Pith. sign in

REVIEW 4 major objections 4 minor 126 references

TEE-based Key-Value Stores: a Survey

T0 review · 4 major / 4 minor · reviewed 2026-08-10 · deepseek-v4-flash

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗ Review JSON

Pith's one-line read Every surveyed TEE key-value store fits one five-module architecture

desk verdict Useful modular synthesis of SGX-based KVS designs, but the 'all existing TEE KVSs' completeness claim is unsupported by the paper's methodology. read the letter →

arxiv 2501.03118 v1 pith:RTYH5E3E submitted 2025-01-06 cs.CR cs.DB

Aghiles Ait Messaoud , Sonia Ben Mokhtar , Anthony Simonet-Boulogne This is my paper · ORCID
classification cs.CRcs.DB
keywords TrustedExecutionEnvironmentIntelSGXkey-valuestoreenclaveside-channelattackconfidentialcomputingsurveytaxonomy
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

This paper surveys ten key-value stores that protect data with a Trusted Execution Environment (TEE), a CPU feature that runs code in an isolated enclave. It argues that, despite different designs, all of them follow the same modular architecture: a data-structure module, a disk-access optimization module, a networking module, a synchronization module, and a security module that spans the others. It further finds that every surveyed system runs on Intel SGX's client version, keeps small sensitive metadata inside the enclave, encrypts bulk data outside, and avoids costly context switches with user-space I/O stacks. The survey also reports that none of the ten implements side-channel attack mitigations, leaving them vulnerable to leakage even with SGX protection. The value of the survey is a shared vocabulary and classification that future TEE-based key-value store designers can use to compare and position their systems.

What carries the argument

The load-bearing object is a five-module reference architecture for TEE-based key-value stores, introduced in Section 4. The modules are: the KVS data structure module, which determines what lives inside versus outside the enclave; the disk access and networking optimization modules, which eliminate enclave-exiting syscalls via user-space drivers; the synchronization module, which runs crash-fault-tolerant consensus inside the enclave so that Byzantine behavior is excluded by construction; and the security module, which extends enclave confidentiality and integrity to external data through encryption, Merkle trees, hash chains, counters, and operation IDs. The architecture does the work of a taxonomy: it enables the paper's classifications by data structure, security method, and communication technique, and it exposes the invariant that all ten systems keep a small trusted core inside the enclave and protect a large untrusted exterior cryptographically.

What would settle it

Locating a published TEE-based key-value store that runs on ARM TrustZone or AMD SEV, or one whose architecture cannot be mapped onto the five modules (e.g., a system that keeps no trusted integrity root inside the enclave), would refute the survey's central claim; the same holds if a source-level study shows that one of the ten systems actually departs from the described module split.

Watch

Extended reading notes

Core claim

The paper's central claim is that TEE-based key-value stores are not one-off designs but instances of a common architecture. Each system can be decomposed into a KVS data structure module (hash table, skip list, or log-structured merge tree), a disk access optimization module, a networking optimization module, a synchronization module for distributed stores, and a transverse security module. Across this sample, the authors observe three recurring strategies: sensitive metadata such as keys, pointers, hashes, and encryption keys stays inside the enclave; bulk data such as values and SSTables is encrypted outside the enclave with integrity rooted in an in-enclave Merkle root or MAC key; and I/O is made exitless through asynchronous syscalls or user-space driver kits (SPDK for storage, DPDK for networking) to avoid the 5.5x cost of SGX context switches. The paper also claims that all surveyed systems rely on the client version of Intel SGX, which offers physical-attack integrity protection but only 128 MB of secure memory, and that none of them applies side-channel mitigations.

Load-bearing premise

The load-bearing premise is that the ten surveyed systems are a complete and accurate picture of TEE-based key-value stores; if a TEE-based key-value store built on a different TEE exists, or if any one system is mischaracterized, the survey's taxonomy and its 'all use Intel SGX' finding would not hold.

Editorial extensions

If this is right

  • Designers of future TEE-based key-value stores get a ready-made comparison checklist: data structure choice, disk access strategy, networking strategy, synchronization protocol, and security mechanisms.
  • The finding that all surveyed stores run on client SGX means the field's optimizations are tailored to a 128 MB secure memory; a shift to Scalable SGX or another TEE would change which optimizations matter.
  • Since none of the ten systems applies side-channel mitigations, the surveyed stores are exposed to page-fault, cache, and volume leakage attacks that can reveal key-value pairs even though the enclave itself is intact.
  • Enclave-resident consensus in distributed stores turns Byzantine fault tolerance into crash fault tolerance, reducing the required replica count from 3f+1 to 2f+1 nodes.
  • With Intel deprecating SGX monotonic counters, the freshness of persisted data in future systems will likely depend on software counters, hash chains, or operation IDs, the methods the survey documents.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • Editorial inference: the modular architecture may generalize beyond key-value stores; applying the same five-module checklist to TEE-based SQL databases could show whether the pattern is specific to KVSs or common to all enclave-backed storage.
  • Editorial inference: the absence of side-channel mitigations leaves an obvious design niche: an SGX-based key-value store that layers one of the documented mitigations (e.g., padding query results or data-location randomization) onto the modular architecture while keeping overhead practical.
  • Editorial inference: the paper's reliance on client SGX suggests a concrete test for the taxonomy's limits: if a production TEE-based key-value store built on ARM TrustZone or AMD SEV appears, the claim that all such stores leverage Intel SGX would need revision.
  • Editorial inference: the taxonomy predicts that index placement is a central performance-security trade-off; systems that keep the index in the enclave should pay more secure-memory cost but less per-access authentication overhead than systems like VeritasDB that keep it outside.
Share X Bluesky LinkedIn Reddit HN

Signed reviews

No signed human review yet.

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

4 major / 4 minor

Summary. The manuscript is a survey of trusted-execution-environment-based key-value stores, focusing on Intel SGX systems. It provides background on TEEs and SGX, proposes a modular architecture for SGX-based KVSs (data structure, disk access, networking, synchronization, and security modules), classifies ten surveyed systems according to data access, security, and communication criteria, and discusses side-channel attacks and mitigations. The central claims are that all surveyed TEE-based KVSs use Intel SGX, that they share a common modular design strategy, and that none of the surveyed systems implements side-channel mitigations.

