SGX-Based Cloud Security Module with User's Sole Control

With the evolution of information technologies there is also a significant growth of threats in the digital realm, therefore more and more applications are using cryptographic primitives to ensure the authenticity, integrity and confidentiality of their data. It is absolutely necessary that these cryptographic operations are performed in dedicated security modules which can provide a strong level of security assurance, depending on certification. This paper describes a software security module architecture which uses Intel Software Guard Extensions (SGX) enclaves to protect the cryptographic material. The proposed security module can be used as a service in cloud environment, while still assuring a reasonable level of user's sole control.