TeeDAO: A Decentralized Autonomous Organization for Heterogeneous TEEs

2026-06-03

AI Summary

This work addresses the limitations of existing heterogeneous Trusted Execution Environment (TEE) systems, which remain constrained by centralized management and dynamic threats. The authors propose TeeDAO, a novel three-layer framework that uniquely integrates Byzantine Fault Tolerant (BFT) consensus, heterogeneous TEEs, and proactive secret sharing. By combining heterogeneity-aware Dynamic Proactive Secret Sharing (DPSS) with secure Multi-Party Computation (MPC), TeeDAO delivers a unified interface and long-term security under dynamically reconfigurable committees. Built upon HotStuff consensus and COBRA-DPSS, the system supports diverse TEE architectures—including SGX, TDX, and CSV—and enables remote attestation–driven committee reconfiguration and key synchronization. Experimental results on a 61-node cluster demonstrate up to a 1.8× throughput improvement for key-value storage and MPC overhead below 18%, significantly enhancing decentralized trusted management capabilities.

Abstract

Trusted Execution Environments (TEEs) have emerged as a critical technology for safeguarding sensitive data and ensuring code integrity in modern computing systems. However, relying on a single TEE implementation makes systems vulnerable to a central point of attack. Building distributed-trust systems leveraging heterogeneous TEEs helps disperse trust but still faces threats from centralized management and adaptive mobile adversaries. To address these challenges, this paper introduces TeeDAO, a novel three-layer framework that automatically organizes multiple heterogeneous TEE instances and provides unified interfaces to support diverse applications, while ensuring long-term guarantees of availability, integrity, and confidentiality. TeeDAO couples BFT-ordered governance with heterogeneity-aware Distributed Proactive Secret Sharing (DPSS) and Secure Multi-Party Computation (MPC) so that attestation-driven committee changes are consistently reflected in secret recovery, resharing, and computation across a dynamic committee of heterogeneous TEEs. We implement a prototype of TeeDAO, integrating COBRA's DPSS scheme with the HotStuff BFT consensus protocol, and adapt it for Intel SGX, TDX, and Hygon CSV. Evaluations demonstrate that TeeDAO achieves up to 1.8x higher key-value store throughput in a large cluster with 61 nodes compared to state-of-the-art systems, efficient autonomous management, and minimal computation overhead (<18%) for multi-party computation tasks.

Problem

• Trusted Execution Environments
• heterogeneous TEEs
• distributed trust
• centralized management
• adaptive adversaries

Innovation

• Heterogeneous TEEs
• Decentralized Autonomous Organization
• Distributed Proactive Secret Sharing
• Byzantine Fault Tolerance
• Secure Multi-Party Computation