Run the EVM in an MPC.

Would be a significant contribution if someone pulled this off.

Why? We're increasingly seeing a reliance on TEEs for shielding smart contract info.

Uncomfortable security model. EVM in an MPC alleviates these concerns.

...

founder @seismic // product-focused cryptography // rookie years @ stanford, google

TEE is bad because user secrets are stored in some AWS instance. 

Sure, there are hardware guarantees, but these have repeatedly proven to be breakable.

Next best solution? EVM in MPC. Splits the user secrets across multiple machines using TSS (threshold secret sharing).

Even better if you mix and match between different TEEs (AWS Nitro, GCP SEV, Intel SGX, ...)

Maybe only need to deploy one nerd at each datacenter if they are male w/ long hair (sign of absurdly cracked dev).

New attack much harder to pull off. I'd sleep better at night.

Note: I said EVM inside of an MPC. Not EVM with an MPC.

The latter is easy to do, but it isn't enough. Need to run logic on user secrets without combining on a single machine, or you defeat the whole purpose.

So yeah- EVM in MPC would be big.

Hard. But thats okay. Many males with long hair in the world.

(and many cracked devs who do not fit this stereotype)


So attack goes from: Break into one enclave.

To now: Break into five diff enclaves in a night. Requires coordinated attacks on Google / Amazon / Intel data centers. 

And each attack needs 10+ burly guys (to get through the armed guards) and 2+ nerds (to break the enclaves).