Project Oak: Meaningful control of data in distributed systems
1–10 of 55 posts
Re: Project Oak: Meaningful control of data in distributed systems
#2The lede is a little buried in that README [1]:
## Sealed Computing
A canonical use of Oak is to build privacy-preserving sealed computing applications.
In a sealed computing application, a node (usually a client device) sends data to an enclave application (usually a server), which processes data without the service provider hosting the enclave application being able to see the inputs, outputs, or side effects of the computation.
[1]: https://github.com/project-oak/oak?tab=readme-ov-file#sealed...
---
Seems like an attempt at a privacy-preserving alternative to running your whole phone OS image on a server?
Re: Project Oak: Meaningful control of data in distributed systems
#3I was curious if someone would build something that allows the DCAP datacenter attestation to be exposed to applications, e.g. "prove via intel that the SHA of the software running on the machine is XYZ"
Re: Project Oak: Meaningful control of data in distributed systems
#4Nice, seems like a more cost-effective alternative to homomorphic encryption
Re: Project Oak: Meaningful control of data in distributed systems
#5The lede is a little buried in that README [1]: ## Sealed Computing A canonical use of Oak is to build privacy-preserving sealed computing applications. In a sealed computing application, a node (usually a client device) sends data to an enclave application (usually a server), which processes data without the service provider hosting the enclave application being able to see the inputs, outputs, or side effects of th…
But can it deliver ads?
Re: Project Oak: Meaningful control of data in distributed systems
#6This seem to be Google's response to Apple private cloud compute [1]?
Re: Project Oak: Meaningful control of data in distributed systems
#7I was curious if someone would build something that allows the DCAP datacenter attestation to be exposed to applications, e.g. "prove via intel that the SHA of the software running on the machine is XYZ"
Like Signal did for contact discovery? https://signal.org/blog/private-contact-discovery/
Re: Project Oak: Meaningful control of data in distributed systems
#8The lede is a little buried in that README [1]: ## Sealed Computing A canonical use of Oak is to build privacy-preserving sealed computing applications. In a sealed computing application, a node (usually a client device) sends data to an enclave application (usually a server), which processes data without the service provider hosting the enclave application being able to see the inputs, outputs, or side effects of th…
But can it deliver ads?
It’s a google project, that’s probably the first use case they considered
Re: Project Oak: Meaningful control of data in distributed systems
#9I was curious if someone would build something that allows the DCAP datacenter attestation to be exposed to applications, e.g. "prove via intel that the SHA of the software running on the machine is XYZ"
>"prove via intel that the SHA of the software running on the machine is XYZ"
This is exactly the purpose of MRENCLAVE in Intel SGX remote attestation quotes (and similar fields in other TEE platforms), and proving the software identity to remote clients is a common use case.
Maybe I misunderstand - is that what you mean, or is there another use case you are looking for?
Re: Project Oak: Meaningful control of data in distributed systems
#10How does this relate/compare to AWS Nitro Enclaves? It looks like the same concept, except integrated into Intel and AMD CPUs.