Reproduce “Secure Cloud Storage with Client-Side Encryption Using a Trusted Execution Environment” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Marciano da Rocha, Dalton Cézane Gomes Valadares, Angelo Perkusich, Kyller Costa Gorgonio, Rodrigo Tomaz Pagno, Newton Carlos Will
Researchers from Brazilian federal universities developed a secure client-side encryption solution for cloud storage by integrating Intel SGX's data sealing feature into the open-source Cryptomator tool. This enhanced system safeguards encryption keys within a hardware-protected enclave, demonstrating improved data transfer rates compared to the original software-only Cryptomator.
Key insights
- Hardware-backed Trusted Execution Environments (TEEs) like Intel SGX can effectively shift the trust boundary from a potentially compromised software stack to a smaller, hardware-verified Trusted Computing Base.
- Integrating TEEs into existing, widely-used client-side encryption applications is a practical approach to enhance security without requiring users to adopt entirely new workflows or tools.
- The performance overhead associated with JNI and enclave context switches can be offset by the efficiency gains from performing cryptographic operations in native C++ code within the SGX enclave, potentially surpassing software-only implementations.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.