A secure processor architecture for encrypted computation on untrusted programs
Name
Devadas_A secure.pdf
Size
1.8 MB
Format
Adobe PDF
Checksum (MD5)
66c57b08fc18895b14224495625178bd
Author(s) • •
Dijk, Marten van
Devadas, Srinivas
Fletcher, Christopher Wardlaw
Date Issued
October 2012
Journal
Proceedings of the seventh ACM workshop on Scalable trusted computing (STC '12)
Publisher
Association for Computing Machinery (ACM)
Citation
Christopher W. Fletcher, Marten van Dijk, and Srinivas Devadas. 2012. A secure processor architecture for encrypted computation on untrusted programs. In Proceedings of the seventh ACM workshop on Scalable trusted computing (STC '12). ACM, New York, NY, USA, 3-8.
Version
Author's final manuscript
Abstract
This paper considers encrypted computation where the user specifies encrypted inputs to an untrusted program, and the server computes on those encrypted inputs. To this end we propose a secure processor architecture, called Ascend, that guarantees privacy of data when arbitrary programs use the data running in a cloud-like environment (e.g., an untrusted server running an untrusted software stack).
The key idea to guarantee privacy is obfuscated instruction execution; Ascend does not disclose what instruction is being run at any given time, be it an arithmetic instruction or a memory instruction. Periodic accesses to external instruction and data memory are performed through an Oblivious RAM (ORAM) interface to prevent leakage through memory access patterns. We evaluate the processor architecture on SPEC benchmarks running on encrypted data and quantify overheads.
MIT Department
Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory
Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Terms of Use
Creative Commons Attribution-Noncommercial-Share Alike
Persistent DSpace Link
DOI of Published Version
https://doi.org/10.1145/2382536.2382540