ORTOA- a One Round Trip Oblivious Access protocol that reads or writes data stored on remote storage in one round without revealing the type of access.

The ORTOA-tee project implements this access protocol leveraging the cryptographic guarantees of trusted execution environments (hardware enclaves) and benchmarks the performance.

Follow the installation instructions found in the OpenEnclave documentation. If only using in simulation mode, you can skip step 2.

First, install the tools and libraries required to build and install the Apache Thrift compiler and C++ libraries. The following instructions are for an Ubuntu Linux based system. Pulled from this Thrift documentation.

sudo apt-get install automake bison flex g++ git libboost-all-dev libevent-dev libssl-dev libtool make pkg-config

Then, install the Thrift compiler:

sudo apt install thrift-compiler

Finally, install the Thrift C++ library:

sudo apt install libthrift-dev

First, install Redis.

ORTOA/ $ sudo apt-get install redis

Next, install hiredis. (Note: do not install multiple versions of hiredis. Otherwise, there might be some bizarre conflicts.)

# Clone hiredis
ORTOA/ $ git clone https://github.com/redis/hiredis.git
ORTOA/ $ cd hiredis

# Build hiredis
ORTOA/hiredis $ make
ORTOA/hiredis $ sudo make install

Then, install redis-plus-plus. (Since redis-plus-plus depends on hiredis, ensure that hiredis is installed first.)

# Clone redis-plus-plus
ORTOA/ $ git clone https://github.com/sewenew/redis-plus-plus.git
ORTOA/ $ cd redis-plus-plus

# Create the build directory
ORTOA/redis-plus-plus $ mkdir build
ORTOA/redis-plus-plus $ cd build

# Build redis-plus-plus
ORTOA/redis-plus-plus/build $ cmake -DREDIS_PLUS_PLUS_CXX_STANDARD=17 ..
ORTOA/redis-plus-plus/build $ make
ORTOA/redis-plus-plus/build $ sudo make install

Finally, you can clean up the repo by deleting the hiredis/ and redis-plus-plus/ directories. This is because (by default) they are installed at /usr/local.

When linking with shared libraries, and running the application, you might get the following error message:

error while loading shared libraries: xxx: cannot open shared object file: No such file or directory.

That's because the linker cannot find the shared libraries. In order to solve the problem, you can add the path where you installed hiredis and redis-plus-plus libraries, to LD_LIBRARY_PATH environment variable. For example:

export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/usr/local/lib

Check this StackOverflow question for details on how to solve the problem.

Sodium is a modern, easy-to-use software library for encryption, decryption, signatures, password hashing, and more. It can be installed with the following command:

sudo apt-get install -y libsodium-dev

Our package requires python>=3.8.* and can be initialized via pip:

# Create & activate a virtual environment
ORTOA/ $ python3 -m venv .venv
ORTOA/ $ . .venv/bin/activate

# Install the package
ORTOA/ $ pip install -e extras/

The dev dependencies can be installed via pip as well:

ORTOA/ $ pip install -e extras/[dev]

We provide a bash script library srcipts/ortoa-lib.sh that houses a collection of scripts and utilities to manage the ORTOA environment. It can be sourced as follows:

ORTOA/ $ source scripts/ortoa-lib.sh

# Create build directory
ORTOA/ $ mkdir build && cd build

# Build
ORTOA/build/ $ cmake ..
ORTOA/build/ $ make

ORTOA/ $ ortoa-simulate -h

ORTOA/ $ ortoa-client-run -h

Linking failure example:

error while loading shared libraries: liblibstorage.so: cannot open shared object file: No such file or directory

Cause: linked cannot find the shared libraries

Solution:

export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:<REPO_ROOT>/install/lib