Phone Kernel Development at Purism

• About
• Latest Posts

Randy Siegel

Government and Business Development at Purism, SPC

Latest posts by Randy Siegel (see all)

• A Secure Foundry for Government Mobile Computing Needs - September 12, 2024
• Flipping the Script: Exploring New Paradigms in Secure Mobile Computing - August 22, 2024
• Phone Kernel Development at Purism - August 19, 2024

Smartphone Kernels – The Heartbeat of the Operating System

At its core, the kernel is the fundamental layer of the operating system, acting as a bridge between the hardware and software. It manages system resources, handles memory allocation, and facilitates communication between applications and the hardware. Without a robust and efficient kernel, even the most advanced smartphone would struggle to perform basic tasks.

Security and Privacy: The Kernel’s Guardianship

In today’s digital age, security and privacy are paramount. The kernel is a critical line of defense against malicious attacks and vulnerabilities. It enforces security policies, manages permissions, and ensures that applications operate within their designated boundaries. At Purism, where our mission is to provide privacy-respecting devices, the kernel’s role in safeguarding user data cannot be overstated. A well-implemented kernel can mitigate risks and protect against exploits that could compromise sensitive information.

Performance and Efficiency: The Kernel’s Optimization

The kernel is also instrumental in optimizing the performance and efficiency of a smartphone. It manages multitasking, ensuring that applications run smoothly without draining the battery or overloading the processor. This delicate balance is crucial for delivering a user experience that is both responsive and energy-efficient. We have history showcasing how kernel optimizations significantly enhance the performance of devices, making them more reliable and user-friendly. The primary example is our earliest versions of the Librem 5 phone did not support suspend, which means the kernel keeps the CPU on even when not needed, wasting lots of power.  Enabling suspend doubles the battery life, and we brought this support to all devices with a software update.

Innovation and Flexibility: The Kernel’s Foundation

Innovation in mobile technology often hinges on the flexibility of the kernel. It provides the foundation upon which new features and functionalities are built. A modular and customizable kernel allows developers to experiment and innovate, pushing the boundaries of what is possible in mobile computing.

Security Elements

Kernel-level security is a critical aspect of modern smartphone operating systems, ensuring that the core functions of the device are protected from malicious attacks and vulnerabilities. Here are some key elements of kernel-level security:

1. Memory Protection: The kernel enforces memory protection to prevent unauthorized access to critical system memory. This includes techniques like address space layout randomization (ASLR) and data execution prevention (DEP) to make it harder for attackers to exploit vulnerabilities.
2. Process Isolation: The kernel isolates processes from each other, ensuring that one compromised application cannot affect others. This is achieved through mechanisms like user-based permissions and secure inter-process communication (IPC).
3. Access Control: The kernel manages access to hardware resources and sensitive data. Tools like filesystem permissions, access control lists (ACLs), and mandatory access control (MAC) policies can control access.
4. Attack Surface Reduction: By minimizing the number of entry points and removing unnecessary code, the kernel reduces the potential attack surface. This includes disabling or restricting features that are not essential for the device’s operation.
5. Regular Updates and Patching: Keeping the kernel up-to-date with the latest security patches is crucial. This helps to address newly discovered vulnerabilities and improve overall security.

Purism’s Approach to Kernel Development

Purism takes a unique approach to kernel development, focusing on privacy, security, and freedom. Here are some ways Purism differentiates itself:

1. Upstream-First Development: Purism follows an upstream-first approach, meaning they contribute their changes directly to the upstream projects like the Linux kernel, GNOME, and Debian. This ensures that our improvements benefit the broader open-source community and reduces the maintenance burden of specialized forks.
2. PureOS: Purism’s operating system, PureOS, is based on the Linux kernel and adheres to strict free software principles. It is endorsed by the Free Software Foundation and focuses on providing a secure and privacy-respecting environment.
3. Custom Kernel Patches: Purism applies general kernel patches to enhance user experience and security. These patches are designed to improve performance, fix vulnerabilities, and ensure compatibility with their hardware.
4. Collaborative Development: Purism actively collaborates with upstream projects and the open-source community. This collaborative approach helps them stay aligned with the latest developments and security practices in the open-source ecosystem.

By focusing on these principles, Purism aims to provide a secure, privacy-respecting, and user-friendly operating system for their devices – many of which feature Made in USA Electronics.

Purism Products and Availability Chart

	Model	Status	Lead Time
	Librem Key (Made in USA)	In Stock ($59+)	10 business days	Learn More Buy Now
	Librem 5	In Stock ($699+) 3GB/32GB	10 business days	Learn More Buy Now
	Librem 5 COMSEC Bundle	In Stock ($1299+) Qty 2; 3GB/32GB	10 business days	Learn More Buy Now
	Liberty Phone (Made in USA Electronics)	Backorder ($1,999+) 4GB/128GB	Estimated delivery date pending	Learn More Buy Now
	Librem 5 + SIMple (3 GB Data)	In Stock ($99/mo)	10 business days	Learn More Buy Now
	Librem 5 + SIMple Plus (5 GB Data)	In Stock ($129/mo)	10 business days	Learn More Buy Now
	Librem 5 + AweSIM (Unlimited Data)	In Stock ($169/mo)	10 business days	Learn More Buy Now
	Librem 11	Backorder ($999+) 8GB/1TB	Estimated delivery date pending	Learn More Buy Now
	Librem 14	In Stock ($1,370+)	10 business days	Learn More Buy Now
	Librem Mini	Backorder ($799+)	Estimated delivery mid-October	Learn More Buy Now
	Librem Server	In Stock ($2,999+)	45 business days	Learn More Buy Now