But we've got a sense for a direct experience that he has had today on the campaign trail. The problems, the challenges and the solutions are there before us. We've been talking about all of those since 10 o'clock this morning. And we've had the experts, the members of the policy review and future view team speak. And the time has come now for people to ask us questions. So the phone lines are open in asking us questions while the questions are getting ready to come. We have a number of issues we haven't dealt deeply enough with. One of them is education, which is frontier. Education and health care determine the progress that we can make. So we speak some to education. I've got another legal school professor. We are going to speak to some of the programs that we have to engage in the Nigerian people. One of them is how we clean up Nigeria. I want to say clean up both physically and figuratively. In physical we begin this clean up, we started this clean up Nigeria initiatives. But next week Saturday is a big bang across the country. Support groups, youth groups across Nigeria are going to go out there to clean up Nigeria. Dr. Chidi Agwaluba, who manages that out of the big tent, will speak to it. But in the meanwhile call us on any of the issues that we have dealt with. But let's start with you making some comments about the challenge of education In my opening remarks I talked about Angus Diting and the work on the Great Escape. Thank you, professor Tomi. They told about it that today Nigerian education is in crisis. And this crisis is enormous. Because the crisis is enormous, I think this is about time now to have a change in the Nigerian political system. There is no country on earth that can not be able to develop without education. So education is the key to development. And we look at education right now. Is it a big problem? So I am delighted that the new president of PTOB will come in here and then revolutionize education. The educational system comes in a three-segment, the primary, the secondary and the territorial one. When you look at, for example, what he has in his portfolio in our education basically is that the education system will be reformed, totally reformed in such a way that we can take back that educational system that has been lost. Starting, for example, with the primary one, it is in policy that in this particular segment in all the areas that there is going to be a system whereby all the stakeholders will be involved. What do I mean by stakeholders involved? Both teachers and also parents that have been educated in such a way that in primary one his policy is that we are going to come in and come out with a parental administration. Whereby, for example, there is going to be a PTA in different areas. They are going to come out with about five board members, five to nine board members. Whereby they can be able to meet together. And then in the area of free primary education, he planned basically to make sure that the primary education still exists in the primary and secondary school level. And at the same time also he is going to be able to come out with a big investment in this area. We are by for a reason. Okay, sorry. Why don't you hold your thoughts. Let's take a call and we can return to your thoughts. Yes. Hello. Yes, please, very quick. What's your own story there? And I'm so pleased with the level of committee that you guys have been. In respect to education, we know the situation of education. We are also particular about the strike prior before they came back over eight months. Now they are back but the issue is not clearly settled. We know that I'm going to go back to strike because the stress is still there. When Jonathan was there out of the 1.33 trillion, 200 million, 200 billion and the issue is not settled. What will this government do if eventually they are elected into office and they fit up even if they are the president? What are the modernities that people will use to stop and to strike once and for all? Because our secondary schools in Nigeria are not glorified primary schools. The infrastructures are not there. We are talking about the situation where a lot of children in this school are now Yahoo Yahoo children. It's right from that tender age that have been incorporated to this Yahoo and it's not become a national crisis. And the issues are there with the multi-dimensional poverty level of 133 million persons, poverty in education, poverty in housing, poverty in health. Thank you so very much. You have first expressed the financial management. What are you people going to do to ensure that our primary schools, when I was younger, went to nursery school, so that our primary schools are nursery schools, our investors can be compared to world-class funders. Harvard is not in Utopia. Harvard is not in the sky. Harvard is somewhere around the world. Why can't we build institutions in this country that will be able to educate the citizens? Okay, thanks so very much. We appreciate the passion with which you are asking the question. Let's start with the simple fact that Mr. Peter Obi makes. When he became governor of Anambra State, Anambra was 26th in the Federation. He made a number of policy decisions which included essentially getting the traditional providers of education to take back the system. Against much opposition, in two, three years, in Waik was the other NECO results, Anambra went from 26th to 2nd and then 1st. It shows that the stakeholder engagement process which Professor Zing was talking about a moment ago, primary schools are where we ship our children. If the parents are involved in policy, if the local administration is engaged, it's a very personal thing and they will ensure that your children will get the very best. And so that is a starting point from that point going forward. Again, Mr. B likes to make the point that when he was governor of Anambra, they got to a position where ASU, even till today, even long after he left, ASU at Anambra State University did not join the current strike because they created a setting level of engagement that literally took them out of the pressure points that our university system experiences currently. So at the heart of this is stakeholder commitment, the resourcing of the educational system to enable us to get the best. And then of course, because values ship human progress, who are the providers of the socialization of the children? How do they get molded, character formed? This is very important for education. Maybe I can come in here. I was part of the police manifesto committee on education. One of the key things our current educational system is dysfunctional. The key function of education is to draw out the greatness in people. But when people go through the dysfunctional education we have in Nigeria today, that greatness is not brought out. So one of the things we agree the pure government will do is to create a functional, practical and relevant educational system in the primary secondary school segment that is going to be free and compulsory. Now, the education is not just going to be for the child to just go and learn academics.  We're going to expose a child, every Nigerian child from primary one to vocational skill training vocational skill training and sports development. All that will be passed. Thank you very much for this opportunity. We are fine over here. I want to appreciate you guys for the hard work you are doing. You know everybody will say that we in the dark here we cannot vote but we have families down back at home so that is a lesson for us. So please, I want to contribute to the issue. The issue of education and the rest we have Mr. Peter Abihaz analysed everything because he has to do what we say why he answered a lot of questions. I know people will keep continue asking these questions about how things will be done, how things will be done but I want everybody to believe that this change has come. Let's accept the change. Thank you so very much. Thanks. The one and only pastor Ihtua Igodaro with us and he has fixed many things in the past. How are we going to fix education? You know what has been lacking in Nigeria is sincerity. Sincerity, sincerity, sincerity. Nigeria has more than enough resource to take care of a lot of these things and even if there is no resource there is help from anywhere to fix education. Education was at a certain level at a certain time in Nigeria especially in western Nigeria and people were getting educated people were getting scholarships people were going abroad. We all knew the standard of education we had in Nigeria nearly 40 years ago where if you went to school abroad it was simply because you probably couldn't make it in Nigeria. So what we need to do is to start from a point of view of really looking critically at the system. We all know what the problems are. Number one is under funding. Number two is government getting involved in what you shouldn't get involved in. I don't know what government has is in charge of the federal government colleges. I don't know why it cannot spin off these colleges to the old boy network or to some NGO or to somebody. In some ways you and I are both Ibado boys. We went to school in Ibado. Old school I went to had an old boy that became governor and we battled him until he left he couldn't deal with what people be dealt with in Anambra by the way then returned to school. But eventually changes are taking place. The old boys have gotten together gone to the governor still why is it so difficult your mother was the first woman to become a permanent secretary as she were back in those days the kinds of policies that why is it so difficult to make those kinds of things happen today. Part of it is corruption part of it is a wrong tone at the top part of it is insincerity as I said before and part of it is the political will there's no big deal about returning schools back to the original owners and that's what it should be because they started the schools in the first place they had the vision for the schools they knew what they were trying to do and so on and so forth but you see if you go to most of the ministries and all that one director somewhere one permanent secretary somewhere one somebody somewhere is sitting on a lot of money budget and all that and that really simply is sometimes what mitigates against this thing but if you have a governor who is strong who is sincere who is determined and he issues that within the next six months these schools should go back to where they are coming from and whoever owns them and all that it will happen it will happen but we all play politics we play too much politics with our lives with our future with our education with our health and so on and so forth the graft is unbelievable and until we can really take out this graft it will be a problem okay we