Significance. If the survey's coverage is accepted, it is a useful reference: the modular decomposition in Section 4 is a practical organizing device, Tables 4-6 condense the design space of SGX-based KVSs, and the observation that no surveyed system implements SCA mitigations is a sharp, falsifiable statement about the state of the art. The paper is strongest in its accurate, well-cited descriptions of SGX mechanics and of individual systems such as Speicher, Avocado, and ShieldStore. The main limitation is that the completeness of the surveyed set is asserted rather than demonstrated, which tempers the force of the survey-level generalizations.

major comments (4)
  1. [Section 3, first paragraph] The survey's central completeness claim is not backed by a systematic method. The text states 'All the existing TEE-based KVSs we could survey leverage Intel SGX' and then lists ten systems, but no search protocol, database names, query terms, date range, or explicit inclusion/exclusion criteria are given. The exclusions named (SQL engines and frameworks such as Scone, Gramine, Haven, Panoply, and SGX-LKL) are qualitative, so the set is effectively self-selected. Since Section 4's 'typical architecture' and Section 7's claim that none of the surveyed KVSs implemented SCA mitigations are inductions over this set, the paper should either add a methodology subsection with reproducible search and screening steps or soften the generality claims accordingly.
  2. [Section 2.1.2, Table 1] The legend of Table 1 is self-contradictory: it defines both 'full support' and 'partial support' with the same symbol (✓). This matters because the prose immediately uses the table to conclude that TrustZone lacks reliable integrity/freshness and built-in remote attestation, while the table's check marks suggest support. Use distinct symbols or a separate column, and ensure the table entries match the prose.
  3. [Section 5.2.1, Table 5] The data-separation classification is inconsistent with Section 4.1.1. Table 5 states that index structures are kept inside the enclave for all systems except VeritasDB [108] and Concerto [10], but Section 4.1.1 says ShieldStore [66] keeps the entire hash table outside the enclave. ShieldStore should be listed as another exception, or Section 4.1.1 should be corrected. This is a concrete accuracy issue in a central classification table.
  4. [Section 4.4 / Table 6] The synchronization classification needs clarification. Section 4.4 claims that because enclaves prevent misbehavior, only CFT protocols are needed, and Table 6 classifies Tiks [116] under Raft. However, the cited reference [116] is titled 'Engraft: Enclave-guarded Raft on Byzantine faulty nodes,' which indicates the system is explicitly designed for Byzantine node failures. The survey should reconcile the CFT claim with the cited system's Byzantine-fault-tolerance setting, and should use one consistent name for the system (Tiks vs. Engraft).
minor comments (4)
  1. [Section 4.1.3] The 'Adaptation to SGX' paragraph for Speicher contains the self-reference 'as described in 4.1.3: Adaptation to SGX'; it should refer to the corresponding discussion for Avocado in Section 4.1.2 or restate the partitioning design explicitly.
  2. [Sections 4.3, 5.1, and 7] There are several language and typographical issues: 'On the same way than' in Section 4.3, 'TWo' capitalization in Section 4.3, 'Precursor also leverages uses a hash table put prefer to keep' in Section 5.1, and 'physcial' in Section 7. These should be corrected in a thorough copyedit.
  3. [Section 6.2.2] The name 'OBFUSCURO' is spelled inconsistently as 'OBFUSCRO' later in the same paragraph; use one spelling consistently.
  4. [Section 2.1.2, Table 1] The 'Open source' row for SGX is marked ✓, but the text does not clarify whether this refers to the SDK, the driver stack, or the hardware/firmware implementation; a brief clarification would improve the comparison.

Circularity Check

0 steps flagged · score 0.0 of 10

No significant circularity: the survey synthesizes cited systems and contains no fitted-parameter or self-referential derivation.

full rationale

This is a literature survey rather than a derivation, so there is no fitted parameter, predictive equation, or construction that reduces to its own input. The central taxonomy in Section 4 ("TEE-based KVSs have a typical architecture that encompasses several modules") is an inductive synthesis of the ten cited systems, and the negative claim that "none of the surveyed KVSs employed them" (Sections 3 and 7) is a summary of that surveyed set rather than a quantity derived from a fit. The survey's scope is explicitly bounded: it says "All the existing TEE-based KVSs we could survey leverage Intel SGX" and excludes general-purpose frameworks and SQL databases by stated criteria; any concern about completeness or selection bias is a correctness/coverage risk, not circularity. The only self-citation is reference [7], used in the introduction as one of several examples of TEE usage for privacy-preserving federated learning; it plays no load-bearing role in the taxonomy, classification, or conclusions. No equation, definition, or cited uniqueness theorem is used to force the paper's choices, and no known result is renamed as an organizing principle. The survey's claims are therefore self-contained as a literature review, and the appropriate circularity finding is no significant circularity.

Assumptions & free parameters 0 free parameters · 4 assumptions · 0 invented entities

This is a survey; the ledger contains no fitted parameters or invented entities. The load-bearing assumptions are about the scope and factual accuracy of the surveyed literature, plus the security model of SGX as described by Intel and prior work.

assumptions (4)
  • domain assumption SGX is the only commercially available TEE providing integrity guarantees against physical attacks.
    Used in Section 3 to explain why all surveyed KVSs use Client SGX; based on citation [16], not independently verified in this survey.
  • domain assumption All existing TEE-based KVSs leverage Intel SGX.
    The survey's scope is defined by this claim (Section 3); it limits the survey to SGX systems and supports the title's generality.
  • domain assumption Client SGX offers stronger security (MHT, integrity) than Scalable SGX, which sacrifices freshness/integrity.
    Underpins the Discussion (Section 7) about the trade-off between secure memory size and hardware integrity protection.
  • domain assumption The authors' characterizations of the 10 surveyed KVSs, drawn from the cited papers, are accurate.
    The classification tables (Tables 4, 5, 6) depend on these characterizations; the survey does not re-implement or benchmark any system.

how reviews work

0 comments
Cite this review

Pith. "Pith review of TEE-based Key-Value Stores: a Survey." pith.science (2026). https://pith.science/paper/RTYH5E3E

@misc{pith2026250103118,
  author       = {Pith},
  title        = {Pith review of: TEE-based Key-Value Stores: a Survey},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/RTYH5E3E}},
  note         = {Machine review of arXiv:2501.03118}
}
read the original abstract

Key-Value Stores (KVSs) are No-SQL databases that store data as key-value pairs and have gained popularity due to their simplicity, scalability, and fast retrieval capabilities. However, storing sensitive data in KVSs requires strong security properties to prevent data leakage and unauthorized tampering. While software (SW)-based encryption techniques are commonly used to maintain data confidentiality and integrity, they suffer from several drawbacks. They strongly assume trust in the hosting system stack and do not secure data during processing unless using performance-heavy techniques (e.g., homomorphic encryption). Alternatively, Trusted Execution Environments (TEEs) provide a solution that enforces the confidentiality and integrity of code and data at the CPU level, allowing users to build trusted applications in an untrusted environment. They also secure data in use by providing an encapsulated processing environment called enclave. Nevertheless, TEEs come with their own set of drawbacks, including performance issues due to memory size limitations and CPU context switching. This paper examines the state of the art in TEE-based confidential KVSs and highlights common design strategies used in KVSs to leverage TEE security features while overcoming their inherent limitations. This work aims to provide a comprehensive understanding of the use of TEEs in KVSs and to identify research directions for future work.

Figures

Figures reproduced from arXiv: 2501.03118 by the authors.

