2026-09-23T12:56:57Zhttps://api.repository.cam.ac.uk/server/oai/request

oai:www.repository.cam.ac.uk:1810/3869742025-07-16T00:43:12Zcom_1810_219481com_1810_256065col_1810_219482

Establishing trust in confidential computation and communication systems https://doi.org/10.17863/CAM.119932 Kocaoğullar, Ceren Beresford, Alastair Modern confidential computation and communication systems aim to safeguard data in-use and protect metadata, extending privacy beyond the limits of conventional approaches. Trust is foundational to their security and adoption, yet difficult to establish due to strict privacy requirements, technical complexity, and conflicting stakeholder incentives. Anonymity networks provide metadata-private communication, protecting information such as who is talking to whom. Current anonymity systems require users to manually exchange key material and network information, a cumbersome operation which hinders adoption. This dissertation presents Pudding, a user discovery protocol that automates trust establishment through email addresses, hides usernames from unauthorised parties, and provides fault-tolerance. Confidential Computing uses Trusted Execution Environments (TEEs) built for secure and isolated computation to protect data privacy and integrity during processing. As TEEs combine specialised hardware and software from multiple vendors, users must trust a complex and often opaque ecosystem. This dissertation introduces the Confidential Computing Transparency framework as a structured, progressive model to help users make informed decisions by increasing transparency and accountability. A user study, involving over 800 participants, is conducted, demonstrating higher transparency improves trust, and that detailed explanations further increase willingness to share sensitive data. TEEs can also be used to support dynamic peer-to-peer networks, such as vehicle-to-vehicle communication systems for semi- or fully-autonomous driving, where machine-to-machine trust is essential for collaboration. This dissertation presents Careful Whisper, a gossip-based protocol for establishing trust in such environments. The protocol can reduce attestation cost from quadratic to linear, allows cross-protocol interoperability, and performs reliably in unreliable networks. These contributions demonstrate practical, scalable ways to build more trustworthy confidential computing and communication. In doing so, they provide some of the foundations required for future secure and private computer systems. University of Cambridge 2025-05-07 Thesis Doctoral Doctor of Philosophy (PhD) Cambridge Trust King's College, Cambridge Google https://www.repository.cam.ac.uk/handle/1810/386974 https://apollo8-f-pro.lib.cam.ac.uk/bitstreams/5e8a120b-d957-43a9-b6ac-1c615f8530d7/download 6bfb5ec92387b71448737a15ab673dab https://apollo8-f-pro.lib.cam.ac.uk/bitstreams/a74444af-17cd-4c45-a00c-bb5dd0156173/download 87eda9de84448d1f82354d60eee3eb5f http://purl.org/NET/rdflicense/allrightsreserved computer security anonymity networks Confidential Computing privacy