got another caller please very quickly maybe you should say your name and then in 30 seconds please ask the question hello my name is Simotri and I'm from the UK okay yes I just want to commend you for my training I've been working in this field since morning and I wanted to go back to the guide I don't want to take much of your time but I just want to make a bit of contribution and a long contribution on the actual question and so I was listening to she's excellent in the way she runs she's very active the question is where are we those that are still in our I'm wondering and those that are still in our department there are just 100 acts because that is an area that can help to pay our debt so if we are saying that we want to leave those that are still in our money so we then believe that in a way that the account can get paid and we can go back to teaching them when we can have something that should remind the ESU team that they can teach that they can go after the while to be in a concentration on the size of government in our system I don't know I would be thinking in that direction to ask somebody to manage the ESU team and grasp the money whereas we concentrate on government yeah thank you very much that's my question well thank you I think that the way that the administration that is to come is gearing itself up is it will be an engaged one it will get people of competence of character with compassion to man the appropriate organs of government so that the kinds of challenges we have today will be reduced but I think what is more important is using culture is using technology to prevent rather than waiting to cure you know we are often looking at catching the thief and we can prevent the person from stealing in the first place today we can easily use technology that is available which enables us to all see at the same time the transactions that are taking place such that you know the opportunity of discretion of hiding around the corner which is then used to get corrupted is far less there that's why we we see that institutions are important the average person in the UK is no more honest than the average person in Nigeria but they know that there is consequence and when they because they know the consequence they will catch up with them today even traffic you know that even if there is no policeman around the camera will pick you up and you will get the ticket and you will have to pay you then begin to avoid those after a while it becomes a habit not to run the light and in the institutional economics school sometimes described as the settled habit of a community but the same people in the UK who are now with a settled habit behaving appropriately before traffic light leave them in Nigeria after one week to be breaking traffic light so I think that this um this turn into technology and all of that and preventing that is better any thoughts or reactions to this question okay please come through very quickly part measure your name and question good evening good evening my name is Amade Kalo and I'm calling from Ure please sir my question is this in 2012 when APC were doing their campaign some of them were lower very very lower but when they when they get to office when Nigeria select them to office they will not become more powerful than Nigeria so what are the assurance the obedient family is giving to Nigeria that they will be obedient to the electorate they will be known they will know they will be that they will know the powerful more than the Nigeria that elect them so what is the assurance are you giving the electorate thank you and good evening thank you very much I can start any of you responding to that before I come it's what leadership really is all about accountability we have to have systems in place in fact one of the things that the group the think tank is considering is that they will be clearly stated contract from the people with the people from the government and three years into the administration if those things have not been met if the government has not been transparent a recall of the government should start the big government is inviting you to recall it if after three years you see that it has not lived its promise I think this government is committed or the OB movement is committed to making sure that things are not done as they have been done in the past making sure that there is transparency making sure that there is accountability making sure that promises are delivered if not we have recourse to the polls in four years time and that's the benefit of democracy and that's the important thing that the Nigerian people should rise up and start asking questions Nigerians should stop being afraid and stop being cowed by government or the presence of government and this is what is important at this point in time okay we have another caller let's take that one quickly can you hear me? we can hear you your name please and question in 30 seconds if you could okay sir my name is I am calling from the United States so my question is we all know the importance of internet service so they are available for everybody I know if I am wrong internet service as part of the human rights what is the plan of the coming government to make internet service as they do in Nigeria okay please okay to ensure that there is internet fiber optics in every state capital and every federal government in university or tertiary institution across the country to make internet available to every young Nigerian this is technology and it's not rocket science anymore once the tone at the top is right the funding can be provided and found and in these days and age is a sink one known that every local area every institution every government institution must have first class internet service it's almost like having air and oxygen and water you know anybody who doesn't consider these things right now is not serious and is not ready to do business and if the government does not do that then the government must be held to question the technology is available in different forms and the technology needs to be deployed and it's also a technology that will pay for itself pay for itself over time with the usage and things like that so it's a self financing thing it's not rocket science no big deal you know what I keep repeating like a broken record what has been lacking in Nigeria for the past almost 60 years is a society and a determination to serve the Nigerian people and to do the best for the Nigerian people the prime minister of Dubai Sheikh al-Maktoum says the job of a government is to make its people happy to make sure that every single citizen is provided for giving opportunity allowed to express themselves allowed to grow and develop not the situation where it's them and the rest and where people are giving this sense of servanthood and lack of belonging in a society that's their own where poverty is weaponized where illiteracy is weaponized and so on and so forth there needs to be a change at this point in time where there's much more relevance and importance and regard given to the people I think we have another caller we'll take that call quickly and by the way I'd like to ask a technical crew to check I think Mr. Obi has not taken off so if he's on the board you can bring him in to say one more thing or I won't respond to any of the questions let's take a question then oh he's back yes go ahead okay all right we'll continue yeah are you able to do you want to say something after a very stressful day hello yeah go ahead we can hear you I was just two questions where somebody asked about issue of education do I didn't hear the comments very well I wish I had known it was part of a challenge of technology with low bandwidth everywhere what the question was about education about your anambra's experience in in response to that question the question was that what was your government going to do about education the question was what would your government do to transform education can you hear me now yes okay well for me education is the most important investment any country or society can do for its people and it's clearly been shown okay well yeah while we're waiting for him to get a better connection I'd like to spend a quick minute and ask Chidi to speak to the initiative on clean up Nigeria and very quick one two minutes clearly in anambra's we are first we ensure that our education is well funded well provides everything and everybody saw it we have male issue in terms of admission because the males we are going to school so we had girl male issue in education we are able to bring it back we are male now and more in our secondary schools than female at least equal if I used to be 80 20 we demand that if you go to anambra's public schools are more attractive and even private schools yeah that is a very important point actually I can share an experience one of your predecessors of the bigger old anambra state eco model maker I recall visiting him in enugu and I said to him I was just coming from the University of Nigeria I had gone to visit the University of Nigeria after having been gone for many years and I said to him my goodness I was shocked going to sukkakayu imagine there is even a woman sleeping in my room what used to be my dumb the all female yes and he said that when he came to anambra he thought all the schools anytime I went to visit the schools thought the schools were girl schools and then he got to one there were two boys in the class so he asked them you two boys what are you doing in the girl school he said no it's not a girl school it's a miss school and that the boys were not coming and he asked the boys what's happening he said the other boys said that before these people finish finishing this school they would have limited they would have limited limited liability company yes so in fact one of his commissioners professor jofo wrote a book on male enrollment drop out something like that in anambra state and that was reverse during your time in anambra state how are you able to reverse it in anambra state how are you able to reverse it it's very simple by time you started and you invested in education refurbishing the schools making them more attractive preaching it's everywhere on the need for education even those who want to be limited those who want to do anything those who want to go to market we are talking to them on importance of education that it is critical for whatever you want to do education first may this be to be preached in churches and everything parents gathering gathering all various gatherings and everything and he saw people they have seen values and everything in what we are preaching in what we are saying and they are not turning around parents already running they have made children back into school it's dangerous not going back to school we are encouraging