Encrypted Data Processing
Jessica Tseng, Gianfranco Bilardi, Kattamuri Ekanadham, Manoj Kumar,, Jose Moreira, P. C. Pattnaik

TL;DR
This paper introduces EDAP, a general-purpose architecture for confidential computing that ensures data privacy and integrity without burdening application developers or requiring system trust, with minimal performance impact.
Contribution
It presents a novel EDAP architecture that guarantees data confidentiality and authenticity in untrusted hardware environments without added developer or system overhead.
Findings
Average 6% performance slowdown with encryption engine placement
EDAP guarantees data confidentiality in untrusted hardware
Suitable for modern cloud confidential computing environments
Abstract
In this paper, we present a comprehensive architecture for confidential computing, which we show to be general purpose and quite efficient. It executes the application as is, without any added burden or discipline requirements from the application developers. Furthermore, it does not require the trust of system software at the computing server and does not impose any added burden on the communication subsystem. The proposed Encrypted Data Processing (EDAP) architecture accomplishes confidentiality, authenticity, and freshness of the key-based cryptographic data protection by adopting data encryption with a multi-level key protection scheme. It guarantees that the user data is visible only in non-privileged mode to a designated program trusted by the data owner on a designated hardware, thus protecting the data from an untrusted hardware, hypervisor, OS, or other users' applications. The…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsSecurity and Verification in Computing · Cloud Data Security Solutions · Distributed systems and fault tolerance
