Ekiden: A Platform for Confidentiality-Preserving, Trustworthy, and Performant Smart Contract Execution
arXiv:1804.05141 · doi:10.1109/EuroSP.2019.00023
Abstract
Smart contracts are applications that execute on blockchains. Today they manage billions of dollars in value and motivate visionary plans for pervasive blockchain deployment. While smart contracts inherit the availability and other security assurances of blockchains, however, they are impeded by blockchains' lack of confidentiality and poor performance. We present Ekiden, a system that addresses these critical gaps by combining blockchains with Trusted Execution Environments (TEEs). Ekiden leverages a novel architecture that separates consensus from execution, enabling efficient TEE-backed confidentiality-preserving smart-contracts and high scalability. Our prototype (with Tendermint as the consensus layer) achieves example performance of 600x more throughput and 400x less latency at 1000x less cost than the Ethereum mainnet. Another contribution of this paper is that we systematically identify and treat the pitfalls arising from harmonizing TEEs and blockchains. Treated separately, both TEEs and blockchains provide powerful guarantees, but hybridized, though, they engender new attacks. For example, in naive designs, privacy in TEE-backed contracts can be jeopardized by forgery of blocks, a seemingly unrelated attack vector. We believe the insights learned from Ekiden will prove to be of broad importance in hybridized TEE-blockchain systems.
References in corpus (5)
Cited by in corpus (60)
- Blockchain for 5G and Beyond Networks: A State of the Art Survey
- Ekiden: A Platform for Confidentiality-Preserving, Trustworthy, and Performant Smart Contract Execution
- A Survey on Digital Twins: Architecture, Enabling Technologies, Security and Privacy, and Future Prospects
- Integration of Blockchain and Cloud of Things: Architecture, Applications and Challenges
- Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware
- SoK: Decentralized Exchanges (DEX) with Automated Market Maker (AMM) Protocols
- Security and Privacy on Blockchain
- A comprehensive survey on smart contract construction and execution: paradigms, tools, and systems
- The Security Reference Architecture for Blockchains: Towards a Standardized Model for Studying Vulnerabilities, Threats, and Defenses
- A multi-layered blockchain framework for smart mobility data-markets
- Multi-Objective Eco-Routing for Dynamic Control of Connected & Automated Vehicles
- V0LTpwn: Attacking x86 Processor Integrity from Software
- High-Frequency Trading on Decentralized On-Chain Exchanges
- Private Data Objects: an Overview
- Keystone: An Open Framework for Architecting TEEs
- Teechain: A Secure Payment Network with Asynchronous Blockchain Access
- Denial-of-Service Vulnerability of Hash-based Transaction Sharding: Attack and Countermeasure
- A Survey of Smart Contract Formal Specification and Verification
- TZ4Fabric: Executing Smart Contracts with ARM TrustZone
- HyperService: Interoperability and Programmability Across Heterogeneous Blockchains
- TensorTEE: Unifying Heterogeneous TEE Granularity for Efficient Secure Collaborative Tensor Computing
- MISO: Legacy-compatible Privacy-preserving Single Sign-on using Trusted Execution Environments
- Formalising and verifying smart contracts with Solidifier: a bounded model checker for Solidity
- CeFi vs. DeFi -- Comparing Centralized to Decentralized Finance
- MAGE: Mutual Attestation for a Group of Enclaves without Trusted Third Parties
- Decentralized Translator of Trust: Supporting Heterogeneous TEE for Critical Infrastructure Protection
- Data Confidentiality In P2P Communication And Smart Contracts Of Blockchain In Industry 4.0
- GOAT: GPU Outsourcing of Deep Learning Training With Asynchronous Probabilistic Integrity Verification Inside Trusted Execution Environment
- Privacy-Preserving P2P Energy Market on the Blockchain
- PrivacyGuard: Enforcing Private Data Usage Control with Blockchain and Attested Off-chain Contract Execution
- AQUAREUM: Non-Equivocating Censorship-Evident Centralized Ledger with EVM-Based Verifiable Execution using Trusted Computing and Blockchain
- SilentDelivery: Practical Timed-delivery of Private Information using Smart Contracts
- Towards Blockchain-enabled Searchable Encryption
- Flow: Separating Consensus and Compute
- Cost-Effective Data Feeds to Blockchains via Workload-Adaptive Data Replication
- Security and Privacy for Healthcare Blockchains
- Cross-Chain Sealed-Bid Auctions Using Confidential Compute Blockchains
- Truxen: A Trusted Computing Enhanced Blockchain
- Towards Private On-Chain Algorithmic Trading
- A Decentralized Approach towards Responsible AI in Social Ecosystems
- Golden Grain: Building a Secure and Decentralized Model Marketplace for MLaaS
- Cloak: Transitioning States on Legacy Blockchains Using Secure and Publicly Verifiable Off-Chain Multi-Party Computation
- Federated Learning using Smart Contracts on Blockchains, based on Reward Driven Approach
- Qanaat: A Scalable Multi-Enterprise Permissioned Blockchain System with Confidentiality Guarantees
- DEXO: A Secure and Fair Exchange Mechanism for Decentralized IoT Data Markets
- Better Late than Never; Scaling Computation in Blockchains by Delaying Execution
- Auditable Credential Anonymity Revocation Based on Privacy-Preserving Smart Contracts
- BDTF: A Blockchain-Based Data Trading Framework with Trusted Execution Environment
- NF-Crowd: Nearly-free Blockchain-based Crowdsourcing
- Guardian: symbolic validation of orderliness in SGX enclaves
- encointer -- Local Community Cryptocurrencies with Universal Basic Income
- Trusted And Confidential Program Analysis
- An Offline Delegatable Cryptocurrency System
- Speedster: A TEE-assisted State Channel System
- BBB-Voting: 1-out-of-k Blockchain-Based Boardroom Voting
- Efficient Byzantine Fault Tolerance using Trusted Execution Environment: Preventing Equivocation is only the Beginning
- Powershare Mechanics
- A Tale of Two Trees: One Writes, and Other Reads. Optimized Oblivious Accesses to Large-Scale Blockchains
- CLOAK: A Framework For Development of Confidential Blockchain Smart Contracts
- Blockumulus: A Scalable Framework for Smart Contracts on the Cloud