various schools we are giving back to the churches we encourage them like the maize schools to ensure that they go out attracting the maize students back to school what they did and it all worked it's interesting governments come governments go they make promises they don't keep their promises what are you going to do different to make sure that the people can it's a very simple thing where we are now where we are now nobody can afford to do fake promise that's why they have to check people's background people's record if nobody is making promise for example saying I'm going to fight corruption or anything let's go to where he passed through before and check what he was able to do it's a simple thing let's know how much money was able to how he managed his sources what he kept when he was living how you know these are things to look at people must have track record when they are seeking office we should be able to investigate previous office they have heard where they are coming from and be able to evaluate will they do better if they are giving another office character is like smoke it will always out so if you can't establish the character question don't vote but I think a preacher put it very nicely may your children be like those you plan to vote for say amen if you believe it people didn't say amen so we should all go back and examine our consciences do we want to be led by people who don't want our children to be like this matters under color is here so let's take under color yes hello yes hello yes your name where you are calling from please quickly and a shot my name is Tony Abon calling from London in the UK gentlemen it's great to see you guys at Chatham house on Monday I just want to quickly say that this is my constituency and I will suggest that in revamping our educational system we have to really look at technical and vocational education force the apprenticeship system especially as it goes to do with our brothers it's a part of the country and even nomadic education so this to me will be the holistic approach thank you guys great job you are doing thank you very much I think that's all we have already in our manifesto yes already here comprehensive we are by nobody going to graduate without having that particular knowledge but when a child is 16 years old he has already established at least one skill why he is also acquiring educational certification nobody comes out from secondary school without being fully equipped he can live his life everybody doesn't have to go to university it takes people all the time if your plumbing is plumbing is needed in your house in Germany the fellow who comes to fix it might show up in his 7 series BMW because he makes more money than the PHD sometimes because that's a skill even locally here we can see it Thailand my favorite joke not joke actually truth the entire room when the Thailand is straight you know that some people from Benimali or somewhere have done the work if you see the work that Nigerians have done it will be like ribbonizer because of a skill shortage but guess what we are built by those Thailand in Nigeria so skills are so important and a skills emphasis in education is an imperative of the new education trust we are going to launch what is called every youth a skill so no Nigerian youth will be idle anymore if you don't have a skill we equip you with a skill so that you can any living by yourself ok we got a nekola please tell us who you are where you are calling from very quickly yes my name is Mr Ocita I am calling from Johannesburg Johannesburg welcome I salute you all you guys are doing a great job for the country as I know this system I did a project and not only it is excellent Mr Ocita and that is the entire team's project this is a Nigerian project that is what I thank this movement to be from our concern here in the diaspora is the process of the university collection what you have seen in the media is not encouraging and we are worried that this might affect the process of the labour party during the election so please if you don't can add by that it has a team that also monitor the influence of the privacy because I think that is the only place that we are worried of that it might affect the result of the election thank you we share your concerns we are working very hard at it all kinds of initiatives are coming up to respond to that we have someone coming on zoom and Lakola alright okay anyway Chidi was going to talk about the clean up Nigeria initiative this is essentially based around the fact that our environment is a big mess an environment matters into this world we want to orient our young people through their own action showing example of how to take care of the environment but it's not just that we clean up the environment we clean up the consciousness of the country because part of the garbage is the corruption in the heads of people part of the garbage is the nepotism in the heads of people and as young people go around picking up garbage they are talking to people about how we can have a better country Chidi just quickly we need to take a call another call okay yes please introduce yourself where you are calling from and 30 seconds my name is Dr.Sigbe Mf from Lokoja my question or rather maybe suggestion is that I don't know whether let me first of all comment the effort of the team you guys have done so well we are watching and we are impressed and we are happy that a new government is coming the students that is a short course number of the students that register if you look at all over the federation especially the federal government I don't know whether you have reached out to the regulator of the investment system to have the will of giving need semester break to students at least a week before the presidential election such that chalk of the students can participate in the election and have the covenants to travel to their places I think you can reach out to NUC maybe through CUP or APAC or maybe with the national police committee to do this thank you thank you may we do something like that in spite of the fact that we have a lot of voter suppression efforts in places by people who wish out that they have structure but are so afraid that their suppressing voting trying to solved from collecting their voter registration card I mean this is the terrible part of LAGOS chlagen è un meaning of abandonism. In the country, people must stop doing that. We say, the instability aside. We need decisions like giving the young people who are back in school a chance to go back and vote. Maybe a midterm break or something. ఇార౟టవరంతీనంతీనినిసిసదికానిసారేనివిన౿కుని.వాసరినియంకుసంతీతినిలిలానానినింసానిలంరండి. స్తకమివరూయయందామానిన౿కాని. But I learned that most of the schools will be closing by the middle of February for the holidays, for them to go back and do the election. Schools are not usually in section, you are doing elections. I don't know if this is going to be different. Okay, question coming on Zoom, please. Let's take that Zoom question or those Zoom questions. Hello? Hello? Can I go on? Go on please. Yeah, good evening all. Four questions for me and your team. I must commend you for the great job you are doing. My question really is the opinion of Labour Party and the principal of PTOG, with regards to the withheld eight more salaries of actual members. That is my opinion. My question, please. The issue will be confronted and dealt with at the appropriate time. Whatever people are owed, they will be paid. That's as simple as that. Justice is important. If the students graduated, people prepared them for graduation. And all those issues will be considered. Okay, let's take the Zoom question. Okay. All right. Do you have a caller on the phone? Yeah, hello. Thank you for giving me this opportunity. My name is Jonathan from Canada. My question is concerning... Where are you calling from, Jonathan? Not just the police. Canada, okay. I'm calling from Albury, Canada. Okay. My question is concerning police brutality. And I want to extend it to many uniform, military, the air force, the Navy, the border. So what is the plan that LP would have to talk not just to minimize where we would have situations, a soldier beating up a policeman because they are supposed to set the example for a lawful society. But we are saying this great on social media. Well, military men will be harassing the fellow military and not to talk of what they do to be the way. We want a situation where everything is thought and that nobody goes caught free if you exercise such discrimination. Well, thank you. Thank you. I appreciate that. This is a subject that I've had, is to be respond to several times at rallies. And usually I like to watch the faces of the policemen around when he responds to that. And compassion, training. All of those things will pain them decently and will lead to a reorientation. And once you get them in the right place, consequence management. You do what is inappropriate, the consequence comes to you when the environment is properly set. Look, Hong Kong used to have one of the most corrupt police forces in the world. Today, exact opposite, you can achieve that in Nigeria. Unfortunately, there is a certain situation with the collapse of culture in our country that authority is seen as the right to bully. Anybody who has authority in Nigeria wears a uniform, usually assumes that as a license to bully. We must change that. The statement, the police is your friend has to become real. Sometimes it's not quite so today. But we know that we have men in the police force who can be trained to appreciate and behave differently. Maybe as you add this, when you change the working environment of the police, a lot of things will change. You know about the broken window theory. When you go to the police stations in Nigeria and see how terribly bad that place is, people that come up from that environment cannot actually be sourceable. We are going to improve their working conditions and working environment and their living conditions and living environment and they are going to pay. When all these things are put in place, they will become happy. Then they will begin to protect the citizens. But when they are not properly taken care of, they prove their anger on the citizens. That's what happens. As the caller? Let's talk about the cleanup of Nigeria. We know today that Nigeria is in a total mess. It is actually sitting on the precipice. Okay, let's take this caller. Hello. Hello. Please go ahead. Yes. Those are the people who have their PVC. They are looking for PVC, and they are going to get their PVC. Those that don't have their PVC? There are still a few days of grace. I think we may need to put pressure on Nigeria. I don't see the reason why the PVC collection should end by 29. Why can't it be extended to the second week of