QWAMOS runs directly on ARM64 hardware as a Type-1 hypervisor, providing unprecedented security through hardware-enforced isolation.
QWAMOS leverages ARMv8.5-A security features to provide unprecedented memory protection. Each VM has its own isolated address space with hardware-enforced boundaries.
Cryptographic signatures on return addresses
Hardware detection of use-after-free bugs
Protection against JOP/ROP attacks
Hypervisor runs at highest privilege level
0xFFFF_FFFF_FFFF_FFFF ┐
│ Hypervisor (EL2)
0xFFFF_8000_0000_0000 ┤ [Protected]
│
0xFFFF_0000_0000_0000 ┤ Kernel Space
│ [Per-VM Isolated]
0x0000_8000_0000_0000 ┤
│ User Space
│ [Per-App Isolated]
0x0000_0000_0000_0000 ┘
Each VM sees only its own memory
Hardware EPT prevents cross-VM access
IOMMU restricts device DMA
Secure boot starts from hardware fuses
Verify bootloader signature Load secure monitor (EL3) Initialize TrustZone
QWAMOS hypervisor takes control
Setup EL2 exception vectors Initialize memory management Configure IOMMU tables Start crypto engine
Boot minimal Linux system VM
Create VM context Load kernel image Setup virtual devices Start init process
Start compositor and UI
Initialize Wayland Start GPU acceleration Load user session Ready for use
Create custom VMs for specialized workloads or development environments.
from qwamos.vm import VMBuilder
vm = VMBuilder()
.name("dev-environment")
.memory(4096) # 4GB RAM
.cores(2)
.storage(32768) # 32GB
.network("isolated")
.build()
vm.start()
Integrate with QWAMOS security features in your applications.
#include// Generate quantum-safe key qw_key_t *key = qw_keygen_mldsa87(); // Sign data qw_signature_t *sig = qw_sign( data, data_len, key ); // Verify signature bool valid = qw_verify( data, data_len, sig, key );
Define security policies for VMs and applications.
name: banking-app vm_type: android security: network: tor_only storage: encrypted memory: 2048 panic_wipe: true permissions: - camera: deny - microphone: deny - contacts: deny - location: deny
Join our open-source community and contribute to QWAMOS