English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Personal cryptographic keys are the foundation of many secure services, butstoring these keys securely is a challenge, especially if they are used frommultiple devices. Storing keys in a centralized location, like anInternet-accessible server, raises serious security concerns (e.g. servercompromise). Hardware-based Trusted Execution Environments (TEEs) are awell-known solution for protecting sensitive data in untrusted environments,and are now becoming available on commodity server platforms.  Although the idea of protecting keys using a server-side TEE isstraight-forward, in this paper we validate this approach and show that itenables new desirable functionality. We describe the design, implementation,and evaluation of a TEE-based Cloud Key Store (CKS), an online service forsecurely generating, storing, and using personal cryptographic keys. Usingremote attestation, users receive strong assurance about the behaviour of theCKS, and can authenticate themselves using passwords while avoiding typicalrisks of password-based authentication like password theft or phishing. Inaddition, this design allows users to i) define policy-based access controlsfor keys; ii) delegate keys to other CKS users for a specified time and/or alimited number of uses; and iii) audit all key usages via a secure audit log.We have implemented a proof of concept CKS using Intel SGX and integrated thisinto GnuPG on Linux and OpenKeychain on Android. Our CKS implementationperforms approximately 6,000 signature operations per second on a singledesktop PC. The latency is in the same order of magnitude as usinglocally-stored keys, and 20x faster than smart cards.

Keys in the Clouds: Auditable Multi-device Access to Cryptographic Credentials