Secured Routines: Language-based Construction of Trusted Execution Environments
Talkat USENIX ATC '19 · on Thursday, 2019-07-11· at 14:40· USENIX ATC Track II: Grand Ballroom VII–IX·
summary
Language extension for Go called GOTEE adds a go secure keyword that compiles selected goroutines and their data into an SGX enclave, using typed deep-copy channels for cross-domain calls. The compiler auto-extracts dependencies and repackages enclaves into a .enclaves ELF section. Microbenchmarks show 5.2x throughput and 2.3x latency wins over the Intel SGX SDK (2.7x on getuid). TLS key handling runs at 88% native handshakes; a go-ethereum keystore prototype takes a day and ~500 lines and fits in a ~4 MB enclave.
AI-written summary · about
chapters (17)
- 0:00Introduction
- 0:20Trusted Execution Environments
- 0:50Performance Security Usability Implications
- 1:37Secured Routines
- 1:49GoatKey
- 2:07Goroutine
- 2:28Compiler
- 2:51Pipeline
- 3:32Compile
- 4:02executable
- 5:07extension
- 5:43deep copy
- 6:27system calls
- 6:38channels
- 6:53runtime cooperation
- 7:52Evaluation
- 11:58Questions
related talks
32mSecure Container with SGX: Protecting Secret in Cloud Environment
39mConfidential computing with Go
27mHasTEE: Programming Trusted Execution Environments with Haskell
32mSecure Container with SGX: Protecting Secret in Cloud Environment
38mOne Ring -3 To Secure Them All: Computing with Hardware Enclaves
36mAttacking & Defending Kubernetes TEE Enclaves in Critical Infrastructure
35mBringing Intel SGX to the Rust Ecosystem
50mTrusted Execution Environments Meet the Blockchain