TeeDAO: A Decentralized Autonomous Organization for Heterogeneous TEEs
2026-06-03 • Cryptography and Security
Cryptography and Security
AI summaryⓘ
The authors designed TeeDAO, a system that uses multiple different Trusted Execution Environments (TEEs) together to keep data safe and trustworthy. Instead of relying on just one TEE, which can be risky, TeeDAO spreads the trust across many TEEs and manages them automatically. It combines special techniques for secret sharing and consensus to make sure the system stays secure and available even if some parts change or get attacked. Their tests show TeeDAO works faster and with low extra cost compared to similar systems.
Trusted Execution EnvironmentDistributed TrustByzantine Fault ToleranceSecret SharingMulti-Party ComputationAttestationIntel SGXConsensus ProtocolHeterogeneous TEEsDistributed Systems
Authors
Pinshen Xu, Wentao Dong, Guoxing Chen, Jianyu Niu, Cong Wang, Yinqian Zhang
Abstract
Trusted Execution Environments (TEEs) have emerged as a critical technology for safeguarding sensitive data and ensuring code integrity in modern computing systems. However, relying on a single TEE implementation makes systems vulnerable to a central point of attack. Building distributed-trust systems leveraging heterogeneous TEEs helps disperse trust but still faces threats from centralized management and adaptive mobile adversaries. To address these challenges, this paper introduces TeeDAO, a novel three-layer framework that automatically organizes multiple heterogeneous TEE instances and provides unified interfaces to support diverse applications, while ensuring long-term guarantees of availability, integrity, and confidentiality. TeeDAO couples BFT-ordered governance with heterogeneity-aware Distributed Proactive Secret Sharing (DPSS) and Secure Multi-Party Computation (MPC) so that attestation-driven committee changes are consistently reflected in secret recovery, resharing, and computation across a dynamic committee of heterogeneous TEEs. We implement a prototype of TeeDAO, integrating COBRA's DPSS scheme with the HotStuff BFT consensus protocol, and adapt it for Intel SGX, TDX, and Hygon CSV. Evaluations demonstrate that TeeDAO achieves up to 1.8x higher key-value store throughput in a large cluster with 61 nodes compared to state-of-the-art systems, efficient autonomous management, and minimal computation overhead (<18%) for multi-party computation tasks.