Secret Key Recovery in a Global-Scale End-to-End Encryption System
Talkat 18th USENIX Symposium on Operating Systems Design and Implementation (OSDI '24) · 2024-07-10..07-12·
summary
System recovers end‑to‑end encryption keys by splitting keys into shares across three heterogeneous enclave trust domains (deployment uses Intel SGX on Azure, AWS Nitro, AMD SEV on Google Cloud), running rollback‑resistant Raft with hash‑chain checks, super‑majority quorums and a promise round. Deployment uses 7 replicas per domain, tolerates 2 compromised domains and up to 2 physical rollback attacks per domain, serves millions today with capacity for 500M users, costs $0.0025/user/year and averages 365 ms to recover a key.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 1:27Storing secret keys challenges
- 2:51Secure value recovery 3
- 4:16Layered security guarantees
- 7:46Building SVR3 backend
- 10:13Rollback attacks and Raft
- 12:40System evaluation
- 14:26Conclusion & Q&A
related talks
25mSplitting Secrets for Encrypted Backups
50mBuilding Production-Grade End to End Encrypted App...
38mHow to Distribute Keys Securely for 20% of the Web
34mRecoverable, Tamper-resistant Full-disk Encryption at the Distributed Edge
40mConfidential Computing Across Multiple Clouds and Platforms: Project Enarx
38mOne Ring -3 To Secure Them All: Computing with Hardware Enclaves
27mSecurity++: Hide Your Secrets via a Distributed Hardware Security Mod...
15mAccelerating Encrypted Deduplication via SGX