Accelerating Encrypted Deduplication via SGX
summary
System implements SGXDedup: an SGX-enclave based, server-aided MLE system that moves key generation and proof-of-ownership into enclaves. Claims 131.9× faster key generation and 8.2× faster PoW vs prior OPRF/PoW software, and an overall 8.1× throughput improvement; peak aggregate upload for 10 clients reaches 637 MB/s. Designs cover enclave bootstrap, blinded-key revocation, and speculative encryption; real-world replay shows ~21% upload slowdown versus plaintext dedupe and ~44% download hit due to security processing.
AI-written summary · about
chapters (9)
- 0:00Introduction to deduplication
- 1:23Encrypted deduplication
- 2:21System performance challenges
- 3:41The SDX-Dupe solution
- 4:33SGX architecture overview
- 5:57Design and implementation
- 7:05Overcoming technical hurdles
- 11:02Experimental evaluation
- 14:17Conclusion
related talks
20mSecure and Lightweight Deduplicated Storage via Shielded Deduplication...
17mShieldReduce: Fine-Grained Shielded Data Reduction
28mGenerative AI + Proprietary Data
29mSecuring Data in Motion and at Rest: Quantifying End-to-End Encryption Perfo...
18mSimEnc: A High-Performance Similarity-Preserving Encryption Approach for...
48mSGX Secure Enclaves in Practice: Security and Crypto Review
38mHardware-based KMS Plug-in to Protect Secrets in Kubernetes
54mWhen Good Turns Evil: Using Intel SGX to Stealthily Steal Bitcoins