","event_url":"https://media.ccc.de/public/events/mzNAGavKy2KOcwOjGqC8pw","conference_url":"https://media.ccc.de/public/conferences/31c3"}]}