Figure 1
Figure 1. Section 2 delves into the TEE concept, SGX implementation, limitations, and versions. Section 3 formalizes the adopted threat model for TEE-based KVSs. Section 4 synthesizes a modular architecture for the sur￾veyed SGX-based KVSs and explains the roles and instantiations of each module. Section 5 classifies SGX-based KVSs based on relevant criteria and implementation strategies. Sec￾tion 6 overviews the problem of s… view at source ↗
Figure 1
Figure 1. Survey flow 2 Background 2.1 Trusted Execution Environments In this section, we define TEEs and provide a comparison between major TEE implementa￾tions with respect to their security features. 2.1.1 Definition TEEs are specialized environments imple￾mented on commodity processors to protect applications (or portions of applications) in a secure environment isolated from other processes and the — potentially maliciou… view at source ↗
Figure 2
Figure 2. High level SGX execution workflow a TEE. It aims to provide confidentiality and integrity for user-level sensitive data and com￾putations, even when the underlying execu￾tion platform (including privileged software) is potentially malicious. SGX allows develop￾ers to split applications into untrusted (non￾sensitive) parts that do not require security properties and trusted (sensitive) parts that do; the trusted part… view at source ↗
Figures from the paper (3 more)
Figure 3
Figure 3. Figure 3: SGX Memory layout decentralizes the attestation protocol, facilitating faster enclave attestation. 2.2.4 Sealing. Sealing [58] allows in-enclave data to be se￾curely stored on persistent storage. The data is encrypted within the enclave using a secret sealing key deriv…
Figure 4
Figure 4. Figure 4: TEE-based Key-value stores generic architecture due to the lack of secure memory space or because of persistency (data exits the enclave boundaries when it is in storage disk). The remaining of this section details the different building blocks and/or implementa￾tions …
Figure 5
Figure 5. Figure 5: Direct storage and direct transfer technologies in SGX-based KVS [PITH_FULL_IMAGE:figures/full_fig_p013_5.png]

Discussion (0). Continue with ORCID to comment.

Reference graph

Works this paper leans on

126 extracted references · 41 canonical work pages

  1. [108]

    IACR Cryptol

    Sinha, R., Christodorescu, M.: Veritasdb: High throughput key-value store with in- tegrity. IACR Cryptol. ePrint Arch. 2018, 251 (2018). URL https://api.semanticscho lar.org/CorpusID:4311947

    2018

  2. [10]

    In: Pro- ceedings of the 2017 ACM International Con- ference on Management of Data, p

    Arasu, A., et al.: Concerto: A high concur- rency key-value store with integrity. In: Pro- ceedings of the 2017 ACM International Con- ference on Management of Data, p. 251–266. New York, NY, USA (2017). DOI 10.1145/30 35918.3064030

    arXiv 2017

  3. [66]

    In: Pro- ceedings of the Fourteenth EuroSys Confer- ence 2019, pp

    Kim, T., et al.: Shieldstore: Shielded in- memory key-value storage with sgx. In: Pro- ceedings of the Fourteenth EuroSys Confer- ence 2019, pp. 1–15 (2019). DOI 10.1145/33 02424.3303951

    arXiv 2019

  4. [116]

    In: Proceed- ings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, p

    Wang, W., et al.: Engraft: Enclave-guarded raft on byzantine faulty nodes. In: Proceed- ings of the 2022 ACM SIGSAC Conference on Computer and Communications Security, p. 2841–2855 (2022). DOI 10.1145/3548606.35 60639

    work page doi:10.1145/3548606.35 2022

  5. [1]

    URL https://www.dpdk.org/

    Dpdk: Data plane development kit (2010). URL https://www.dpdk.org/

    2010

  6. [2]

    URL https://spdk.io/

    Spdk: Storage performance development kit (2015). URL https://spdk.io/

    2015

  7. [3]

    URL https://ww w.intel.com/content/www/us/en/develope r/tools/software-guard-extensions/atte station-services.html

    Remote attestation (2022). URL https://ww w.intel.com/content/www/us/en/develope r/tools/software-guard-extensions/atte station-services.html

    2022

  8. [4]

    ACM Comput

    Acar, A., et al.: A survey on homomorphic encryption schemes: Theory and implementa- tion. ACM Comput. Surv. 51, 1–35 (2018). DOI 10.1145/3214303

    doi:10.1145/3214303 2018

Show all 126 references
  1. [5]

    In: Network and Distributed System Security Symposium 2019 (2019)

    Ahmad, A., Joe, B., Xiao, Y., Zhang, Y., Shin, I., Lee, B.: Obfuscuro: A commodity obfus- cation engine on intel sgx. In: Network and Distributed System Security Symposium 2019 (2019). DOI 10.14722/ndss.2019.23513

    2019

  2. [6]

    Wireless personal communications 114, 295–327 (2020)

    Ahn, J., et al.: Design and implementation of hardware-based remote attestation for a secure internet of things. Wireless personal communications 114, 295–327 (2020). DOI 10.1007/s11277-020-07364-5

    2020 doi

  3. [7]

    In: Proceedings of the 23rd ACM/IFIP International Middle- ware Conference, p

    Ait Messaoud, A., et al.: Shielding feder- ated learning systems against inference at- tacks with arm trustzone. In: Proceedings of the 23rd ACM/IFIP International Middle- ware Conference, p. 335–348 (2022). DOI 10.1145/3528535.3565255 26 Aghiles Ait Messaoud et al

    2022

  4. [8]

    1–7 (2016)

    Al-Houmaily, Y.J., et al.: Two-Phase Commit, pp. 1–7 (2016). DOI 10.1007/978-1-4899-799 3-3 713-2

    2016 doi

  5. [9]

    AMD: Secure encrypted virtualization api ver- sion 0.24: technical preview. Tech. rep., Ad- vanced Micro Devices, Inc. (2020). URL http s://www.amd.com/content/dam/amd/en/doc uments/epyc-technical-docs/programmer-r eferences/55766_SEV-KM_API_Specificatio n.pdf

    2020

  6. [11]

    In: Proceedings of the 12th USENIX Conference on Operating Sys- tems Design and Implementation, p

    Arnautov, S., et al.: Scone: Secure linux con- tainers with intel sgx. In: Proceedings of the 12th USENIX Conference on Operating Sys- tems Design and Implementation, p. 689–703 (2016). URL url={https://www.usenix.org /conference/osdi16/technical-sessions/ presentation/arnautov}

    2016

  7. [12]

    Arora, S., et al.: Proof verification and the hardness of approximation problems. J. ACM 45, 501–555 (1998). DOI 10.1145/278298.278 306

    1998 doi

  8. [13]

    In: Proceedings of the 1st Workshop on System Software for Trusted Execution, pp

    Atamli-Reineh, A., et al.: Analysis of trusted execution environment usage in samsung knox. In: Proceedings of the 1st Workshop on System Software for Trusted Execution, pp. 1–6 (2016). DOI 10.1145/3007788.3007795

    2016

  9. [14]

    Attiya, H., Bar-Noy, A., Dolev, D.: Sharing memory robustly in message-passing systems. J. ACM 42, 124–142 (1995). DOI 10.1145/20 0836.200869

    1995

  10. [15]

    Imperial College London, Tech

    Aublin, P.L., Kelbert, F., O’keeffe, D., Muthukumaran, D., Priebe, C., Lind, J., Krahn, R., Fetzer, C., Eyers, D., Pietzuch, P.: Talos: Secure and transparent tls termination inside sgx enclaves. Imperial College London, Tech. Rep 5 (2017)

