Veracruz: Privacy-preserving mutliparty computation using trusted hardware
summary
Veracruz is a working prototype that runs secret programs on secret inputs inside WebAssembly sandboxes hosted in trusted execution environments, using TLS terminated inside the enclave and remote attestation to bind a self‑signed enclave key to a verified platform identity. It targets Intel SGX, Arm TrustZone (QEMU) and AWS Nitro Enclaves, is mostly Rust, and uses a proxy attestation service to unify differing attestation protocols. Limitations: SGX ~96MB usable, TrustZone demo is software‑only ~22MB, interpreter performance is slow and JIT work is ongoing.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:12What is Veracruz
- 6:13How it works
- 8:04Arm Trustzone
- 14:40Transport Security
- 19:15hybrid proxy data station
- 22:00webassembly
- 26:32future work
- 29:28QA
related talks
40mConfidential Computing Across Multiple Clouds and Platforms: Project Enarx
38mEnarx for Confidential Computing
38mOne Ring -3 To Secure Them All: Computing with Hardware Enclaves
42mSponsored Session: Confidential Computing - New Capabilities for New Workloads- 42mSponsored Session: Confidential Computing - New Capabilities for New Workloads
40mConfidential Computing and Privacy-Enhancing Technologies - The Landscape
35mDon't Trust, Attest: Enclaves as a Trust-Minimization Tool for Bitcoin Apps
53mEnarx - secured, attested execution on any cloud