February? You know the original law actually allows you to be able to even register a month to the election and then get your PVC. But as I often say, we tend to favor bureaucracy over democracy. However, let all of us make the effort as if our lives depend on it because in truth our lives depend on this. Correct. This is a watershed in our country's history. If we don't get rid of the old order, Africa will mock us because the rest of Africa has managed to begin to get rid of these kinds of deities of corruption that we call political parties in their countries. Look at the last couple of elections. The outside candidates defeated the establishment candidates. Whether it's Kenya, Lusoto, Botswana, Malawi. All of these places. It's Nigeria's turn to get rid of the old bad rubbish and have a new order. Okay, Kola. Yes, quick me. Yes. Okay. Now we are discussing the opinion of Nigeria. I know many voters who are interested in knowing whether the cleanup of the voter's register is something that will actually have come to this thing because that is what will encourage the voters to come out to vote and there is integrity in the INEC register process. How are we sure that there are no compromises in this INEC evidence register as I've been speculating in the news? Thank you. The subject. As citizens, I think it's the duty of all of us, including you, to put pressure on the system to ensure that the right thing is done. Okay, actually. Yeah, so we're talking about cleaning the entire system in Nigeria. Cleaning our mental system, cleaning our value system, cleaning Nigeria from corruption, from work with that enterprise and then bringing Nigerians to the consciousness that look, there's need for a complete change. We need to sweep out the old order, the political boundaries that have had Nigeria hostage and then bringing a new order of leadership that is totally responsible to the people. So we're going to do a symbolic cleaning up on the 28th of January, Saturday, the 28th of January 2023, all across the country. It's going to be a mega one. In Lagos, we're expecting about 5 million people to participate in this cleaning up exercise. We're going to go to the streets and clean up the mess on the streets. We're cleaning up the mess on the streets. We're using the opportunity to talk to Nigerians to look at their current life today and see if they want a continuation of that. If they don't want a continuation of that, then they need to join us in both cleaning the garbage on the streets and cleaning the garbage of what we call to the government. And getting that out of the way, throwing them into the dustbin and then bringing in a new set of leadership that will bring the life, the kind of life we want into the country. So every Nigerian should participate in that. Come out on Saturday. We have four locations where you can come out. Ikeja Underbridge and Truller Stadium, Apu Junction in Amor Duffey and then Jakondey in Leki. Come out there. There are going to be buses all over the place to bring people. Come out. Be part of this transformation. Nigeria, a new Nigeria is coming. Don't wait to hear this talk.  It's Mahatma Gandhi in the Seven Deadly Social Sins. Wealth without work. You look at our country. There are so many people who want to be rich without working. Or who are rich already. Politics without principles. If you look at what we call politics, without principles. We look at religion without sacrifice. There are some people who just call religion. Religion is about sacrifice. There is a pastor here. He will explain to us because our freedom came from sacrifice. We look at science without conscience. Without morality. Pleasure without conscience. I'm getting old. All of these are... No more sacrifice. No more sacrifice. But we cannot continue with those kinds of values. We need to have a country that is clean. We need to have politicians who are principled. We need to have business that essentially does not make profit to come above the humanity of those themselves. We need all of those things to define a new moral code and a new country that we build. So, any of the Zoom people coming through another question. If not, I'm going to begin to wrap up this session. We're moving close to the end of these 12 hours of programming. We are proud that this is something that has never happened before in Nigeria. This first time allows a political party to bring its policies before the entire planet analyze it and challenge people to ask them questions about it. No political party in the history of this country has ever done what we have done today and we feel good about it. This is the new Nigeria. A new Nigeria is possible. So, we have a couple of minutes to finish. Hello. Please come. Hello. Please. Can you hear me? Yes, I can hear you. Okay. This is Dr. Kochan. Ah, from Saudi Arabia. Yes, from Saudi Arabia. Bro. Yes. Okay. My question is simply, you know, it's easy to say, okay, let's revamp the educational system. But the major problem is the culture that has been set already, whereby education does not pay anymore. And I say this in a way because I have a nephew who I'm ready to train in the university. And he tells me, Uncle, I don't want to go to university. I want to just buy me a car. I want to be a driver. And I look at this young man, what is going on here. He said all his friends that have gone to school what they have not gotten anything out of it. You know. So, the culture is a problem we may have to deal with revamping education. How are we going to change this that has come to stay whereby education does not pay the professor cannot take care of his the training of his children. You know, because it's not any enough. Whereas ones that don't go to school are making a lot of money. So how do we change this culture whereby education pays again. When you begin to put emphasis on competence put premium on knowledge put premium on what people can do the values they are bringing to earn money you begin to see a change and transformation. People begin to know that look this guy was employed or got this because of the the solutions he is bringing because of the knowledge he has and all that. It's systemic. It's systemic. You know, basically what's happening here, the culture when you, for example, start from the foundation when the foundation is well built and that is why that particular you should say buy me a car because you don't have the foundation. You know, one of his seven deadly social sins I was going through is education without character. It's a deadly social sin. And part of what has happened is because character has been lost in providing education people don't see the value of education quite as they should and it's also systemic sometimes education needs to be skilled and relevant and practicable and the economy is not growing because it has been stifled by people who have heard the economy by the juggler such that by the time you produce somebody of a certain skill there's no room for them to express that skill and you keep pushing them down pushing them down all the time and then a lot of people have made money without education they've made money through psychofancy they've made money through corruption they've made money through banditry they've made money through all sorts of things so people kidnapped me you know, a time in my church some young people came to see me and I said what do you want to become in the future and they told me four things number one, they said I wanted to be a soldier the other one said I want to be an armed robber they thought I want to be a yaw yaw expert you know and so on and so forth why? because we have pushed very unfair way so we have to change the thinking but the one thing we don't know is that people who make so-called money that way very often never end well and it's not sustainable it's not sustainable so we have to revamp the whole thing we have to change the thinking there must be quality education that gives skill and that is relevant we must get the institutions involved in that secondly there must be a growing economy of real production that is receiving the outcomes of our educational system let's talk about the zoom call that is coming through see the zoom call will come through because the zoom calls have been made most of them, the internet six times is it my turn? go ahead okay I can go ahead somebody else is asking let's go ahead let's see your face if we can we can hear you okay go ahead I'm on the telephone okay my question is two fold the first one is what is the plans for the labor party to ameliorate the pvc collection bottlenecks especially in legal state that's one number two do you guys have any plans for a war room so that obedience anywhere can send them contributions in terms of ideas to address a real time issues that need to be jumped upon thank you the second question the answer is yes the situation is in place already technology all set up people to man volunteers all set up the first one is we just going to have to keep putting pressure we respond to that question previously but we need your support in many ways contribute to a fund that will enable us to put in place the things that will help all of those things happen and whatever you can wherever in the world you are there are people who are dependent on you or who you know who trust your judgment call them and say volunteer first for this kind of cleanup in next Saturday second for door to door conversing of your neighbors that day wake up and knock on their doors and ask them to go and vote and be a citizen monitor an ambassador waiting to count the vote don't go away and ensure that you police your vote appropriately yes let the zoom question come we've had many run ins with zoom questions that didn't okay can you hear me now yes we can hear you come okay this is good evening thank everyone I've listened and I just want to just say thank you for what you are doing thank you also to our incoming president by the grace of the lord for standing in here and I just want to say this I am delighted to be able to encourage him and encourage all of us and not too long ago I was at the airport with my husband and well some people were trying to ask for bribe and he goes we are pretty dense we know that gives this shit we won't take the gift this shit you know that all of them began to we know the collectors see we were it was such a fun was such a great thing about that signs of belonging నేరిఅల్ాలాపౚిెనిందునేరింరి. మపినిరిమాపినే. మనిసికోంద్నిం. మపినికోపౚికనేట్న్టిక్. పినికాలిటలింలిూరికం. నవ� Empire ఱిక్న్చటాంటా అత్ద్చాి glossy సాత్ట? అత్ట్యం నర్న్వెరికే Merci everyone Let's take back our country, in slippery is definitely yes isiac yes, thank you o therapeutic so okay come on please come on tell us who you are where you are calling from hello hao ʾai o the programme is very interesting very celebrated you guys are taking pain to analyze a lot of issues and educate Nigeria I want to raise 2 critical points I think early this week it was on the news that the Labour Party is making efforts with INEC to upload all their agents across the country and the INEC that was about to be closed. So I don't know what efforts you guys have made to resolve that issue. Then number two, what the senior man already said, especially is what we need to drive leadership in this country. The senior man on the other side is just waving the questions, answering the questions. As Nigerians who are in a very precarious situation, we need to look in between the steps. Leadership is sincerity. What people want in this country is leadership. And this set of politicians that are moving with respect for our uncle there, who are taking pains to ensure that this country goes good and has travelled around the world to ensure that things are working. Nigeria has a very fundamental problem. There is monumental poverty. There is hunger. There is educational failure. As I am talking to you in general, to power my house. There is an electricity crisis. All segments of this country is in shambles. So we should be sincere in this whole project. People are committed. That's why you see the colours are called explorers.  