Dalarna University's logo and link to the university's website

du.sePublications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • chicago-author-date
  • chicago-note-bibliography
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Benchmarking Fully Homomorphic Encryption in Trusted Execution Environments: A comparison between Intel TDX, Virtual Machine and native execution
Dalarna University, School of Information and Engineering.
Dalarna University, School of Information and Engineering.
2025 (English)Independent thesis Basic level (degree of Bachelor), 10 credits / 15 HE creditsStudent thesisAlternative title
Prestandajämförelse av fullständig homomorf kryptering i betrodda exekveringsmiljöer : En jämförelse mellan Intel TDX, virtuell maskin och körning utan virtualisering (Swedish)
Abstract [en]

Data security and privacy have become more important than ever. The need for data integrity is also becoming more relevant. Supporting these requirements while also outsourcing computing to cloud services is challenging, but there are different ways to meet these requirements such as data encryption. Combining Trusted Execution Environments (TEE) with Homomorphic Encryption (HE) can provide enhanced data confidentiality as well as data integrity. Intel TDX is a newly released TEE, and little is known about combining Fully Homomorphic Encryption with Intel TDX. This study examines the performance of Intel TDX compared to a regular virtual machine (VM) implementations and examines what trade-offs must be made when prioritizing between execution rate and security. To investigate this, experiments were conducted using the different environments. A Fully Homomorphic Encryption (FHE) benchmark program with two different parameter sets was used to measure its execution time. The analysis involved plots, regression analysis and a Pareto front plot. The sample times ranged between approximately 9 ― 89 seconds. TDX and VM environments were observed tobe similar in execution time, with no environment consistently being faster. A linear relationship was found, predicting execution time vs lattice dimension. The regression analysis showed an impressive R2 value of 0.99, while the Pareto front analysis showed the optimal parameter set when considering execution rate and estimated security level for our data. 

Place, publisher, year, edition, pages
2025.
Keywords [en]
Data security and privacy have become more important than ever. The need for data integrity is also becoming more relevant. Supporting these requirements while also outsourcing computing to cloud services is challenging, but there are different ways to meet these requirements such as data encryption. Combining Trusted Execution Environments (TEE) with Homomorphic Encryption (HE) can provide enhanced data confidentiality as well as data integrity. Intel TDX is a newly released TEE, and little is known about combining Fully Homomorphic Encryption with Intel TDX. This study examines the performance of Intel TDX compared to a regular virtual machine (VM) implementations and examines what trade-offs must be made when prioritizing between execution rate and security. To investigate this, experiments were conducted using the different environments. A Fully Homomorphic Encryption (FHE) benchmark program with two different parameter sets was used to measure its execution time. The analysis involved plots, regression analysis and a Pareto front plot. The sample times ranged between approximately 9 ― 89 seconds. TDX and VM environments were observed to be similar in execution time, with no environment consistently being faster. A linear relationship was found, predicting execution time vs lattice dimension. The regression analysis showed an impressive R2 value of 0.99, while the Pareto front analysis showed the optimal parameter set when considering execution rate and estimated security level for our data.
National Category
Computer Sciences
Identifiers
URN: urn:nbn:se:du-50760OAI: oai:DiVA.org:du-50760DiVA, id: diva2:1975357
Subject / course
Microdata Analysis
Available from: 2025-06-24 Created: 2025-06-24 Last updated: 2025-10-09

Open Access in DiVA

fulltext(1905 kB)333 downloads
File information
File name FULLTEXT01.pdfFile size 1905 kBChecksum SHA-512
f2d91f2ed745d737aa5ddf267754cc9cf4f0638e68c3000db901fec5ad578be319ae2d4089417d623a9a96a4e0252f5ade5396c2dbed3af146b580384f7adcf1
Type fulltextMimetype application/pdf

By organisation
School of Information and Engineering
Computer Sciences

Search outside of DiVA

GoogleGoogle Scholar
Total: 335 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

urn-nbn

Altmetric score

urn-nbn
Total: 361 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • chicago-author-date
  • chicago-note-bibliography
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf