A Framework for Building Secure, Scalable, Networked Enclaves

Philipp Winter (Brave Software), Ralph Giles (Brave Software), Alex Davidson (Brave Software), Gonçalo Pestana (Brave Software) | Networks , Privacy

In 2020, Amazon introduced Nitro enclaves—cloud-based secure enclaves that do not share hardware with untrustworthy code, therefore promising resistance against side channel attacks, which have plagued Intel’s SGX for years. While their security properties are attractive, Nitro enclaves are difficult to write code for and are not meant to be used as a networked service, which greatly limits their potential. In this paper, we built a framework that allows for convenient and flexible use of Nitro enclaves by abstracting away complex aspects like remote attestation and end-to-end encryption between an enclave and a remote client. We demonstrate the practicality of our framework by designing and implementing two production-grade systems that solve real-world problems: remotely verifiable IP address pseudonymization and private telemetry. Our practical experience suggests that our framework enables quick prototyping, is flexible enough to accommodate different use cases, and inherits strong security and performance properties from the underlying Nitro enclaves.

View paper

Links

Ready for a better Internet?

Brave’s easy-to-use browser blocks ads by default, making the Web cleaner, faster, and safer for people all over the world.

close

Get ready to Brave the Internet…

You’re just 60 seconds away from a browser that works for you.

If your download didn’t start, .

  1. Wait for the download to complete

  2. Run the installer

  3. Import settings from your old browser

Need help?

Get a better Internet. Everywhere.

Download Brave on your mobile devices.

Download QR code