2026-07-20T14:44:05Z https://drops.dagstuhl.de/oai

oai:drops-oai.dagstuhl.de:20952 2024-09-16T10:19:09Z ddc:004 open_access

CrudiTEE: A Stick-And-Carrot Approach to Building Trustworthy Cryptocurrency Wallets with TEEs Zhou, Lulu Liu, Zeyu Zhang, Fan Reiter, Michael K. Cryptocurrency wallet blockchain Cryptocurrency introduces usability challenges by requiring users to manage signing keys. Popular signing key management services (e.g., custodial wallets), however, either introduce a trusted party or burden users with managing signing key shares, posing the same usability challenges. TEE (Trusted Execution Environment) is a promising technology to avoid both, but practical implementations of TEEs suffer from various side-channel attacks that have proven hard to eliminate. This paper explores a new approach to side-channel mitigation through economic incentives for TEE-based cryptocurrency wallet solutions. By taking the cost and profit of side-channel attacks into consideration, we designed a Stick-and-Carrot-based cryptocurrency wallet, CrudiTEE, that leverages penalties (the stick) and rewards (the carrot) to disincentivize attackers from exfiltrating signing keys in the first place. We model the attacker’s behavior using a Markov Decision Process (MDP) to evaluate the effectiveness of the bounty and enable the service provider to adjust the parameters of the bounty’s reward function accordingly. Schloss Dagstuhl – Leibniz-Zentrum für Informatik Lulu Zhou and Zeyu Liu and Fan Zhang and Michael K. Reiter 2024 Is Part Of LIPIcs, Volume 316, 6th Conference on Advances in Financial Technologies (AFT 2024) InProceedings Text doc-type:ResearchArticle publishedVersion application/pdf doi:10.4230/LIPIcs.AFT.2024.16 urn:nbn:de:0030-drops-209525 https://drops.dagstuhl.de/entities/document/10.4230/LIPIcs.AFT.2024.16 eng https://creativecommons.org/licenses/by/4.0/legalcode