A secure, tamperproof execution environment is critical for trustworthy network computing. Newly emerging hardware, such as those developed as part of the TCPA and Palladium initiatives, enables operating systems to implement such an environment through Merkle hash trees. We examine the selection of optimal parameters, namely blocksize and tree depth, for Merkle hash trees based on the size of the memory region to be protected and the number of memory updates between updates of the hash tree. We analytically derive an expression for the cost of updating the hash tree, show that there is an optimal blocksize for the leaves of a Merkle tree for a given filesize and update interval that minimizes the cost of update operations, and describe a general method by which the parameters of such a tree can be determined optimally.
In the area of Trusted Computing, hash trees were applied in REF to protect memory regions using the region block size and the number of memory updates as parameters for the hash tree.
Optimal parameter selection for efficient memory integrity verification using Merkle hash trees
Third IEEE International Symposium on Network Computing and Applications, 2004. (NCA 2004). Proceedings.
Third IEEE International Symposium on Network Computing and Applications, 2004. (NCA 2004). Proceedings.
Computer Science