Keystone: An Open Framework for Architecting TEEs

Abstract

Trusted execution environments (TEEs) are being used in all the devices from embedded sensors to cloud servers and encompass a range of cost, power constraints, and security threat model choices. On the other hand, each of the current vendor-specific TEEs makes a fixed set of trade-offs with little room for customization. We present Keystone -- the first open-source framework for building customized TEEs. Keystone uses simple abstractions provided by the hardware such as memory isolation and a programmable layer underneath untrusted components (e.g., OS). We build reusable TEE core primitives from these abstractions while allowing platform-specific modifications and application features. We showcase how Keystone-based TEEs run on unmodified RISC-V hardware and demonstrate the strengths of our design in terms of security, TCB size, execution of a range of benchmarks, applications, kernels, and deployment models.

18 pages

References in corpus (5)

• Ekiden: A Platform for Confidentiality-Preserving, Trustworthy, and Performant Smart Contract Execution
• ZombieLoad: Cross-Privilege-Boundary Data Sampling
• Teechan: Payment Channels Using Trusted Execution Environments
• Privado: Practical and Secure DNN Inference with Enclaves
• MI6: Secure Enclaves in a Speculative Out-of-Order Processor

Cited by in corpus (14)

• SGX-LKL: Securing the Host OS Interface for Trusted Execution
• Survey of Transient Execution Attacks
• HyperService: Interoperability and Programmability Across Heterogeneous Blockchains
• Substra: a framework for privacy-preserving, traceable and collaborative Machine Learning
• Visor: Privacy-Preserving Video Analytics as a Cloud Service
• SESAME: Software defined Enclaves to Secure Inference Accelerators with Multi-tenant Execution
• An Off-Chip Attack on Hardware Enclaves via the Memory Bus
• Agora: A Unified Asset Ecosystem Going Beyond Marketplaces and Cloud Services
• BesFS: A POSIX Filesystem for Enclaves with a Mechanized Safety Proof
• Self-Expiring Data Capsule using Trusted Execution Environment
• BAHULAM: Distributed Data Analytics on Secure Enclaves
• Speedster: A TEE-assisted State Channel System
• CRC: Fully General Model of Confidential Remote Computing
• Building secure distributed applications the DECENT way