Cryptology ePrint Archive: Report 2021/1642

SecNDP: Secure Near-Data Processing with Untrusted Memory

Wenjie Xiong and Liu Ke and Dimitrije Jankov and Michael Kounavis and Xiaochen Wang and Eric Northup and Jie Amy Yang and Bilge Acun and Carole-Jean Wu and Ping Tak Peter Tang and G. Edward Suh and Xuan Zhang and Hsien-Hsin S. Lee.

Abstract: Today's data-intensive applications increasingly suffer from significant performance bottlenecks due to the limited memory bandwidth of the classical von Neumann architecture. Near-Data Processing (NDP) has been proposed to perform computation near memory or data storage to reduce data movement for improving performance and energy consumption. However, the untrusted NDP processing units (PUs) bring in new threats to workloads that are private and sensitive, such as private database queries and private machine learning inferences. Meanwhile, most existing secure hardware designs do not consider off-chip components trustworthy. Once data leaving the processor, they must be protected, e.g., via block cipher encryption. Unfortunately, current encryption schemes do not support computation over encrypted data stored in memory or storage, hindering the adoption of NDP techniques for sensitive workloads.

In this paper, we propose SecNDP, a lightweight encryption and verification scheme for untrusted NDP devices to perform computation over ciphertext and verify the correctness of linear operations. Our encryption scheme leverages arithmetic secret sharing in secure Multi-Party Computation (MPC) to support operations over ciphertext, and uses counter-mode encryption to reduce the decryption latency. The security of the scheme is formally proven. Compared with a non-NDP baseline, secure computation with SecNDP significantly reduces the memory bandwidth usage while providing security guarantees. We evaluate SecNDP for two workloads of distinct memory access patterns. In the setting of eight NDP units, we show a speedup up to 7.46x and energy savings of 18% over an unprotected non-NDP baseline, approaching the performance gain attained by native NDP without protection.Furthermore, SecNDP does not require any security assumption on NDP to hold, thus, using the same threat model as existing secure processors. SecNDP can be implemented without changing the NDP protocols and their inherent hardware design.

Category / Keywords: secret-key cryptography / Security and Privacy, Near-Data Processing, Cryptography, Privacy-Preserving Machine Learning

Date: received 15 Dec 2021

Contact author: wenjiex at fb com

Available format(s): PDF | BibTeX Citation

Note: Full paper with proof of security.

Version: 20211217:142730 (All versions of this report)

Short URL: ia.cr/2021/1642


[ Cryptology ePrint archive ]