A Hybrid Approach to Secure Function Evaluation Using SGX
Authors:
Joseph I. Choi,
Dave 'Jing' Tian,
Grant Hernandez,
Christopher Patton,
Benjamin Mood,
Thomas Shrimpton,
Kevin R. B. Butler,
Patrick Traynor
Abstract:
A protocol for two-party secure function evaluation (2P-SFE) aims to allow the parties to learn the output of function $f$ of their private inputs, while leaking nothing more. In a sense, such a protocol realizes a trusted oracle that computes $f$ and returns the result to both parties. There have been tremendous strides in efficiency over the past ten years, yet 2P-SFE protocols remain impractica…
▽ More
A protocol for two-party secure function evaluation (2P-SFE) aims to allow the parties to learn the output of function $f$ of their private inputs, while leaking nothing more. In a sense, such a protocol realizes a trusted oracle that computes $f$ and returns the result to both parties. There have been tremendous strides in efficiency over the past ten years, yet 2P-SFE protocols remain impractical for most real-time, online computations, particularly on modestly provisioned devices. Intel's Software Guard Extensions (SGX) provides hardware-protected execution environments, called enclaves, that may be viewed as trusted computation oracles. While SGX provides native CPU speed for secure computation, previous side-channel and micro-architecture attacks have demonstrated how security guarantees of enclaves can be compromised.
In this paper, we explore a balanced approach to 2P-SFE on SGX-enabled processors by constructing a protocol for evaluating $f$ relative to a partitioning of $f$. This approach alleviates the burden of trust on the enclave by allowing the protocol designer to choose which components should be evaluated within the enclave, and which via standard cryptographic techniques. We describe SGX-enabled SFE protocols (modeling the enclave as an oracle), and formalize the strongest-possible notion of 2P-SFE for our setting. We prove our protocol meets this notion when properly realized. We implement the protocol and apply it to two practical problems: privacy-preserving queries to a database, and a version of Dijkstra's algorithm for privacy-preserving navigation. Our evaluation shows that our SGX-enabled SFE scheme enjoys a 38x increase in performance over garbled-circuit-based SFE. Finally, we justify modeling of the enclave as an oracle by implementing protections against known side-channels.
△ Less
Submitted 6 May, 2019; v1 submitted 3 May, 2019;
originally announced May 2019.
On the internalisation, intraplasmodial carriage and excretion of metallic nanoparticles in the slime mould Physarum polycephalum
Authors:
Richard Mayne,
David Patton,
Ben de Lacy Costello,
Andrew Adamatzky,
Rosemary Camilla Patton
Abstract:
The plasmodium of Physarum polycephalum is a large single cell visible with the naked eye. When inoculated on a substrate with attractants and repellents the plasmodium develops optimal networks of protoplasmic tubes which span sites of attractants (i.e. nutrients) yet avoid domains with a high nutrient concentration. It should therefore be possible to program the plasmodium towards deterministic…
▽ More
The plasmodium of Physarum polycephalum is a large single cell visible with the naked eye. When inoculated on a substrate with attractants and repellents the plasmodium develops optimal networks of protoplasmic tubes which span sites of attractants (i.e. nutrients) yet avoid domains with a high nutrient concentration. It should therefore be possible to program the plasmodium towards deterministic adaptive transformation of internalised nano- and micro-scale materials. In laboratory experiments with magnetite nanoparticles and glass micro-spheres coated with silver metal we demonstrate that the plasmodium of P. polycephalum can propagate the nano-scale objects using a number of distinct mechanisms including endocytosis, transcytosis and dragging. The results of our experiments could be used in the development of novel techniques targeted towards the growth of metallised biological wires and hybrid nano- and micro-circuits.
△ Less
Submitted 22 October, 2013;
originally announced October 2013.