ROTE: Rollback Protection for Trusted Execution
summary
ROTE implements distributed rollback protection for Intel SGX enclaves by having a group of processors cross-store monotonic counters so the only way to break integrity is to reset all participants. The system is built as a library plus a system service, tested on local LANs and geo-distributed AWS nodes, and shows update latency of around 1–2 ms in low-latency networks versus ~162 ms using SGX’s local monotonic counters; those local counters also wear out after ~1M writes. Quorum requires f+1 honest nodes, giving an all-or-nothing rollback guarantee.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:01What is SGX
- 2:56Application Security
- 4:27Summary
- 9:02Main Contributions
- 11:19Existing Solutions
- 12:25Monitoring Counter Service
- 13:14Performance
- 14:53System and attacker model
- 15:52Basic approach
- 17:51Challenges
- 19:30System Architecture
- 22:34Security Analysis
- 23:58Performance Evaluation
- 27:32Lessons Learned
- 29:32Discussion
related talks
50mTrusted Execution Environments Meet the Blockchain
38mOne Ring -3 To Secure Them All: Computing with Hardware Enclaves
14mNimble: Rollback Protection for Confidential Cloud Services
15mSecured Routines: Language-based Construction of Trusted Execution Environments
35mVeracruz: Privacy-preserving mutliparty computation using trusted hardware
19mRethinking Isolation Mechanisms for Datacenter Multitenancy
01h 00mCreating a Spider Goat: Security with Intel CPU Transactional Memory Support
25mDemystifying remote attestation