How to implement dynamic trusted measurement for multi-tenant container platforms is an important issue in establishing trust in cloud-native services. Existing TPM-based schemes lack support for scalability, dynamism, and isolation in measurements, making integrity measurement implementation based on trusted execution environment(TEE) an excellent solution to this problem. However, challenges such as identifying the objects and timing for dynamic trustworthy measurement, bridging semantic gaps across domains, and providing multi-tenant privacy protection need to be addressed. This paper focuses on the trust invariants of container processes and proposes capturing page faults to perform cross-domain memory direct measurement on these invariants as early as possible, minimizing the potential for TOC-TOU issues. Based on this, we propose a fine-grained remote attestation method for container task execution flow information while considering privacy protection. We have implemented a prototype system, and experimental results show a performance loss of only about 8%.

The SM4 block cipher is Chinese domestic cryptography widely used to secure data confidentiality. Its performance is a key indicator in measuring the efficiency of encryption and decryption in large-scale data scenarios. In traditional tower field optimization, the paired forward and backward linear filed transformations are sandwiched between S-boxes and L-boxes for every round of the encryption operation, which introduces heavily burdensome computation times and complexity. In this paper, we propose a novel isomorphic design for the SM4 round function, where all operations are remaining in the tower filed through multiple rounds, and the paired forward and backward field transformations in each round can be omitted. Based on the isomorphic design, we introduce a more flexible fine-grained bitsliced scheme for the SM4 block cipher with the SIMD instructions, requiring only 32 independent data blocks to be processed in parallel. The experiments show that the proposed isomorphic design for the round function is superior to the traditional design, and the fine-grained bitsliced SM4 implementation on the server device and terminal device achieved 6.4 and 17.2 cycles per byte respectively, showing a performance increase of 284.3% and 54.4% compared to OpenSSL implementation(24.7 and 26.6 cycles per byte respectively).