Towards a DSL for hybrid secure computation

TL;DR

This paper introduces a domain-specific language designed for hybrid secure computation, enabling flexible execution of data processing tasks using either fully homomorphic encryption or trusted execution environments based on availability.

Contribution

It presents a novel DSL that simplifies the development of secure computations in hybrid environments combining FHE and TEE, addressing adaptation challenges.

Findings

Enables expressing secure computations abstractly in the DSL

Supports backend execution with FHE or TEE dynamically

Facilitates easier development of hybrid secure applications

Abstract

Fully homomorphic encryption (FHE) and trusted execution environments (TEE) are two approaches to provide confidentiality during data processing. Each approach has its own strengths and weaknesses. In certain scenarios, computations can be carried out in a hybrid environment, using both FHE and TEE. However, processing data in such hybrid settings presents challenges, as it requires to adapt and rewrite the algorithms for the chosen technique. We propose a domain-specific language (DSL) for secure computation that allows to express the computations to perform and execute them using a backend that leverages either FHE or TEE, depending on what is available.