What Is the Root of Trust?
Oxide Computer Company, Friday, October 16th, 2026
Oxide's Bryan Cantrill explains how a hardware root of trust anchors attestation from silicon up to running VMs.
In an Oxide FAQ Friday video, Bryan Cantrill explains that Oxide's hardware root of trust is a secure NXP LPC55 chip that can keep a secret and is uniquely programmed with a device ID at the factory.
It verifies that the software it loads is signed by Oxide, then attests to what runs on the service processor, which in turn attests to the host CPU's software.
Because Oxide owns the whole stack from root of trust through service processor, host OS and control plane, it can carry those attestations up to running VMs, letting a VM verify the stack beneath it.
Details are in Oxide's RFD 605.