[Resource Topic] 2023/829: TGh: A TEE/GC Hybrid Enabling Confidential FaaS Platforms

Welcome to the resource topic for 2023/829

Title:
TGh: A TEE/GC Hybrid Enabling Confidential FaaS Platforms

Authors: James Choncholas, Ketan Bhardwaj, Ada Gavrilovska

Abstract:

Trusted Execution Environments (TEEs) suffer from
performance issues when executing certain management instructions, such as creating an enclave, context switching in and out of protected mode, and swapping cached pages. This is especially problematic for short-running, interactive functions in Function-as-a-Service (FaaS) platforms, where existing techniques to address enclave overheads are insufficient. We find FaaS functions can spend more time managing the enclave than executing application instructions. In this work, we propose a TEE/GC hybrid (TGh) protocol to enable confidential FaaS platforms. TGh moves computation out of the enclave onto the untrusted host using garbled circuits (GC), a cryptographic construction for secure function evaluation. Our approach retains the security guarantees of enclaves while avoiding the
performance issues associated with enclave management instructions.

ePrint: https://eprint.iacr.org/2023/829

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .