一句话：提出可信网卡架构 TNIC，在网络接口层构建经形式化验证的硅信任根，为拜占庭云环境下的分布式系统提供高性能可信基座。
论文针对在异构且不可信（拜占庭）云环境中构建可信分布式系统的问题，提出 TNIC——一种可信网卡（Trusted NIC）架构。其设计目标有三：一是与主机 CPU 无关的统一安全架构，在网络层面提供可信隔离；二是基于硅信任根构建最小化、可验证的 TCB，提供可迁移认证（transferable authentication）与不可抵赖（non-equivocation）两个核心性质；三是利用 SmartNIC 实现硬件加速的可信网络栈。基于该架构，作者给出通用编程 API 与构建高性能可信分布式系统的方法，并对 TNIC 的安全与安全性质进行形式化验证，同时实现了四个可信分布式系统加以演示。评估显示，相较以 CPU 为中心的 TEE 系统，TNIC 最高带来 6 倍性能提升。
We introduce TNIC, a trusted NIC architecture for building trustworthy distributed systems deployed in heterogeneous, untrusted (Byzantine) cloud environments. TNIC builds a minimal, formally verified, silicon root-of-trust at the network interface level. We strive for three primary design goals: (1) a host CPU-agnostic unified security architecture by providing trustworthy network-level isolation; (2) a minimalistic and verifiable TCB based on a silicon root-of-trust by providing two core properties of transferable authentication and non-equivocation; and (3) a hardware-accelerated trustworthy network stack leveraging SmartNICs. Based on the TNIC architecture and associated network stack, we present a generic set of programming APIs and a recipe for building high-performance, trustworthy, distributed systems for Byzantine settings. We formally verify the safety and security properties of our TNIC while demonstrating its use by building four trustworthy distributed systems. Our evaluation of TNIC shows up to 6× performance improvement compared to CPU-centric TEE systems.
DOI 原文 · arXiv · PDF（开放获取） · DBLP
@inproceedings{abs-2502-05338,
title = {TNIC: A Trusted NIC Architecture: A hardware-network substrate for building high-performance trustworthy distributed systems},
author = {Dimitra Giantsidi and Julian Pritzi and Felix Gust and Antonios Katsarakis and Atsushi Koshiba and Pramod Bhatotia},
booktitle = {ASPLOS},
year = {2025},
doi = {10.1145/3676641.3716277}
}