Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability

Amaury Chamayou; Andrew Jeffery; Antoine Delignat-Lavaud; Cedric Fournet; Christoph M. Wintersteiger; Edward Ashton; Fotios Kounelis; Fritz Alder; Heidi Howard; Julien Maffre

Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability

Not yet reviewed by Pith; the record is open.

Re-run · record.json Download PDF Read on arXiv ↗

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2310.11559 v1 pith:7LU77OPA submitted 2023-10-17 cs.CR cs.DC

Heidi Howard , Fritz Alder , Edward Ashton , Amaury Chamayou , Sylvan Clebsch , Manuel Costa , Antoine Delignat-Lavaud , Cedric Fournet

show 7 more authors

Andrew Jeffery Matthew Kerner Fotios Kounelis Markus A. Kuppe Julien Maffre Mark Russinovich Christoph M. Wintersteiger

This is my paper

classification cs.CRcs.DC

keywords integrityapplicationsavailabilityconfidentialityconsortiumhighmultipartycloud

verification ladder T0 review T1 audit T2 compute T3 formal

0 comments

read the original abstract

Confidentiality, integrity protection, and high availability, abbreviated to CIA, are essential properties for trustworthy data systems. The rise of cloud computing and the growing demand for multiparty applications however means that building modern CIA systems is more challenging than ever. In response, we present the Confidential Consortium Framework (CCF), a general-purpose foundation for developing secure stateful CIA applications. CCF combines centralized compute with decentralized trust, supporting deployment on untrusted cloud infrastructure and transparent governance by mutually untrusted parties. CCF leverages hardware-based trusted execution environments for remotely verifiable confidentiality and code integrity. This is coupled with state machine replication backed by an auditable immutable ledger for data integrity and high availability. CCF enables each service to bring its own application logic, custom multiparty governance model, and deployment scenario, decoupling the operators of nodes from the consortium that governs them. CCF is open-source and available now at https://github.com/microsoft/CCF.

Discussion (0). Sign in to comment.

Forward citations

Cited by 1 Pith paper

Reviewed papers in the Pith corpus that reference this work. Sorted by Pith novelty score. Full citation record

Securing Private Federated Learning in a Malicious Setting: A Scalable TEE-Based Approach with Client Auditing
cs.LG 2025-09 conditional novelty 6.0 of 10

The paper shows that an ephemeral TEE planner with randomized client auditing can realize DP-FTRL under a malicious server with small constant client overhead.

Pith tools