    2017

  11. [16]

    Aublin, P.L., et al.: Towards tees with large se- cure memory and integrity protection against hw attacks (2022)

    2022

  12. [17]

    URL https://docs.aws.amazo n.com/kms/latest/cryptographic-details /intro.html

    (A WS), A.W.S.: Aws kms cryptographic de- tails (2018). URL https://docs.aws.amazo n.com/kms/latest/cryptographic-details /intro.html

    2018

  13. [18]

    In: Proceedings of the 17th USENIX Conference on File and Storage Technologies, p

    Bailleu, M., et al.: Speicher: Securing lsm- based key-value stores using shielded execu- tion. In: Proceedings of the 17th USENIX Conference on File and Storage Technologies, p. 173–190 (2019)

    2019

  14. [19]

    In: 2021 USENIX Annual Technical Conference (USENIX ATC 21), pp

    Bailleu, M., et al.: Avocado: A secure in- memory distributed storage system. In: 2021 USENIX Annual Technical Conference (USENIX ATC 21), pp. 65–79 (2021)

    2021

  15. [20]

    In: Proceedings of the 2011 ACM SIGMOD International Conference on Management of Data, p

    Bajaj, S., et al.: Trusteddb: a trusted hard- ware based database with privacy and data confidentiality. In: Proceedings of the 2011 ACM SIGMOD International Conference on Management of Data, p. 205–216 (2011). DOI 10.1145/1989323.1989346

    2011

  16. [21]

    ACM Trans

    Baumann, A., et al.: Shielding applications from an untrusted cloud with haven. ACM Trans. Comput. Syst. 33, 1–26 (2015). DOI 10.1145/2799647

    2015 doi

  17. [22]

    URL https://kecc ak.team/files/NoteSideChannelAttacks.p df

    Bertoni, G., Daemen, J., Peeters, M., Assche, G.V.: Note on side-channel attacks and their countermeasures (2009). URL https://kecc ak.team/files/NoteSideChannelAttacks.p df

    2009

  18. [23]

    In: SysML 2019 (2019)

    Bonawitz, K.A., et al.: Towards federated learning at scale: System design. In: SysML 2019 (2019). DOI 10.48550/arXiv.1902.01046

    2019 doi arXiv

  19. [24]

    In: Proceed- ings of the 11th USENIX Conference on Of- fensive Technologies (2017)

    Brasser, F., et al.: Software grand exposure: Sgx cache attacks are practical. In: Proceed- ings of the 11th USENIX Conference on Of- fensive Technologies (2017). URL https: //www.usenix.org/conference/woot17/w orkshop-program/presentation/brasser

    2017

  20. [25]

    In: Proceedings of the 35th Annual Computer Security Appli- cations Conference, p

    Brasser, F., et al.: Dr.sgx: automated and ad- justable side-channel protection for sgx using data location randomization. In: Proceedings of the 35th Annual Computer Security Appli- cations Conference, p. 788–800 (2019). DOI 10.1145/3359789.3359809

    2019

  21. [26]

    In: Proceedings of the Twenty-Fourth ACM Symposium on Operating Systems Prin- ciples, p

    Braun, B., et al.: Verifying computations with state. In: Proceedings of the Twenty-Fourth ACM Symposium on Operating Systems Prin- ciples, p. 341–357 (2013). DOI 10.1145/2517 349.2522733

    2013 doi

  22. [27]

    In: 2010 IEEE Second In- ternational Conference on Social Computing, pp

    Brickell, E., et al.: Enhanced privacy id from bilinear pairing for hardware authentication and attestation. In: 2010 IEEE Second In- ternational Conference on Social Computing, pp. 768–775 (2010). DOI 10.1109/SocialCom. 2010.118

    2010 doi

  23. [28]

    IBM Research Division, Tech

    Bussani, A., et al.: Trusted virtual domains: Secure foundations for business and it ser- vices. IBM Research Division, Tech. Rep (2005)

    2005

  24. [29]

    Simon and Schus- ter (2013)

    Carlson, J.: Redis in action. Simon and Schus- ter (2013)

    2013

  25. [30]

    In: Proceedings of the Third Sym- posium on Operating Systems Design and Im- plementation, p

    Castro, M., et al.: Practical byzantine fault tolerance. In: Proceedings of the Third Sym- posium on Operating Systems Design and Im- plementation, p. 173–186 (1999). URL https: //www.usenix.org/conference/osdi-99/pr actical-byzantine-fault-tolerance

    1999

  26. [31]

    In: 2014 Third European Workshop on Software De- fined Networks, pp

    Cerrato, I., et al.: Supporting fine-grained net- work functions through intel dpdk. In: 2014 Third European Workshop on Software De- fined Networks, pp. 1–6 (2014). DOI 10.1109/ EWSDN.2014.33

    2014

  27. [32]

    In: 2019 IEEE European Symposium on TEE-based Key-Value Stores : a Survey 27 Security and Privacy (EuroS&P), pp

    Chen, G., et al.: Sgxpectre: Stealing intel se- crets from sgx enclaves via speculative execu- tion. In: 2019 IEEE European Symposium on TEE-based Key-Value Stores : a Survey 27 Security and Privacy (EuroS&P), pp. 142–157 (2019). DOI 10.1109/EuroSP.2019.00020

    2019

  28. [33]

    In: Proceed- ings of the 2017 ACM on Asia Conference on Computer and Communications Security, p

    Chen, S., Zhang, X., Reiter, M.K., Zhang, Y.: Detecting privileged side-channel attacks in shielded execution with d´ ej` a vu. In: Proceed- ings of the 2017 ACM on Asia Conference on Computer and Communications Security, p. 7–18 (2017). DOI 10.1145/3052973.3053007

    2017

  29. [34]

    Cryp- tology ePrint Archive, Paper 2016/086 (2016)

    Costan, V., et al.: Intel sgx explained. Cryp- tology ePrint Archive, Paper 2016/086 (2016). URL https://eprint.iacr.org/2016/086

    2016

  30. [35]

    In: Proceedings of the 25th USENIX Conference on Security Symposium, p

    Costan, V., et al.: Sanctum: minimal hardware extensions for strong software isolation. In: Proceedings of the 25th USENIX Conference on Security Symposium, p. 857–874 (2016)

    2016

  31. [36]

    In: 2018 27th International Conference on Computer Communication and Networks (ICCCN), pp

    Cui, S., et al.: Preserving access pattern pri- vacy in sgx-assisted encrypted search. In: 2018 27th International Conference on Computer Communication and Networks (ICCCN), pp. 1–9 (2018). DOI 10.1109/ICCCN.2018.84873 38

    2018

  32. [38]

    SIGOPS Oper

    DeCandia, G., et al.: Dynamo: Amazon’s highly available key-value store. SIGOPS Oper. Syst. Rev. 41, 205–220 (2007). DOI 10.1145/1323293.1294281

    2007

  33. [39]

