The blockchain-based smart contract lacks privacy since the contract state and instruction code are exposed to the public. Combining smart-contract execution with Trusted Execution Environments (TEEs) provides an efficient solution, called TEE-assisted smart contracts, for protecting the confidentiality of contract states. However, the combination approaches are varied, and a systematic study is absent. Newly released systems may fail to draw upon the experience learned from existing protocols, such as repeating known design mistakes or applying TEE technology in insecure ways. In this paper, we first investigate and categorize the existing systems into two types: the layer-one solution and layer-two solution. Then, we establish an analysis framework to capture their common lights, covering the desired properties (for contract services), threat models, and security considerations (for underlying systems). Based on our taxonomy, we identify their ideal functionalities and uncover the fundamental flaws and reasons for the challenges in each specification design. We believe that this work would provide a guide for the development of TEE-assisted smart contracts, as well as a framework to evaluate future TEE-assisted confidential contract systems.
翻译:将智能合同执行与受信任的执行环境(TEE)相结合可提供一种有效的解决方案,称为TEE协助的智能合同,以保护合同状态的保密性。然而,混合方法多种多样,而且没有系统的研究。新释放的系统可能无法从现有协议中吸取经验,例如重复已知的设计错误或以不安全的方式应用TEE技术。在本文件中,我们首先调查现有系统并将其分为两类:一层解决方案和二层解决方案。然后,我们建立一个分析框架,以捕捉其共同的灯光,涵盖所希望的特性(用于合同服务)、威胁模型和安全考虑(用于基础系统)。根据我们的分类,我们查明其理想功能,发现每个规格设计中的挑战的基本缺陷和原因。我们认为,这项工作将为开发TEE协助的智能合同提供指南,并为评估未来TEE协助的保密合同系统提供一个框架。