1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 POSTER: An Open-Source Framework for Developing Heterogeneous Distributed Enclave Applications Gianluca Scopelliti gianluca.scopelliti@ericsson.com imec-DistriNet KU Leuven Leuven, Belgium Sepideh Pouyanrad sepideh.pouyanrad@kuleuven.be imec-DistriNet KU Leuven Leuven, Belgium Job Noorman job.noorman@kuleuven.be imec-DistriNet KU Leuven Leuven, Belgium Fritz Alder fritz.alder@acm.org imec-DistriNet KU Leuven Leuven, Belgium Frank Piessens frank.piessens@kuleuven.be imec-DistriNet KU Leuven Leuven, Belgium Jan Tobias Mühlberg jantobias.muehlberg@kuleuven.be imec-DistriNet KU Leuven Leuven, Belgium ABSTRACT We present an integrated open-source framework to develop, de- ploy, and use event-driven distributed enclaved applications across heterogeneous Trusted Execution Environments (TEEs). Our frame- work strives for strong application authenticity and integrity guar- antees, and optionally confidentiality and availability, while min- imizing the Trusted Computing Base (TCB). For software devel- opers, our framework provides a high level of abstraction over the platform-specific TEE layer that provides isolation, attestation and secure communication amongst distributed application compo- nents, allowing developers to focus of application logic. We provide a notion of event-driven programming to develop distributed en- clave applications in Rust and C for heterogeneous TEEs, including Intel SGX, ARM TrustZone and the open-source Sancus. This het- erogeneity makes our framework uniquely suitable for a broad range of use cases which combine cloud processing, mobile and edge devices, and lightweight sensing and actuation. CCS CONCEPTS • Security and privacy →Trusted computing; Distributed systems security; • Computer systems organization →Sen- sors and actuators; Availability; Maintainability and maintenance. KEYWORDS Trusted Execution; Event-Driven Systems; Intel SGX; ARM Trust- Zone; Sancus ACM Reference Format: Gianluca Scopelliti, Sepideh Pouyanrad, Job Noorman, Fritz Alder, Frank Piessens, and Jan Tobias Mühlberg. 2021. POSTER: An Open-Source Frame- work for Developing Heterogeneous Distributed Enclave Applications. In Proceedings of ACM Conference on Computer and Communications Secu- rity (Submission to ACM CCS 2021). ACM, New York, NY, USA, 3 pages. https://doi.org/10.1145/nnnnnnn.nnnnnnn Submission to ACM CCS 2021, Due 16 August 2021, Coex, Seoul, South Korea 2021. ACM ISBN 978-x-xxxx-xxxx-x/YY/MM...$15.00 https://doi.org/10.1145/nnnnnnn.nnnnnnn 1 INTRODUCTION & PROBLEM Trusted Execution Environments (TEEs) allow an application to execute in a hardware-protected environment called enclave. En- claves are isolated and protected from the rest of the system, ensur- ing strong confidentiality and integrity guarantees. Cryptographic primitives and cryptographic keys, which are unique per enclave and which can only be used by that enclave, enable secure com- munication and remote attestation; the latter is a mechanism to obtain cryptographic proof that an application is running under enclave protection on a specific processor. There are several TEEs available, both in industry and research. Open-source TEEs include Sancus and Keystone; proprietary options are, e.g., SGX for Intel processors, SEV for AMD, TrustZone for ARM, and others [3]. De- veloping distributed applications that execute on heterogeneous TEEs is difficult, in particular for scenarios that combine Internet- of-Things, Edge, and cloud hardware: each TEE requires a platform- specific software implementation, comes with different approaches to key management and attestation, a different Trusted Comput- ing Base (TCB) fo