    URL https://www.in tel.com/content/www/us/en/developer/ar ticles/community/exploring-tsx-with-sof tware-development-emulator.html

    Dementiev, R.: Exploring intel transactional synchronization extensions with intel software development emulator. URL https://www.in tel.com/content/www/us/en/developer/ar ticles/community/exploring-tsx-with-sof tware-development-emulator.html

  34. [40]

    In: 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI 21), pp

    Erhu, F., et al.: Scalable memory protec- tion in the PENGLAI enclave. In: 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI 21), pp. 275–294 (2021). URL https://www.usenix.o rg/conference/osdi21/presentation/feng

    2021

  35. [41]

    Eskandarian, S., et al.: Oblidb: oblivious query processing for secure databases. Proc. VLDB Endow. 13, 169–183 (2019). DOI 10.14778/3 364324.3364331

    2019

  36. [42]

    In: Proceedings of the Twenty- Third International Conference on Architec- tural Support for Programming Languages and Operating Systems, p

    Evtyushkin, D., et al.: Branchscope: A new side-channel attack on directional branch pre- dictor. In: Proceedings of the Twenty- Third International Conference on Architec- tural Support for Programming Languages and Operating Systems, p. 693–707 (2018). DOI 10.1145/3173162.3173204

    2018

  37. [43]

    ACM Com- put

    Fei, S., et al.: Security vulnerabilities of sgx and countermeasures: A survey. ACM Com- put. Surv. 54, 1–36 (2021). DOI 10.1145/34 56631

    2021 doi

  38. [44]

    URL https://github.com/google/leveldb

    Ghemawat, S., Dean, J.: leveldb (2011). URL https://github.com/google/leveldb

    2011

  39. [45]

    In: 2022 52nd Annual IEEE/IFIP Inter- national Conference on Dependable Systems and Networks (DSN), pp

    Giantsidi, D., Bailleu, M., Crooks, N., Bha- totia, P.: Treaty: Secure distributed transac- tions. In: 2022 52nd Annual IEEE/IFIP Inter- national Conference on Dependable Systems and Networks (DSN), pp. 14–27 (2022). DOI 10.1109/DSN53405.2022.00015

    2022

  40. [46]

    Goldreich, O., et al.: Software protection and simulation on oblivious rams. J. ACM 43, 431–473 (1996). DOI 10.1145/233551.233553

    1996

  41. [47]

    In: Proceedings of the 10th European Work- shop on Systems Security, pp

    G¨ otzfried, J., et al.: Cache attacks on intel sgx. In: Proceedings of the 10th European Work- shop on Systems Security, pp. 1–6 (2017). DOI 10.1145/3065913.3065915

    2017

  42. [48]

    In: Proceed- ings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, p

    Grubbs, P., et al.: Pump up the volume: Practical database reconstruction from vol- ume leakage on range queries. In: Proceed- ings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, p. 315–331 (2018). DOI 10.1145/3243734.3243 864

    2018

  43. [49]

    In: Proceedings of the 26th USENIX Conference on Security Symposium, p

    Gruss, D., et al.: Strong and efficient cache side-channel protection using hardware trans- actional memory. In: Proceedings of the 26th USENIX Conference on Security Symposium, p. 217–233 (2017). URL https://www.usenix .org/conference/usenixsecurity17/techn ical-sessions/pres...

    2017

  44. [50]

    In: Pro- ceedings of the 2019 ACM SIGSAC Confer- ence on Computer and Communications Se- curity, p

    Gui, Z., et al.: Encrypted databases: New vol- ume attacks against range queries. In: Pro- ceedings of the 2019 ACM SIGSAC Confer- ence on Computer and Communications Se- curity, p. 361–378 (2019). DOI 10.1145/3319 535.3363210

    2019 doi

  45. [51]

    In: 2011 IEEE Symposium on Security and Privacy, pp

    Gullasch, D., et al.: Cache games – bringing access-based cache attacks on aes to practice. In: 2011 IEEE Symposium on Security and Privacy, pp. 490–505 (2011). DOI 10.1109/ SP.2011.22

    2011

  46. [52]

    In: Engineering Secure Software and Systems, pp

    Gyselinck, J., et al.: Off-limits: Abusing legacy x86 memory segmentation to spy on enclaved execution. In: Engineering Secure Software and Systems, pp. 44–60 (2018). DOI 10.1007/ 978-3-319-94496-8 4

    2018

  47. [53]

    Han, S., et al.: Veil: A storage and communica- tion efficient volume-hiding algorithm. Proc. ACM Manag. Data 1, 1–27 (2023). DOI 10.1145/3626759

    2023 doi

  48. [54]

    IACR Transactions on Cryp- tographic Hardware and Embedded Systems 2020, 321–347 (2019)

    Huo, T., et al.: Bluethunder: A 2-level di- rectional predictor based side-channel attack against sgx. IACR Transactions on Cryp- tographic Hardware and Embedded Systems 2020, 321–347 (2019). DOI 10.13154/tches.v 2020.i1.321-347

    2019 doi

  49. [55]

    URL https://www.intel.co m/content/www/us/en/developer/articles 28 Aghiles Ait Messaoud et al

    Intel: Runtime encryption of memory with in- tel® total memory encryption–multi-key (in- tel® tme-mk). URL https://www.intel.co m/content/www/us/en/developer/articles 28 Aghiles Ait Messaoud et al. /news/runtime-encryption-of-memory-wit h-intel-tme-mk.html

  50. [56]

    URL https://github.com/intel/int el-sgx-ssl

    Intel: Intel software guard extensions ssl (2017). URL https://github.com/intel/int el-sgx-ssl

    2017

  51. [57]

    URL https: //download.01.org/intel- sgx/latest/li nux-latest/docs/Intel_SGX_Developer_Gui de.pdf

    Intel: Intel software guard extensions (intel sgx) developer guide (2024). URL https: //download.01.org/intel- sgx/latest/li nux-latest/docs/Intel_SGX_Developer_Gui de.pdf

    2024

  52. [58]

    URL https://www.intel.com/conten t/www/us/en/developer/articles/technic al/introduction-to-intel-sgx-sealing.h tml

    Intel, Inc.: Introduction to intel sgx sealing (2016). URL https://www.intel.com/conten t/www/us/en/developer/articles/technic al/introduction-to-intel-sgx-sealing.h tml

    2016

  53. [59]

    In: Proceed- ings of the 2nd Workshop on System Software for Trusted Execution, pp

    Jang, Y., et al.: Sgx-bomb: Locking down the processor via rowhammer attack. In: Proceed- ings of the 2nd Workshop on System Software for Trusted Execution, pp. 1–6 (2017). DOI 10.1145/3152701.3152709

    2017

  54. [60]

    In: International Conference on Application and Theory of Automation in Command and Control Systems, pp

    Jithin, R., Chandran, P.: Virtual machine iso- lation - a survey on the security of virtual machines. In: International Conference on Application and Theory of Automation in Command and Control Systems, pp. 91–102 (2014). DOI 10.1007/978-3-642-54525-2 8