They are in an organised clan where things are working. But they are bothered about their relations in Nigeria. Look at the level of killing.  There is no day you listen to news in this country. You have negative news coming out from the system. It's so sad. If this government is going to form in them, I think we should be very sincere. We should be very realistic. We should call up with the options that we will be able to drive this country. I am not bothered about those generations that are living. What of the next generation are children and children? What legacy are we going to put in place for them? These are all the issues that are very important. When you drive on the streets of Nigeria, you see that the roads are bad. You see the hectic situations. You see poverty on everybody's face. Nigeria is not happy. So the man with negative news should be sincere when he is filling out his issues and asking questions. Because this is a very serious issue and we are bothered about it. We have been watching this program since morning. We have not moved out of my house. I have committed to this project. So you guys should be very ready. I trust the process. I also trust the pastor. I trust the elder man there. We should be serious. It would be to be in service serious. Look at the vice president that is the man I met. That is the best vice president who have ever caught in the issue of this country. He is not going to let that do. But you see transparency. You see sensitivity in his focus, in his face. So these are all the issues we should try to move this country to the next level. So the next generation here from Boston and those behind us that are not joining the Yahoo Yahoo will be very serious to get out of the situation. By the way, just an aside thing. If you look, you can see God's hand in this whole thing. You know, in the way that an organic movement of the people found in P2B, you can see the way in Dati Baba Ahmed was found, the kind of person that he is. I think God is ready to get Nigeria going in the right direction. I think we must be thankful. Yeah, I think a lot of people have been praying. And when people pray, God seems to respond and he responds into their hearts. Somebody was calling me from some part of Nigeria today. He said, we need this, we need that. He said, we don't need money. We don't need, nobody is asking for money. He says, I've never seen something like this before. Just send us materials. The people are ready to work. You see, this is time for sincerity. It's time for truth. It's time for honesty. It's time for us to tell ourselves the truth in Nigeria. One of the problems in Nigeria is that we don't tell ourselves the truth. We know good from bad. We know bad from good. But because of our own personal interests, because of our self-centeredness, because of our selfishness, we keep deceiving one another. And then we keep complaining that the country is going down. If you don't want the country to go down, rise up and you speak the truth. Yeah, and one truth we haven't told ourselves now is that it's time for a break.


All right, thanks very much. Say my name is David Kaplan. I'm on the security architecture R&D team at AMD. And part of the goal of our team at AMD is to define and architect new security solutions for AMD hardware. And I'm here today to talk about a few of those new features that we've developed around memory encryption specifically for our x86 chips. So just to overview what we're going to do this afternoon, I'm going to introduce the features that on the technologies that we've developed talk a little bit about the motivation and the details of how the hardware behaves. And I'll also talk a little bit about how Linux can enable these features. Some of my colleagues have recently, actually Monday this week, submitted some RFC patch series regarding these two features. And I'll talk a little bit about what those patches do. So as far as motivation for this goes, certainly we think that memory encryption is an interesting technology and can be used in a variety of cases. But we chose to focus primarily on cloud cases, especially around public IAS clouds. Certainly security is a top concern in that environment. And one of the top threats that is sometimes seen in CSA assessments and the like is around the hypervisor. In clouds today, the hypervisor is of course responsible for enforcing separation between the guests. And it does this typically using what we call logical isolation features, harbor virtualization, page tables, VM intercepts, et cetera. And of course this can potentially break down. There's been a few high profile bugs related to this. And these bugs can be particularly scary since it can allow one VM to potentially compromise another VM oftentimes without the target even knowing that it's being compromised. And so we wanted to see if that's something that we can help address. The second thing that we found from talking to some of our partners and customers is that the traditional trust model of computing, if you will, this idea of a hierarchical trust model, doesn't really work very well for scenarios like public cloud. That is, when you talk to customers of the cloud, they want a sandbox to run their workload. They don't want anyone else to be looking at their data. You talk to the companies running the cloud and oftentimes they will echo a similar sentiment. That is they want to provide the resources but they don't want to be able to see their customers data. They don't like the legal implications of that access and it would be better if they didn't have that visibility. So what we're specifically trying to protect against with the features I'm gonna go through today are two different classes of attacks. The first, I'm calling these user access attacks, these are kind of rogue administrator type attacks, things like scraping the memory of a guest VM. So like someone who has hypervisor privileges scraping the memory of the guest, injecting unauthorized code into a guest VM and potentially exploiting some sort of hypervisor bug to allow cross VM attacks. Certainly hypervisors, if they're written perfectly, this would not be allowed but we want to see if there's some extra layer that we can add on to here to make it more difficult to conduct such an attack. We're also looking at physical access attacks. Now how important this is varies depending on who you talk to but we are also looking at certain things such as physical probing of the DRAM bus on the motherboard, cold boot attacks and some variations thereof. With more people considering non-volatile memory technology like NVDIMS, we think that this can potentially become more important since cold boot attacks can be a lot simpler if you don't even need to look with nitrogen. So what we've done in this technology is the first thing is we've integrated a hardware AES 128 engine into our memory path. So it's in the memory controller and it is able to transparently encrypt and decrypt traffic as it leaves the SOC. We then went and defined two new features what we call secure memory encryption and secure encrypted virtualization that both utilize this engine to provide different security benefits. The SME feature is primarily designed around the physical attack piece and it uses a single key. The SEV feature is designed for those VM isolation scenarios and allows for different keys for different virtual machines on the system and I'll go through the details of how that works. Some highlights about both of these features. So the first is that we have this hardware engine, it's capable of this inline encryption decryption. Because of that, we expect this to have a relatively minimal performance impact and typical workloads. The data inside of the SOCs is not encrypted and so there's no impact there. This essentially amounts to a little bit of extra latency as we go out to DRAM. Another key feature is that we've defined both of these to be enabled and implemented at the operating system in a hypervisor level. So we're not looking to require application changes with any of these. This is all integrated into the same SOC package. That's right. And then the final thing I wanna mention on this is that the encryption keys themselves are stored in the hardware and they're not visible to any of the software running on the x86 cores. We instead use this entity called the AMD Secure Processor which is a physically isolated security subsystem to manage these keys, load them in. We never then send the keys in the clear outside of the SOC. So for anyone who's not familiar, the AMD Secure Processor is a technology that we introduced I think about three years ago. It's present on some of our recent SOCs. It includes this security subsystem which is centered around a 32-bit ARM Cortex A5. It has its own ROM, RAM, some dedicated crypto hardware, keys, the like. We use this to implement a number of security-related tasks in our SOCs. For instance, something that we call Harbor Validated Boot which you guys are I'm sure at the talk this morning where Matt talked about TPM and Static Root of Trust. We use this kind of similar to the Intel Boot Guard feature to help validate the first BIOS code that executes on a platform. We also utilize this in some of our current client parts like notebook parts to implement what's called a firmware TPM so it can emulate a real TPM without needing to put one on the motherboard. We use this technology with these memory encryption features simply because it is