Building a Quorum of Trust in the Oxide Rack

Oxide and Friends · 4 Apr 2026 · 1h 26m · Episode 7

What this episode covers

Oxide colleagues Andrew Stone and Finch Foner, alongside founders Bryan Cantrill and Adam Leventhal, explain the design and verification of Trust Quorum, the distributed system ensuring the Oxide rack's internal trust. They detail the transition from a 'low rent' initial implementation to a robust protocol using Shamir secret sharing, secure channels, and remote attestation to protect against physical theft. The team discusses overcoming engineering hurdles, including ZFS key rotation via Lua channel programs and using AI tools like Claude to navigate the complex Omicron codebase.

Mentioned

Companies
Oxide
Products
Trust Quorum, Omicron
Chips
NXP LPC55S69
Tools
SPDM, TLS, ZFS, Claude, TLA+
Also
Shamir secret sharing

Other shows on the same ground, closest first.

  • Hackaday Podcast · 1h 08m

    Ep048: Truly Trustworthy Hardware, Glowing Uranium Marbles, Bitstreaming the USB, Chaos of Congress

    Hackaday editors Mike Szczys and Elliot Williams review the week's most interesting hardware hacks, starting with Elliot's experience at the Chaos Communications Congress (36c3), where he showcased a hoverboard-derived electric cargo carrier and discussed various community projects. The hosts then cover a diverse range of builds, including a verifiable hardware platform called 'Be Trusted' designed to prevent tampering, a uranium marble-based random number generator, and a VGA-to-USB adapter reverse-engineered for bitstreaming. They also highlight creative uses of 3D printing for paper pulp molds, a discrete 1-kilopixel camera, and the democratization of FPGAs and AI on the edge.

  • Embedded.fm · 57m

    342: That Girl's Brain

    Jessie Frazelle, Co-Founder and Chief Product Officer at Oxide Computer, explains how the company builds open-source, rack-scale servers for enterprises by adopting hyperscaler-style hardware design. She details the decision to open-source firmware and hardware to eliminate vendor finger-pointing and security vulnerabilities inherent in proprietary BMCs. The discussion covers their use of Rust for firmware and control plane software, power efficiency metrics like PUE, and the challenges of deploying high-density compute in traditional colocation environments.

  • The Amp Hour · 57m

    Finding Hardware Flaws with Laura Abbott

    Laura Abbott, an engineer at Oxide Computer, discusses her accidental discovery of a buffer overflow vulnerability in the ROM update mechanism of the NXP LPC55S69 microcontroller while working on Oxide's server root of trust. She explains how Oxide is rebuilding the server from the ground up with a focus on hardware security, utilizing their open-source operating system Hubris and the Rust programming language to mitigate risks like memory safety issues. The conversation covers the architecture of the server's secure components, including the service processor and TrustZone-M, as well as the challenges of remote hardware debugging and contributing to the Linux kernel community.

  • Unnamed Reverse Engineering Podcast · 1h 01m

    055 - Stacks Of Bricked Chips

    Laura Abbott, a software developer at Oxide Computer, explains how her team reverse engineered the NXP LPC55S69 microcontroller to build a root of trust for their servers. She details discovering an undocumented ROM patching hardware block that allowed privilege escalation, leading to a CVE and a DEF CON presentation. Abbott also discusses her background in Linux kernel development, the transition to Rust for microcontrollers, and the challenges of working with contradictory chip documentation.

  • IoT For All Podcast · 25m

    How IoT Security is Evolving | Crypto Quantique's Shahram Mossayebi

    Shahram Mossayebi, founder and CEO of Crypto Quantique, explains the evolution of IoT security, arguing that the fragmented ecosystem forces OEMs to deal with excessive complexity and cost. He advocates for 'security by design' through 'unforgeable identities' and 'root of trust' mechanisms, such as quantum tunneling, to simplify end-to-end security. Mossayei highlights recent partnerships with Microchip and Andes Technology to integrate these security layers directly into semiconductor hardware, enabling scalable and secure IoT deployments.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Oxide and Friends. The episode itself belongs to its publisher.