    2014 doi

  55. [61]

    Cryptology ePrint Archive, Pa- per 2020/868 (2020)

    Karantias, K.: Sok: A taxonomy of cryptocur- rency wallets. Cryptology ePrint Archive, Pa- per 2020/868 (2020). URL https://eprint.i acr.org/2020/868

    2020

  56. [62]

    In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, p

    Kellaris, G., et al.: Generic attacks on secure outsourced databases. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, p. 1329–1340 (2016). DOI 10.1145/2976749.2978386

    2016

  57. [63]

    Computers & Security 82, 118–139 (2019)

    Kim, D., et al.: Sgx-lego: Fine-grained sgx controlled-channel attack and its countermea- sure. Computers & Security 82, 118–139 (2019). DOI 10.1016/j.cose.2018.12.001

    2019 doi

  58. [64]

    In: 20th USENIX Conference on File and Storage Technologies (F AST 22), pp

    Kim, I., et al.: A log-structured merge tree- aware message authentication scheme for per- sistent key-value stores. In: 20th USENIX Conference on File and Storage Technologies (F AST 22), pp. 363–380 (2022). URL https: //www.usenix.org/conference/fast22/pre sentation/kim-igjae

    2022

  59. [65]

    In: The Sixth IEEE International Con- ference on Computer and Information Tech- nology (CIT’06), pp

    Kim, S.w., et al.: Sentry: A binary-level inter- position mechanism for trusted kernel exten- sion. In: The Sixth IEEE International Con- ference on Computer and Information Tech- nology (CIT’06), pp. 169–169 (2006). DOI 10.1109/CIT.2006.165

    2006 doi

  60. [67]

    In: 2006 IEEE Symposium on Security and Privacy (S P’06), pp

    King, S., et al.: Subvirt: implementing mal- ware with virtual machines. In: 2006 IEEE Symposium on Security and Privacy (S P’06), pp. 14–327 (2006). DOI 10.1109/SP.2006.38

    2006 doi

  61. [68]

    In: 2019 IEEE Sympo- sium on Security and Privacy (SP), pp

    Kocher, P., et al.: Spectre attacks: Exploiting speculative execution. In: 2019 IEEE Sympo- sium on Security and Privacy (SP), pp. 1–19 (2019). DOI 10.1109/SP.2019.00002

    2019

  62. [69]

    IEEE Design & Test 41, 47–55 (2024)

    Koruyeh, E.M., et al.: Spectre returns! spec- ulation attacks using the return stack buffer. IEEE Design & Test 41, 47–55 (2024). URL https://www.usenix.org/conference/woot 18/presentation/koruyeh

    2024

  63. [70]

    ACM SIGACT News (Distributed Computing Col- umn) 32, 4 (Whole Number 121, December

    Lamport, L.: Paxos made simple. ACM SIGACT News (Distributed Computing Col- umn) 32, 4 (Whole Number 121, December

  64. [71]

    In: Proceedings of the Fifteenth Eu- ropean Conference on Computer Systems, pp

    Lee, D., et al.: Keystone: An open frame- work for architecting trusted execution envi- ronments. In: Proceedings of the Fifteenth Eu- ropean Conference on Computer Systems, pp. 1–16 (2020). DOI 10.1145/3342195.3387532

    2020

  65. [72]

    In: Proceedings of the 26th USENIX Con- ference on Security Symposium, p

    Lee, J., et al.: Hacking in darkness: return- oriented programming against secure enclaves. In: Proceedings of the 26th USENIX Con- ference on Security Symposium, p. 523–539 (2017). URL https://www.usenix.org/confe rence/usenixsecurity17/technical-sessi ons/presentation/lee-jaehyuk

    2017

  66. [73]

    In: Proceedings of the 22nd International Middleware Conference: Indus- trial Track, p

    Li, K., Tang, Y., Zhang, Q., Xu, J., Chen, J.: Authenticated key-value stores with hard- ware enclaves. In: Proceedings of the 22nd International Middleware Conference: Indus- trial Track, p. 1–8 (2021). DOI 10.1145/3491 084.3491425

    2021 doi

  67. [74]

    In: Proceedings of the 13th Annual International Conference on Mobile Systems, Applications, and Services, p

    Li, W., et al.: Adattester: Secure online mobile advertisement attestation using trustzone. In: Proceedings of the 13th Annual International Conference on Mobile Systems, Applications, and Services, p. 75–88 (2015). DOI 10.1145/ 2742647.2742676

    2015

  68. [75]

    Lipp, M., et al.: Meltdown (2018)

    2018

  69. [76]

    In: Proceedings of the Twenti- eth International Conference on Architectural Support for Programming Languages and Op- erating Systems, p

    Liu, C., et al.: Ghostrider: A hardware- software system for memory trace oblivious computation. In: Proceedings of the Twenti- eth International Conference on Architectural Support for Programming Languages and Op- erating Systems, p. 87–101 (2015). DOI 10.1145/2694344.2694385

    2015

  70. [77]

    In: Proceedings of the 26th USENIX Conference on Security Sym- posium, p

    Matetic, S., et al.: Rote: Rollback protection for trusted execution. In: Proceedings of the 26th USENIX Conference on Security Sym- posium, p. 1289–1306 (2017). URL https: //www.usenix.org/conference/usenixsecu rity17/technical-sessions/presentation /matetic

    2017

  71. [78]

    ACM Comput

    Maurer, W.D., et al.: Hash table methods. ACM Comput. Surv. 7, 5–19 (1975). DOI 10.1145/356643.356645 TEE-based Key-Value Stores : a Survey 29

    1975

  72. [79]

    In: Distributed Applications and Inter- operable Systems, pp

    M´ en´ etrey, J., et al.: Attestation mechanisms for trusted execution environments demysti- fied. In: Distributed Applications and Inter- operable Systems, pp. 95–113 (2022). DOI 10.1007/978-3-031-16092-9 7

    2022 doi

  73. [80]

    In: Ad- vances in Cryptology — CRYPTO ’87, pp

    Merkle, R.C.: A digital signature based on a conventional encryption function. In: Ad- vances in Cryptology — CRYPTO ’87, pp. 369–378 (1988). DOI 10.1007/3- 540- 48184 -2 32

    1988 doi

  74. [81]

    In: Proceedings of the 22nd International Middleware Conference, p

    Messadi, I., et al.: Precursor: A fast, client- centric and trusted key-value store using rdma and intel sgx. In: Proceedings of the 22nd International Middleware Conference, p. 1–13 (2021). DOI 10.1145/3464298.3476129

    2021

  75. [82]

    https://rocksdb.org/ (2012)

    Meta, Inc.: Rocksdb: a persistent key-value store for fast storage. https://rocksdb.org/ (2012)

    2012

  76. [83]

    GetMobile: Mobile Comp

    Mo, F., et al.: Ppfl: Enhancing privacy in fed- erated learning with confidential computing. GetMobile: Mobile Comp. and Comm. 25, 35–38 (2022). DOI 10.1145/3529706.3529715

    2022

  77. [84]

