Eric Chen and Alexander Thomas and Hanming Lu and William Mullen and Jeffery Ichnowski and Rahul Arya and Nivedha Krishnakumar and Ryan Teoh and Willis Wang and Anthony D. Joseph and John D. Kubiatowicz

EECS Department, University of California, Berkeley

Technical Report No. UCB/EECS-2022-232

October 21, 2022

http://www2.eecs.berkeley.edu/Pubs/TechRpts/2022/EECS-2022-232.pdf

We propose a federated Function-as-a-Service (FaaS) execution model that provides secure and stateful execution in both Cloud and Edge environments. The FaaS workers, called Paranoid Stateful Lambdas (PSLs), collaborate with one another to perform large parallel computations. We exploit cryptographically hardened and mobile bundles of data, called DataCapsules, to provide persistent state for our PSLs, whose execution is protected using hardware-secured TEEs. To make PSLs easy to program and performant, we build the familiar Key-Value Store interface on top of DataCapsules in a way that allows amortization of cryptographic operations. We demonstrate PSLs functioning in an edge environment running on a group of Intel NUCs with SGXv2.

As described, our Secure Concurrency Layer (SCL), provides eventually-consistent semantics over written values using untrusted and unordered multicast. All SCL communication is encrypted, unforgeable, and private. For durability, updates are recorded in replicated DataCapsules, which are append-only cryptographically-hardened blockchain with confidentiality, integrity, and provenance guarantees. Values for inactive keys are stored in a log-structured merge-tree (LSM) in the same DataCapsule. SCL features a variety of communication optimizations, such as an efficient message passing framework that reduces the latency up to 44x from the Intel SGX SDK, and an actor-based cryptographic processing architecture that batches cryptographic operations and increases throughput by 81x.

---

BibTeX citation:

@techreport{Chen:EECS-2022-232,
    Author= {Chen, Eric and Thomas, Alexander and Lu, Hanming and Mullen, William and Ichnowski, Jeffery and Arya, Rahul and Krishnakumar, Nivedha and Teoh, Ryan and Wang, Willis and Joseph, Anthony D. and Kubiatowicz, John D.},
    Title= {SCL: A Secure Concurrency Layer For Paranoid Stateful Lambdas},
    Year= {2022},
    Month= {Oct},
    Url= {http://www2.eecs.berkeley.edu/Pubs/TechRpts/2022/EECS-2022-232.html},
    Number= {UCB/EECS-2022-232},
    Abstract= {We propose a federated Function-as-a-Service (FaaS) execution model that provides secure and stateful execution in both Cloud and Edge environments. The FaaS workers, called Paranoid Stateful Lambdas (PSLs), collaborate with one another to perform large parallel computations. We exploit cryptographically hardened and mobile bundles of data, called DataCapsules, to provide persistent state for our PSLs, whose execution is protected using hardware-secured TEEs. To make PSLs easy to program and performant, we build the familiar Key-Value Store interface on top of DataCapsules in a way that allows amortization of cryptographic operations. We demonstrate PSLs functioning in an edge environment running on a group of Intel NUCs with SGXv2.

As described, our Secure Concurrency Layer (SCL), provides eventually-consistent semantics over written values using untrusted and unordered multicast. All SCL communication is encrypted, unforgeable, and private. For durability, updates are recorded in replicated DataCapsules, which are append-only cryptographically-hardened blockchain with confidentiality, integrity, and provenance guarantees. Values for inactive keys are stored in a log-structured merge-tree (LSM) in the same DataCapsule. SCL features a variety of communication optimizations, such as an efficient message passing framework that reduces the latency up to 44x from the Intel SGX SDK, and an actor-based cryptographic processing architecture that batches cryptographic operations and increases throughput by 81x.},
}

EndNote citation:

%0 Report
%A Chen, Eric 
%A Thomas, Alexander 
%A Lu, Hanming 
%A Mullen, William 
%A Ichnowski, Jeffery 
%A Arya, Rahul 
%A Krishnakumar, Nivedha 
%A Teoh, Ryan 
%A Wang, Willis 
%A Joseph, Anthony D. 
%A Kubiatowicz, John D. 
%T SCL: A Secure Concurrency Layer For Paranoid Stateful Lambdas
%I EECS Department, University of California, Berkeley
%D 2022
%8 October 21
%@ UCB/EECS-2022-232
%U http://www2.eecs.berkeley.edu/Pubs/TechRpts/2022/EECS-2022-232.html
%F Chen:EECS-2022-232