Type-Directed, Secure-by-Construction Enclave Partitioning for LLVM

arXiv:2609.02048 · cs.CR, cs.PL · Submitted 2026-09-02 · Read on arXiv

cs.CR, cs.PL

Submitted: 2026-09-02

Updated: 2026-09-02

Code: https://github.com/gramineproject/graphene

Terminology

• Trace — 22× in this paper · explained in 2 episodes
• Benchmark — 19× in this paper · explained in 2 episodes
• Abstraction — 5× in this paper · explained in 1 episode
• Objective Function — 3× in this paper · explained in 2 episodes
• Allocator — 2× in this paper · explained in 1 episode
• Core — 2× in this paper · explained in 2 episodes
• Verification — 2× in this paper · explained in 2 episodes
• Computer Security Foundations Symposium — 1× in this paper
• Information Leakage — 1× in this paper · explained in 2 episodes
• Secure Immediate Representation — 1× in this paper
• Structural Constraints — 1× in this paper · explained in 2 episodes

Sources

• A Comprehensive Benchmark Suite for Intel SGX

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs