TWC: Small: Ascend: Architecture for Secure Computation on Encrypted Data

将计算外包给云有一系列困难的隐私挑战，主要是客户端不能真正信任云或应用软件。加密计算通过让用户向云中的程序指定加密输入并返回加密结果来实现隐私。一种名为Ascend的安全处理器架构的设计和实现正在进行中，它可以保证在不受信任的操作系统（OS）上运行的不受信任的程序所计算的数据的隐私。我们的安全目标是只信任Ascend处理器芯片，并表明即使应用程序和系统软件可能是恶意的，它也可以安全抵御软件攻击和对其引脚的功率分析攻击。我们的性能目标是证明加密计算的执行时间和能量开销是合理的。Ascend保证隐私的关键思想是混淆程序执行：从Ascend芯片的输入/输出和电源引脚的角度来看，不受信任的服务器无法了解任何关于私人用户数据的信息，无论程序运行如何。通过在体系结构机制、安全协议和应用密码学方面的创新，我们希望表明，在一些具有安全意识的应用程序中，只信任硬件而不信任任何软件是可行的，从而大大减少这些应用程序的可信计算基础。模拟器基础设施和硬件原型的发展将使研究成果得到广泛传播。该项目将通过一项创新的高中外展计划，向高中生介绍应用密码学和安全性的研究。

Outsourcing computation to the cloud has a difficult set of privacy challenges, a primary one being that the client cannot really trust cloud or application software. Encrypted computation achieves privacy by having the user specify encrypted inputs to a program in the cloud and returning encrypted results.The design and implementation of a secure processor architecture, called Ascend, that guarantees privacy of data computed upon by untrusted programs and run on an untrusted operating system (OS) is underway. Our security goal is to only trust the Ascend processor chip and show that it is secure against software attacks and power analysis attacks on its pins even though application and system software can be malicious. Our performance goal is to show that execution time and energy overheads of encrypted computation are reasonable. The key idea in Ascend to guarantee privacy is obfuscated program execution: from the perspective of the Ascend chip's input/output and power pins, an untrusted server cannot learn anything about private user data regardless of the program run.Through innovations in architectural mechanisms, security protocols, and applied cryptography, we hope to show that it is viable to only trust hardware and not trust any software in some security-conscious applications, thereby substantially minimizing the trusted computing base for these applications. The development of simulator infrastructure and hardware prototypes will allow the fruits of the research to be widely disseminated. This project will introduce high-school students to research in applied cryptography and security through an innovative high-school outreach program.