isolated, it runs only AMD signed code in it and it has this dedicated hardware that's not accessible from the outside. So the first feature that we have is secure memory encryption. This is a relatively simple feature. As I mentioned, there's one key involved. That key is generated randomly using a hardware random number generator that we have in the security processor. That key is loaded in the memory controllers and it can be used by the operating system simply by setting a new bit in the x86 page table. So we have a new bit that we call the encrypted bit and if that gets set, excuse me, then the accesses to that page will go through the AES engine as they go in and out of the SSE. So because of this, this feature is really designed just for physical attack protection and we do support devices accessing this encrypted memory as well through DMA so there's not much special work that's needed there. So you would read the ciphertext of that page. If you have a page that's marked encrypted and you've written some data out to it, that data is sitting in the DRAM chips, it's encrypted. If you then clear the bit in your page tables and read it back, you'll see the ciphertext. The encryption key for that feature is generated boot time. So it's different every boot but it stays throughout the lifetime of the while the chip is on. So this is a summary of how this feature works. So there's like with most x86 features, there's a new CPU ID. We actually have a set of functions that provide information about the capabilities and there's a new bit that we call memory encryption mode enable which is set at boot time in the sysconfig which is a model specific register and once that is set, then the operating system is free to go and set what we call a cbit encrypted on these pages. Where this bit lives is dynamic and this is partly because there's really no free bits left in the x86 page table. In the example here that's shown, the cbit is bit 47 of the physical address and this is convenient for implementation purposes as it allows anyone including devices to be able to address encrypted memory simply by setting that upper address bit. It's all right. Right, we do not have support for integrity protection on the memory so there's no replay protection in this architecture right now. Right, so keep in mind that this feature, the SME feature is only designed to protect against physical attacks on the DRAM so for device based attacks we're relying on the operating system to use an IMU for instance to restrict what memory a device can DMA to but this feature by itself is not designed to protect against that type of attack. Yeah, one more question. It supports multi-socket since the system address space is consistent. Yeah, so let me explain that a bit more. So in a multi-socket design, we have a number of different memory controllers in there and we also have a number of different security engines that that AMD secure processor and they will all communicate so there is basically a master one which is kind of like your bootstrap processor that will generate the key and then it will send that out to all of the other memory controllers in the design so they're all consistent. Yes, yeah, we have a protocol for that, yes. So we're using an address tweak based mode it's kind of like XEX where we take the physical address and we run it through a hashing function and we do an XOR and crypt XOR to basically just to, you know, so different blocks of data that have the same plain text don't look the same in the cipher text. It's 16 bytes because it's AES, right? And we allow arbitrary access to any region of memory. That's correct if you copy the cipher text. So the second feature that I want to talk about which is a little bit more complicated is what we call secure encrypted virtualization and this is a feature where we have multiple encryption keys in the design and we can associate one key with a hardware virtual machine on the system and so this is what's getting to this idea of changing the trust model of computing. Our long-term goal would be to have a model where the hypervisor schedules guests and runs them side by side but is not able to, doesn't have this full visibility. You know, we're not getting all the way there with our first generation like many things we have to work incrementally but we're taking a big step with this SEV feature and I'll talk a little bit more about the threat model and how that works in a couple of slides. But the basic idea is that we can associate this encryption key with the guests. We also tag all of the code and data associated with that guest throughout the cache hierarchy. So for every line we know who it belongs to and we can restrict access to only that particular guest. That information is then used when the data leaves the SOC to go and encrypt it with the guest specific key and we call this a form of cryptographic isolation so this is intended to be an extra layer on top of the existing logical isolation features like the page tables and importantly it prevents the hypervisor from being able to directly read and write into guest memory spaces which is a big difference from how the trust model works today. We've integrated this with what we call the AMDV technology that's our hardware virtualization support that's already supported in all the major hypervisors and this is an optional feature in there and so we can run a mix of encrypted and non-encrypted virtual machines and that all works fine. The very simplified high level architecture of this looks something like this. You can see in the red there's the keys that are present in the memory controller just shown one here for simplicity and the AMD secure processor that is the one who actually has access to those keys and also has access to some non-volatile storage as well. The secure processor exposes an API and this is an API that is public. We have a spec on our website for it and includes a number of functions related to provisioning the platform, launching guests, doing migration, the like and these APIs are then exposed through the component we call the SEV driver which is a standard X86 driver that allows the hypervisor to call these API functions to manage the guests without having direct access to the keys or the secrets within the guest. The owner of the guest that's shown on the left here is a key player in this architecture as well since the owner of the guest is responsible for managing the guest secrets, managing policy. Policy contains information about what is allowed as far as moving data, migration, debug, things like that and the guest owner will actually set up a secure communication channel using a Diffie-Humman protocol to the AMD secure processor on the SSC and they're able to authenticate the secure processor and then they can use that secure channel to pass information that's related to setting up the VM and things like that. And then of course the guest OS kernel within the VM is ultimately responsible for protecting its own memory and I'll talk a little bit about how it's able to do that as well. To walk through one example of how this architecture works and we have a number of flows like this and this is just one case but this is around we call launching a guest and so launching is taking a guest that of course is initially unencrypted and turning it into an encrypted guest in a secure way. And so the way this flow starts is it will start with a BIOS and potentially OS image that is unencrypted that will be loaded into memory that's presumably not really secret and that any secret information would reside on a virtual encrypted hard disk. Then we set up the secure communication channel. We do the Diffie-Humman exchange and the hypervisor passes the data back and forth between the guest owner which may be the user of the cloud for instance and the secure processor on the node and there is in addition Diffie-Humman there are some certificates that are exchanged here in order to prevent man in the middle type of tax allow the owner to authenticate not only that this is a real AMD processor but that in fact belongs to the cloud that it's expecting it to. The next step is that the hypervisor will ask the secure processor to encrypt the image and so at this point the secure processor will generate a new random key and it will encrypt the image in DRAM of that initial BIOS and OS setup code and as it's doing that encryption it will do a measurement of that that will be used in a little bit to send back to the guest owner. The hypervisor will then set up the guest we call the VMCB, the virtual machine control block with a key selector so we support a certain number of keys and the hypervisor manages these and it puts the appropriate key number into the guest VMCB and it sends what I call this launch receipt back to the user and so the launch receipt is that measurement of the memory as well as some additional platform authentication information and this allows the guest owner to determine if their initial memory image is correct and if it is then they can choose to release say the disk decryption key to that guest using whatever protocol they're typically using and at this point the virtual machine is running it's encrypted, any new data it creates will be out of encrypted memory and it can use its virtual encrypted hard disk like normal. Question. When you say guest owner? Yeah, in this example I think the expectation might be that it could be a service that's hosted at say your company's site that's managing guests out in the cloud just for example. So getting into some more of the details of the hardware architecture so I mentioned about the ACE at a second ago that determines which key number is used because we can have multiple ones and that is actually the tag that we then keep inside the cache hierarchy in the SOC and that ensures that two different guests will never be able to grab each other's data out of the caches even though the data in the caches is itself unencrypted. The next thing is that we have this mechanism to determine if a page is what we call private or shared and this is done using that same page table bit that I mentioned with the SME feature, the C bit. And in the AMD virtualization architecture we have two levels of page tables. We have we call the guest page tables that are of course managed by the guest and the nested page tables managed by the hypervisor. The guest page tables are used to control if this page is considered private or shared. A private page is encrypted with the guest specific key where all the shared page is accessible to the hypervisor. We have a few hardware rules about how this works so the first thing is that any code that's executed is always considered private no matter what the page table might happen to say simply because we don't want someone to be