Researchers present ShareMMU, an IOMMU design that allows multiple untrusted accelerators to securely reuse pre-translated addresses within a shared virtual address space. This approach mitigates side-channel risks associated with large Shared Translation Lookaside Buffers (TLBs) while maintaining high performance.

  • ShareMMU incurs only 1.66% performance overhead compared to an unsecured baseline, significantly outperforming Border Control (32%) and CryptoMMU (17%).
  • The side-channel resilient variant, ShareMMU-SP, adds approximately 2.82% overhead.
  • The design addresses security risks in multi-accelerator systems where processes do not mutually trust one another.

ShareMMU provides a secure and efficient mechanism for sharing address translations in cloud and edge environments with third-party accelerators.