    In: Cryptographic Hardware and Embedded Sys- tems – CHES 2017, pp

    Moghimi, A., et al.: Cachezoom: How sgx amplifies the power of cache attacks. In: Cryptographic Hardware and Embedded Sys- tems – CHES 2017, pp. 69–90 (2017). DOI 10.1007/978-3-319-66787-4 4

    2017 doi

  78. [85]

    In: 2014 USENIX Annual Technical Conference (USENIX ATC 14), p

    Ongaro, D., et al.: In search of an understand- able consensus algorithm. In: 2014 USENIX Annual Technical Conference (USENIX ATC 14), p. 305–320 (2014). URL https://www.us enix.org/conference/atc14/technical-ses sions/presentation/ongaro

    2014

  79. [86]

    In: Proceedings of the Twelfth European Conference on Com- puter Systems, p

    Orenbach, M., et al.: Eleos: Exitless os ser- vices for sgx enclaves. In: Proceedings of the Twelfth European Conference on Com- puter Systems, p. 238–253 (2017). DOI 10.1145/3064176.3064219

    2017

  80. [87]

    Acta Informatica 33, 351–385 (1996)

    O’Neil, P., Cheng, E., Gawlick, D., O’Neil, E.: The log-structured merge-tree (lsm-tree). Acta Informatica 33, 351–385 (1996). DOI 10.1007/s002360050048

    1996 doi

  81. [88]

    In: 2013 IEEE Symposium on Secu- rity and Privacy, pp

    Parno, B., Howell, J., Gentry, C., Raykova, M.: Pinocchio: Nearly practical verifiable com- putation. In: 2013 IEEE Symposium on Secu- rity and Privacy, pp. 238–252 (2013). DOI 10.1109/SP.2013.47

    2013 doi

  82. [89]

    In: Proceedings of the 2019 ACM SIGSAC Conference on Com- puter and Communications Security, p

    Patel, S., et al.: Mitigating leakage in secure cloud-hosted data structures: Volume-hiding for multi-maps via hashing. In: Proceedings of the 2019 ACM SIGSAC Conference on Com- puter and Communications Security, p. 79–93 (2019). DOI 10.1145/3319535.3354213

    2019

  83. [90]

    In: 2013 IEEE Sixth International Conference on Cloud Computing, pp

    Pattuk, E., Kantarcioglu, M., Khadilkar, V., Ulusoy, H., Mehrotra, S.: Bigsecret: A secure data management framework for key-value stores. In: 2013 IEEE Sixth International Conference on Cloud Computing, pp. 147–154 (2013). DOI 10.1109/CLOUD.2013.37

    2013 doi

  84. [91]

    ACM Computing Surveys (CSUR) 51, 1–36 (2019)

    Pinto, S., Santos, N.: Demystifying ARM TrustZone: A comprehensive survey. ACM Computing Surveys (CSUR) 51, 1–36 (2019). DOI 10.1145/3291047

    2019 doi

  85. [92]

    In: 2020 IEEE European Symposium on Security and Pri- vacy (EuroS&P), pp

    Poddar, R., et al.: Practical volume-based at- tacks on encrypted databases. In: 2020 IEEE European Symposium on Security and Pri- vacy (EuroS&P), pp. 354–369 (2020). DOI 10.1109/EuroSP48549.2020.00030

    2020

  86. [93]

    In: Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles, p

    Popa, R.A., et al.: Cryptdb: Protecting con- fidentiality with encrypted query processing. In: Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles, p. 85–100 (2011). DOI 10.1145/2043556.2043 566

    2011

  87. [94]

    arXiv preprint arXiv:1908.11143 (2019)

    Priebe, C., Muthukumaran, D., Lind, J., Zhu, H., Cui, S., Sartakov, V.A., Pietzuch, P.: Sgx- lkl: Securing the host os interface for trusted execution. arXiv preprint arXiv:1908.11143 (2019)

    2019 arXiv

  88. [95]

    In: 2018 IEEE Symposium on Security and Pri- vacy (SP), pp

    Priebe, C., Vaswani, K., Costa, M.: En- clavedb: A secure database using sgx. In: 2018 IEEE Symposium on Security and Pri- vacy (SP), pp. 264–278 (2018). DOI 10.1109/ SP.2018.00025

    2018

  89. [96]

    Pugh, W.: Skip lists: A probabilistic alterna- tive to balanced trees. Commun. ACM 33, 668–676 (1990). DOI 10.1145/78973.78977

    1990

  90. [97]

    In: IEEE Trust- Com/BigDataSE/ISPA, pp

    Sabt, M., Achemlal, M., Bouabdallah, A.: Trusted execution environment: What it is, and what it is not. In: IEEE Trust- Com/BigDataSE/ISPA, pp. 57–64 (2015). DOI 10.1109/Trustcom.2015.357

    2015 doi

  91. [98]

    URL https: //www.samsung.com/in/support/mobile-dev ices/samsung-pay-what-is-it-where-is-i t-and-how-to-use-it/

    Samsung: Samsung pay: What is it, where is it, and how to use it? (2022). URL https: //www.samsung.com/in/support/mobile-dev ices/samsung-pay-what-is-it-where-is-i t-and-how-to-use-it/

    2022

  92. [99]

    URL https: //api.semanticscholar.org/CorpusID: 221506554

    Scarlata, V., et al.: Supporting third party at- testation for intel sgx with intel data center attestation primitives (2018). URL https: //api.semanticscholar.org/CorpusID: 221506554

    2018

  93. [100]

    Schwarz, M., et al.: Malware guard extension: abusing intel sgx to conceal cache attacks. pp. 1–20 (2020). DOI 10.1186/s42400-019-0042-y

    2020 doi

  94. [101]

    In: Network and Distributed System Security Symposium 2017 (2017)

    Seo, J., et al.: Sgx-shield: Enabling address space layout randomization for sgx programs. In: Network and Distributed System Security Symposium 2017 (2017). DOI 10.14722/NDS S.2017.23037

    2017

  95. [102]

    In: Proceedings of the 8th ACM European Conference on Computer Systems, p

    Setty, S., Braun, B., Vu, V., Blumberg, A.J., Parno, B., Walfish, M.: Resolving the conflict between generality and plausibility in verified computation. In: Proceedings of the 8th ACM European Conference on Computer Systems, p. 71–84 (2013). DOI 10.1145/2465351.2465 359

    2013

  96. [103]

    with trusted execution environments

    Shepherd, C., et al.: Establishing mutually trusted channels for remote sensing devices 30 Aghiles Ait Messaoud et al. with trusted execution environments. In: Pro- ceedings of the 12th International Conference on Availability, Reliability and Security, pp. 1–10 (2017). DOI 10...

