Secure Computation Interfaces

Introduction Applications such as secure Hadoop [1] need to have part of their data and code isolated from privileged software (e.g., the operating system), and they need to be able to establish secure communication channels between the isolated code and remote machines. This document investigates the APIs needed to develop these applications. These APIs isolate the applications from the underlying hardware or software that provides “secure computation” [2, 3, 4, 5]. For example, the applications should work independently of whether isolation is implemented using SGX [6], or using Hypervisor-based isolation techniques [2, 3, 4, 5].