基于SGX的轻量级两方安全计算协议  

Lightweight Two-party Secure Computation Protocol based on SGX

作　　者：王发星 张驰[1] WANG Faxing;ZHANG Chi(University of Science and Technology of China,Hefei Anhui 230026,China)

机构地区：[1]中国科学技术大学,安徽合肥230026

出　　处：《通信技术》2021年第6期1465-1471,共7页Communications Technology

基　　金：科技部国家重点研发计划(No.2017YFB0802202);国家自然科学基金重点项目(No.U19B2023)。

摘　　要：多方安全计算是一个应用前景广阔的技术,现有方法在恶意参与者下存在较大的性能开销,因此无法支持轻量级用户参与计算。针对两方安全计算,提出使用软件保护扩展(Software Guard Extensions,SGX)作为第三方辅助参与安全计算。双方通过对SGX进行远程验证保证SGX的行为是可预期的。这极大降低了轻量级参与者性能开销并且能够对抗恶意的参与者。经过实际实验发现,轻量级用户可以以极低的开销参与计算,并且没有给另一方用户带来额外的开销。Multi-party secure computation is a promising technology,but the existing methods are unable to support lightweight users under malicious assumption because of its significant overhead.Therefore,for the two-party secure computing,this paper proposes to use SGX as a third party to assist the secure computation.The two parties remotely attest the SGX to ensure it behaves as expected.This greatly reduces the performance overhead of the lightweight party when engaging in secure computation and enables the protocol to defend against malicious parties.The experiment demonstrates that the lightweight party is able to participate secure computation at very low overhead and to prevent malicious parties with overhead approximate that of the semi-honest assumption.

关 键 词：可信硬件 两方安全计算 混淆电路 SGX 

分 类 号：TN929.5[电子电信—通信与信息系统]