International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Composite Enclaves: Towards Disaggregated Trusted Execution

Authors:
Moritz Schneider , ETH Zurich, Zurich, Switzerland
Aritra Dhar , Huawei Zurich Research Center, Zurich, Switzerland
Ivan Puddu , ETH Zurich, Zurich, Switzerland
Kari Kostiainen , ETH Zurich, Zurich, Switzerland
Srdjan Čapkun , ETH Zurich, Zurich, Switzerland
Download:
DOI: 10.46586/tches.v2022.i1.630-656
URL: https://tches.iacr.org/index.php/TCHES/article/view/9309
Search ePrint
Search Google
Presentation: Slides
Abstract: The ever-rising computation demand is forcing the move from the CPU to heterogeneous specialized hardware, which is readily available across modern datacenters through disaggregated infrastructure. On the other hand, trusted execution environments (TEEs), one of the most promising recent developments in hardware security, can only protect code confined in the CPU, limiting TEEs’ potential and applicability to a handful of applications. We observe that the TEEs’ hardware trusted computing base (TCB) is fixed at design time, which in practice leads to using untrusted software to employ peripherals in TEEs. Based on this observation, we propose composite enclaves with a configurable hardware and software TCB, allowing enclaves access to multiple computing and IO resources. Finally, we present two case studies of composite enclaves: i) an FPGA platform based on RISC-V Keystone connected to emulated peripherals and sensors, and ii) a large-scale accelerator. These case studies showcase a flexible but small TCB (2.5 KLoC for IO peripherals and drivers), with a low-performance overhead (only around 220 additional cycles for a context switch), thus demonstrating the feasibility of our approach and showing that it can work with a wide range of specialized hardware.
BibTeX
@article{tches-2022-31662,
  title={Composite Enclaves: Towards Disaggregated Trusted Execution},
  journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
  publisher={Ruhr-Universität Bochum},
  volume={2022, Issue 1},
  pages={630-656},
  url={https://tches.iacr.org/index.php/TCHES/article/view/9309},
  doi={10.46586/tches.v2022.i1.630-656},
  author={Moritz Schneider and Aritra Dhar and Ivan Puddu and Kari Kostiainen and Srdjan Čapkun},
  year=2022
}