able to put data in there and get the guest to execute it without knowing the encryption key. Similarly, the guest page tables themselves are always forced to be encrypted so that their address space cannot be easily manipulated. For data pages basically everything else we then use this page table bit and there are some restrictions we have. So for instance, DMA has to occur to shared pages. We don't allow any devices in the system to have access to the guest encrypted memory. And obviously the hypervisor similarly does not have access to the guest encrypted memory. So any memory that's gonna be used for either real or fake device communication is marked shared by the guest and it's understood by the guest that that data can be looked at and should be properly encrypted or whatever it needs to do. One question that we sometimes get asked is say, okay, well the hypervisor is the guy who supplies this key index into the VMCB so why couldn't he just Y and put a different key index into there? And there's nothing in the harbor that restricts the hypervisor from doing so. However, we believe that that would be a difficult thing to exploit simply because of the rules that are outlined here. That is if you have one VM that you're trying to attack, you don't know his key. You may have another VM that you can control but if you try to run that VM with the first one's key the hardware is gonna go and it's gonna try to walk this guest page tables using the wrong key which is probably not gonna be very successful. Even if it can somehow it's then gonna try to decrypt his instruction stream using the wrong key which again is probably not gonna be very successful. So we see that as being a burden towards trying to attack another VM on the system if you don't know the key. So just a quick note on the interaction between these two features. As we talked about with SME there is a single option for encrypted or not encrypted with the SEV feature it's a little bit more complicated because we do have the two sets of page tables involved and so we combine both of their CBITs as shown in the table here. Basically the idea is that a guest virtual machine gets first dibs on whether its data is considered private or not. If the guest marks his data is shared by setting the SEVA to zero then we will consult the next level page tables and decide if the memory should be really unencrypted or if it can be encrypted with the hypervisor key. So we can have a system where basically all of the memory is encrypted is just some with a guest key and some with the hypervisor key. And so this is just a quick example of how this address translation works. On this case we're gonna start with a guest virtual address. We'll translate that through the guest page tables and end up with a guest physical address. And in this example we're assuming that the CBIT is the upper address bit 47 which is set here indicating that this would be a private page of memory. The hardware will then remember that CBIT but take it off and take a host virtual address without that bit and translate that through the nested page tables in order to get a host physical address. And then at the end it will put the CBIT back on when it creates a system physical address and this will ensure that this access goes out to memory as a private guest access. So to compare these two features there are clearly a number of differences. The first thing is on the threat model. The SME features we talked about is designed really just to protect against physical attacks. The SEV feature as it's defined here is so far we like to talk about it as protecting against a benign but vulnerable hypervisor. So not a fully malicious hypervisor at this point. We love to get to that but we understand we're not there yet. But we see benign but vulnerable meaning well-intentioned but there may be bugs. Just like with a number of the security features that were discussed at this morning's talk we want to raise the bar. We want to block certain classes of attacks and I believe that that's what we're doing with this SEV feature and going forward we expect to be reducing the attack surface even more. We think that right now the attack surface is being reduced substantially. We'd like to get it even smaller. There's some other differences between these two features as shown here. The way the DMA works is a little bit different. The default behavior is a little bit different with the SME feature. Things are unencrypted by default and then the operating system has to explicitly mark them encrypted. With the SEV feature we'll actually keep everything encrypted until we get basically in a 64 bit mode or 32 bit PAE at which point we'll then give control to the page tables to decide what's encrypted or not. And then of course there is the interaction with the security processor and the SEV feature uses that API set that I mentioned earlier. So to talk to us a little bit about what we've been doing as far as Linux enablement. So there's a number of software components to this feature and if some of them AMD is developing and we expect to ship and then there's some that we're working with the open source community on. The first thing is that the secure processor firmware as I mentioned it's signed by AMD and it just exposes a set of maybe a dozen or so API calls and the spec for all those API calls is on our website. We're also working on the Linux driver that will basically marshal the data back and forth to the secure processor. The secure processor is basically just a PCI device with an MMIO interface so nothing too crazy and we'll use this to call functions. We're also working on the kernel support so they're say there are two patched RFC series that were sent on Monday to the mailing list one related to the SME feature and one related to SEV and we're also working on the open source hypervisors to add support into there as the hypervisors need to use these new API calls in order to start up the VMs, migrate them and so on. So just an overview of what the Linux support that we have added intends to do for the SME feature. The first thing is that it needs to set up the feature and get the kernel encrypted and so we have code during the early boot phase to get into 64 bit mode and then actually encrypt the kernel in place and so we're able to do that by creating new page shape entries that have the C bit set. We can copy the kernel basically on top of itself and encrypt that image and from that point on we set the C bit on all entries. So the patches that we've developed basically try to keep everything encrypted as much as possible. Certainly there may be scenarios where for performance reasons or something you don't want everything encrypted but the set that we've sent up is focused more on protecting against the snooping cold boot type attacks. There is an interface in there for requesting unencrypted pages for special purposes. There's a few exceptions that are listed there as to some of the places that the current code needs to use unencrypted pages including for just kind of bootstrapping the other APs as well as some structures that BIOS creates back when the system was still running unencrypted and that the kernel needs to access. Now the SEV patch set builds on top of the SME one. The SME patch set of course is intended for when the kernel is running natively on bare metal. The SEV patch set is intended for when the kernel is virtualized when it's inside a guest. And in some ways the SEV boot is actually a bit simpler because as we saw in that launch flow earlier the entire BIOS initial OS image gets encrypted before execution actually starts. There's no need to encrypt the kernel in place anymore and so it actually starts executing encrypted code and just gets the page table set up and again sets the SEV it on most of the pages. The main exception being the DMA pages and so the way that this is implemented in the current patch set is that we make use of the software IOTLB in order to bounce buffer the DMA so we allocate a couple megs of memory space there as shared pages and then DMA gets copied through that in order to be shared with the outside world. Similarly existing para virtualization features use a shared page since they need to communicate with the outside. And so in this initial patch set this setup is relatively static. There's not a lot of dynamic changing of pages from encrypted to unencrypted status. A couple other changes that are included in here so as I mentioned there's the driver that marshals the data back and forth between the hypervisor and the security processor. I believe that's included in the patches that were sent up earlier this week. There's also a whole set of hypervisor modifications and I know the KVM side of this was included this week. There's also of course a QMU side we're working on. There are four main areas that we are modifying in the hypervisor. The first thing is this concept of provisioning so that's around establishing trust in the platform and the ownership of that so you can know that you're not being man in the middle. We have this launch process that I kind of walk through about transitioning from unencrypted to an encrypted state along with the measurement. We also have something that we call the send receive functionalities. The idea behind this is that two secure processors on two different nodes can set up a secure communication channel, authenticate each other and this can be used to migrate a guest VM within a cloud and this involves basically one node taking the image in DRAM, reencrypting it with a transport key, setting it over the network and then the other one decrypting it, creating a new key for it, putting it into memory. And this same protocol can be used for things like snapshotting and also presents some interesting use cases related to starting up basically encrypted VM images that you can create an encrypted image say on your local machine, move that into say a cloud environment and then run it from there. So you said what aid? It's always in Cypher. The secure processor has its own local SRAM and so what it will do is it will, when it gets the transported data, it will decrypt that into its local SRAM temporarily and then reencrypt from there into DRAM with whatever new session key it establishes so it's never visible to the X86 processors in the clear and the SRAM is on dye so it's not easily probable. One other point I wanna mention on this is this idea of key slot management. Because the memory keys, memory encryption keys are in the hardware, there is a fixed number of them and so we have support for basically doing over committing of this and being able to swap keys in and out depending on when you're done running particular guests and the like. I can't say we thought of that. Yeah, I'll look at that. In the API we have