    2017

  97. [104]

    In: 2021 IEEE Security and Privacy Workshops (SPW), pp

    Shepherd, C., et al.: Lira-v: Lightweight re- mote attestation for constrained risc-v de- vices. In: 2021 IEEE Security and Privacy Workshops (SPW), pp. 221–227 (2021). DOI 10.1109/SPW53761.2021.00036

    2021

  98. [105]

    In: Network and Distributed System Security Symposium 2017 (NDSS’17) (2017)

    Shih, M.W., Lee, S., Kim, T., Peinado, M.: T-sgx: Eradicating controlled-channel attacks against enclave programs. In: Network and Distributed System Security Symposium 2017 (NDSS’17) (2017). DOI 10.14722/ndss.2017.2 3193

    2017 doi

  99. [106]

    In: Network and Distributed Sys- tem Security Symposium 2017 (2017)

    Shinde, S., Le, D., Tople, S., Saxena, P.: Panoply: Low-tcb linux applications with sgx enclaves. In: Network and Distributed Sys- tem Security Symposium 2017 (2017). DOI 10.14722/ndss.2017.23500

    2017

  100. [107]

    In: Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security, p

    Shinde, S., et al.: Preventing page faults from telling your secrets. In: Proceedings of the 11th ACM on Asia Conference on Computer and Communications Security, p. 317–328 (2016). DOI 10.1145/2897845.2897885

    2016

  101. [109]

    URL https://www.anandtech.com/sh ow/12533/intel-spectre-meltdown

    Smith, R.: Intel publishes spectre & meltdown hardware plans: Fixed gear later this year (2018). URL https://www.anandtech.com/sh ow/12533/intel-spectre-meltdown

    2018

  102. [110]

    27–42 (2010)

    Standaert, F.X.: Introduction to Side-Channel Attacks, pp. 27–42 (2010). DOI 10.1007/978-0 -387-71829-3 2

    2010 doi

  103. [111]

    In: Proceedings of the 2017 USENIX Conference on Usenix Annual Tech- nical Conference, p

    Tsai, C.C., Porter, D.E., Vij, M.: Graphene- sgx: A practical library os for unmodified ap- plications on sgx. In: Proceedings of the 2017 USENIX Conference on Usenix Annual Tech- nical Conference, p. 645–658 (2017)

    2017

  104. [112]

    Tu, S., Kaashoek, M.F., Madden, S., Zel- dovich, N.: Processing analytical queries over encrypted data. Proc. VLDB Endow. 6, 289–300 (2013). DOI 10.14778/2535573.248 8336

    2013 doi

  105. [113]

    In: Proceed- ings of the 26th USENIX Conference on Se- curity Symposium, p

    Van Bulck, J., et al.: Telling your secrets with- out page faults: stealthy page table-based at- tacks on enclaved execution. In: Proceed- ings of the 26th USENIX Conference on Se- curity Symposium, p. 1041–1056 (2017). URL https://www.usenix.org/conference/usen ixsecurity17/t...

    2017

  106. [114]

    In: Proceed- ings of the 27th USENIX Conference on Se- curity Symposium, p

    Van Bulck, J., et al.: Foreshadow: extract- ing the keys to the intel sgx kingdom with transient out-of-order execution. In: Proceed- ings of the 27th USENIX Conference on Se- curity Symposium, p. 991–1008 (2018). URL https://www.usenix.org/conference/usen ixsecurity18/present...

    2018

  107. [115]

    In: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Com- munications Security, p

    Wang, J., et al.: Practical volume-hiding en- crypted multi-maps with optimal overhead and beyond. In: Proceedings of the 2022 ACM SIGSAC Conference on Computer and Com- munications Security, p. 2825–2839 (2022). DOI 10.1145/3548606.3559345

    2022

  108. [117]

    In: Network and Distributed System Secu- rity Symposium 2019 (2019)

    Weiser, S., et al.: Timber-v: Tag-isolated memory bringing fine-grained enclaves to risc- v. In: Network and Distributed System Secu- rity Symposium 2019 (2019). DOI 10.14722/n dss.2019.23068

    2019

  109. [118]

    SIGARCH Comput

    Weisse, O., et al.: Regaining lost cycles with hotcalls: A fast interface for sgx secure en- claves. SIGARCH Comput. Archit. News 45, 81–93 (2017). DOI 10.1145/3140659.3080208

    2017

  110. [119]

    In: 2015 IEEE Symposium on Se- curity and Privacy, pp

    Xu, Y., et al.: Controlled-channel attacks: De- terministic side channels for untrusted operat- ing systems. In: 2015 IEEE Symposium on Se- curity and Privacy, pp. 640–656 (2015). DOI 10.1109/SP.2015.45

    2015 doi

  111. [120]

    In: Security and Management, pp

    Yang, R., et al.: The value of hardware-based security solutions and its architecture for secu- rity demanding wireless services. In: Security and Management, pp. 509–514 (2006)

    2006

  112. [121]

    In: 2017 IEEE International Conference on Cloud Computing Technology and Sci- ence (CloudCom), pp

    Yang, Z., et al.: Spdk: A development kit to build high performance storage applica- tions. In: 2017 IEEE International Conference on Cloud Computing Technology and Sci- ence (CloudCom), pp. 154–161 (2017). DOI 10.1109/CloudCom.2017.14

    2017 doi

  113. [122]

    In: Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, p

    Yuan, X., Guo, Y., Wang, X., Wang, C., Li, B., Jia, X.: Enckv: An encrypted key-value store with rich queries. In: Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security, p. 423–435 (2017). DOI 10.1145/3052973.3052977

    2017

  114. [123]

    In: Proceedings of the 18th ACM Interna- tional Conference on Computing Frontiers, p

    Zhang, Y., Wang, Z., Cao, J., Hou, R., Meng, D.: Shufflefl: Gradient-preserving federated learning using trusted execution environment. In: Proceedings of the 18th ACM Interna- tional Conference on Computing Frontiers, p. 161–168 (2021). DOI 10.1145/3457388.3458 665

    2021

  115. [124]

    In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communica- tions Security, p

    Zhao, S., et al.: Sectee: A software-based ap- proach to secure enclave architecture using tee. In: Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communica- tions Security, p. 1723–1740 (2019). DOI 10.1145/3319535.3363205

    2019

  116. [125]

    In: TEE-based Key-Value Stores : a Survey 31 14th USENIX Symposium on Networked Sys- tems Design and Implementation (NSDI 17), pp

    Zheng, W., et al.: Opaque: An oblivious and encrypted distributed analytics platform. In: TEE-based Key-Value Stores : a Survey 31 14th USENIX Symposium on Networked Sys- tems Design and Implementation (NSDI 17), pp. 283–298 (2017). URL https://www.usen ix.org/conference/nsdi1...

    2017

  117. [126]

    In: Proceedings of the 2021 Inter- national Conference on Management of Data, p

    Zhou, W., Cai, Y., Peng, Y., Wang, S., Ma, K., Li, F.: Veridb: An sgx-based verifiable database. In: Proceedings of the 2021 Inter- national Conference on Management of Data, p. 2182–2194 (2021). DOI 10.1145/3448016. 3457308

    2021 doi

  118. [2001]

    51–58 (2001)

    pp. 51–58 (2001). URL https://www. microsoft.com/en-us/research/publicati on/paxos-made-simple/

    2001

Pith tools

Reviewed August 10, 2026 · model on record in the stance chip above.