ZLiTE: Lightweight Clients for Shielded Zcash Transactions Using Trusted Execution
summary
ZLiTE implements the first SPV-style lightweight client for Zcash shielded transactions by running a modified full node inside an Intel SGX enclave, returning only matched transactions while keeping proofs local. It combines ORAM response buffering and conditional-move wrappers to hide control flow, ships a witness-update protocol so clients refresh Merkle witnesses without leaking queries, and produces a 24-hour scan in a few seconds (ORAM dominates ~50% overhead). Trust model sacrifices only privacy if the CPU root is broken, not funds.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 0:29What is Zcash
- 1:53Lightweight clients
- 4:04What is Trusted Execution
- 5:59Properties of Trusted Execution
- 6:56How does ZLiTE work
- 8:01ZLiTE in detail
- 12:22Protection against leaks
- 15:53Update nodes
- 18:23Security
- 19:54Latency
- 20:55Summary
- 21:57Questions
related talks
50mTrusted Execution Environments Meet the Blockchain
24mEnhancing Protocol Security With ZK-Oracles
43mZondax HW wallet support: from 0 to Hero
14mInsecure Lightning Node? VLS Fixes This
05mCompany Pitches
18mLITESHIELD: Secure Containers via Lightweight, Composable Userspace μKernel...
09mWhy Institutional Custody Breaks on Shielded Chains
34mWallets Working Session