a few functions. We call activate, deactivate and then we have flush command because the, okay. Sounds well engineered then. We'll look at that, that's a good feedback. Yeah, I think that we try to come with a simpler API set that was more focused around the VM life cycle and these things like migration and launch. They say the number of APIs we're talking about here are very small and we're not really like sealing keys or anything like that, right? The secure process is just creating them. Yeah, no, I understand that. I think that's something that we could look at more and I would certainly say to please take a look at the API set we do have on the website and send us feedback. It's still, I would say, kinda in beta right now so that would be useful feedback for us. You know, one thing that we would need to think about with the TPM is how that would affect kind of the physical attack threat models to if there's anything, because it's an external party that we can't communicate securely between the secure processor which ultimately needs to write into the memory controller, right? And an external TPM. But we can have a further discussion about that. Okay, I believe you. So this is basically the information I have for today. I did wanna give some pointers to where we have more public documentation. We have a white paper, we have one thing we call the AMD64 architecture programmers manual. That's basically the x86 side of the spec so that talks about the CPU ID functions, the MSRs, et cetera. We also have the secure encrypted virtualization key management document which is what I was just referring to with the API spec and we invite comments on that as well as to the RFC patches that I went to the mailing list this week. I do have two other colleagues that are here with me. There's Tom Lendaki and Burgess Singh. They're giving talks at KVM Forum and Zen Summit respectively regarding this feature and the hypervisor support that they've been working on for that so I'd certainly encourage you to seek them out. There's a few of detail questions around that. And yeah, is there one other question? Yeah, sure, that's not to the guest. In which case it doesn't matter whether it's malicious or vulnerable, it's not trusted and therefore you have to treat it the same way so I'm not quite sure what distinction you're making there. Well, so the distinction that we're making is that there's certain, so there's certain threats that we, there's certain types of attacks we can block with the current architecture. For instance, if there's a hypervisor bug that allows an arbitrary read primitive to a guest, we think that this technology is a pretty good mitigation for that since it could just read ciphertext from other guests. However, a malicious hypervisor that is manipulating, that's a register state for the guests or doing things to the page tables and ways to try to extract information from an encrypted guest, we don't have protections for all of those scenarios right now. We certainly are working on addressing that, but so we don't wanna talk about a fully malicious hypervisor that has basically arbitrary code execution and can do whatever it wants to a guest. We're instead looking at things that say, well, it's pretty good, but it may have these kind of bugs that allow some access but maybe not a complete arbitrary execution of code within the hypervisor. So, yeah. Yes. Right, and you know, as I mentioned, we would really like to get to the point where we can claim that there's nothing that the hypervisor can do other than denial of service, but yeah. Sure. I guess since I'm almost out of time, any other questions? Yes. Right, so I mean, we would consider that right now under kind of the more going down a malicious hypervisor route in terms of setting extra intercepts in order to try to extract information from the registers. I would say that that is our primary, the primary thing that we would like to address in the, you know, hopefully very near future because of those kind of scenarios and certainly there can be very important information in the register state of the guest at certain times. You know, we see this right now saying that we're reducing the attack surface because we're taking the entire memory of the guest and we're saying, well, most of that becomes a lot less interesting except for the register state, which is somewhat volatile, but you know, that is the area that we're focusing on the most right now. Right, so we don't have any side channel protection in this architecture. I mean, even with caches, you can, even with the tagging that we have in the caches, there are still potentials for timing-based cache attacks. That hasn't been something that we've treated as in scope for this future. We do have tagging in TLBs already, in fact, to make sure that VMs can't use other VMs translations and things, but as far as the side channel piece, we don't do anything with that. Unfortunately, I'm not allowed to say right now. Sorry. Any other questions? All right, well, thanks very much.


Why does a human being hate? If you look at around us within society today, you find that there are hate campaigns everywhere in the world. In the world of families, there are hate campaigns. In the world of communities, there are hate campaigns. In the world of politics, there are hate campaigns. Each and every one of us, at one stage or another in our life, has been a victim of a campaign of hate. The question psychologically is, why is a human being hated by another human being? As in how many of you in life have wanted to yourself, why does this person hate me? As in what is it that I've done wrong to them that's made them hate me so much? Psychologists have come out with three conclusions as to why it is that a human being shows hatred towards another. The first reason a human shows hatred to another is envy.  The human being sometimes looks at that and wonders to themselves why is it that that person always receives the praise of the people? You find that the Holy Prophet would say envy can be positive or it can be negative. The positive envy is called ghibta. The negative envy is called hasad. Positive envy is when I see a human being receiving accolades and I say, Masha'Allah, look at what they have received. May Allah increase it for them and also give me of what they receive. Correct or no? That person looks at the issue positively. Negative envy is what? Why is it this person's praised all the time? As in why is it that everywhere I go that person in every book is receiving the praise? Why is it this person has wealth? Why is it this person has good looks? Why is it this person has children? Ya Allah, remove them of what they have. The human being from the very origin envy has been the disease that made them cause hatred. If you look at Habil and Qabil, what was it that made Qabil kill Habil? What was it other than envy? The origin of the human being, when it comes to hatred, the first reason is envy. And many of us can be a victim to it as then there's no one in this hall who could turn around and say that I have not envied someone else. But the aim should be that I envy them positively, not negatively. I should envy them that when I see them wealthy, when I see them with children, when I see them happily married, I should turn around and say, Masha Allah, may Allah give them more. Not I turn around and say, Ya Allah, remove them from this virtues. And that's why the Imam himself mentioned by saying, envy devours faith like fire devours wood. Correct or not? Many can come to the mosque and say, I'm a man of iman, I pray, I fast. That whole iman is devoured if you are a person of hasad. And that's why in the Quran, Allah subhanahu wa ta'ala says very clearly that you should always say, women sharia hasad in either hasad. Ya Allah, protect me from the envy of the envious. Therefore the first reason anyone is hated is because of envy. The second reason anyone is hated is because of what? It's because they say the truth in your face and don't stab you in the back. Correct or not? When you look at someone, the second reason they're hated is because they're not scared to say the truth. Even if it means they lose their friends. Imam, Amir al-Mu'min used to have a wonderful line. Do you know what he used to say? The truth has left me no friends. Correct or not? How many of us, when we don't say the truth, everyone loves us? Correct or not? Because they look at us and they say, this is not a man of principle. This person never says the truth. Always they're on the fence. You've heard the people on the community who are always on the fence. They say that food is good with muawiya and salah is good with ali. Correct or not? Those people are always on the fence. Never do they speak the truth. The second type of people who are hated is because they speak the truth. They don't care about the censoring of the censors. When they see oppression, they don't remain silent.  You ridicule me. You take everything away from me. Haq is haq. Where I see the truth, I speak out. That person always has enemies and friends. When a person has enemies and friends, you know he's been a good human being. When a person only has friends, you know that that person has no principles at all. I guarantee you. If you see in your community someone, everyone praises him. No, that person's never had principles. All he does is sit with everyone, laugh with everyone and doesn't say anything. If you see someone in your community who some people rebuke and others love, then know that person's a person of principles. They're not scared to tell you, as Oscar Wilde used to say, a good friend stabs you in the front, not in the back. In your face, they'll tell you because they're not scared. But that person has hatred. Why? Because the powers that be don't like that person's frankness. They hate that person talking the truth. But the reality is, that's the second cause of hatred. The third cause of hatred is what? Is the ignorance of the society results in hatred? If a society has books of literature, doesn't question, doesn't reflect, doesn't contemplate, then that society is sheep, nothing more. All they do is take the book and carry it like the Quran says, the donkey carries luggage. They don't question, is this true? Is it true that Ali ibn Abi Talib is this or Ali ibn Abi Talib is that? No. Whatever my father says, I follow. Whatever his father said, we follow. That builds ignorance, doesn't it? Because that person is not a human being anymore. Their thought process is stagnated. Instead of them sitting, instead of them reflecting, instead of them asking, you find them being human beings who just simply sit there and say, if my fathers believe this, then I believe this as well. Therefore, did these three apply to Ali ibn Abi Talib? No doubt. No doubt.