A Scalable Identity-Based Encryption Approach for Secure Shared Memory Communication in Keystone

This paper presents IBEShare, a scalable and secure communication framework for RISC-V Keystone enclaves, combining identity-based encryption (IBE) with hardware-enforced shared memory. Existing enclave communication mechanisms either suffer from high overhead due to repeated encryption and data copying or face limitations in scalability and flexibility. IBEShare addresses these challenges by enabling direct memory sharing between enclayes, while enforcing fine-grained access control through RISC-V PMP and simplifying key management via IBE. We implement IBEShare on the Keystone platform and evaluate its performance across multiple communication models. Experimental results show that IBEShare significantly reduces latency compared to traditional encrypted copying methods, particularly in high-concurrency and large-data scenarios, demonstrating its effectiveness and scalability in secure multi-enclave systems.