Trusted Execution Environment Replication for Side-Channel Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Trusted Execution Environments (TEEs) like Intel SGX are vulnerable to side-channel attacks, which can leak secret material such as private keys, compromising security provisions that rely on key secrecy.
Innovation Solution
The solution involves replicating TEE applications across multiple secure platforms and using threshold signature schemes and secure multi-party computation to distribute cryptographic operations, ensuring that an adversary must attack all replicas to invalidate security provisions, thereby mitigating the impact of side-channel attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TEE applications run on a single secure platform, then device complexity is low, but security reliability is vulnerable to side-channel attacks
Solution Approach 1:
The application is divided into multiple independent replicas distributed across different secure platforms. Each replica operates independently and can be attacked separately, so compromising one does not compromise the entire system. This segmentation approach transforms a single point of failure into multiple distributed secure execution instances.
Solution Approach 2:
The system transitions from a single-platform execution model to a multi-platform distributed execution model. By adding the dimension of spatial distribution across multiple secure platforms, the system achieves fault tolerance and security against side-channel attacks that would be impossible in a single-platform configuration.
2Reliability
If multiple replicas are deployed across secure platforms, then security against side-channel attacks is improved, but device complexity increases
Solution Approach 1:
Multiple replica executions are merged through a coordination mechanism that collects results from all replicas and verifies consistency. The master application aggregates outputs from all replicas and uses threshold signature schemes to combine cryptographic operations, achieving both security and functional correctness.
Solution Approach 2:
The system implements feedback mechanisms where the master application monitors and verifies results from all replicas. Consistency checks between replicas provide feedback that ensures correct computation while detecting potential attacks or failures, allowing the system to maintain security through continuous verification.
3Reliability
If threshold signature schemes are used across replicas, then security provisions are maintained even if some replicas are compromised, but computational overhead increases
Solution Approach 1:
The system uses threshold signature schemes where only a subset of replicas (the threshold number) needs to participate in the signature generation process. This partial action approach allows the system to maintain security even when some replicas are compromised or slow, as long as the threshold is met. The excessive action of having multiple replicas provides redundancy that can be activated only when needed.
Data Source
AI summary
A method secures a system that includes an application owner, a master application, and a plurality secure platforms. The master application receives from the application owner an application and an input. The application computes a function to calculate an output from the input. The master application deploys replicas of the application on a number of the secure platforms. The master application establishes a secure channel with each of the replicas, and sends at least a portion of the input to the replicas. The master application receives a result calculated by each of the replicas. The result is determined according to the function and the at least the portion of input. The master application determines the output based on the result received from each of the replicas; and sends to the application owner, the output.